last executing test programs: 2m58.891185364s ago: executing program 2 (id=90): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r5, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x3008804, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m52.96123406s ago: executing program 2 (id=99): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000010006", 0x7) waitid(0x2, r2, 0x0, 0x8, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60680, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2m51.807028065s ago: executing program 2 (id=100): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="24000000010006", 0x7) waitid(0x2, r2, 0x0, 0x8, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60680, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2m45.87290182s ago: executing program 2 (id=105): rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}}, 0x0, 0x42}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m40.402769081s ago: executing program 2 (id=115): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, &(0x7f0000000140)=""/15, 0xf, 0x4) 2m39.80224795s ago: executing program 2 (id=116): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m26.402847713s ago: executing program 3 (id=138): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x201) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x101, 0x7000, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) listen(0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 2m24.728000498s ago: executing program 32 (id=116): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 2m24.011963358s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x14, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2m23.008859053s ago: executing program 3 (id=145): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0xa0, 0xff}, 0x0, 0x0, 0x3, 0x2, 0xffffffffffff8c17, 0x2, 0x3, 0x3aa, 0x8000, 0x1, r1}) listen(r0, 0x0) 2m21.412455777s ago: executing program 3 (id=147): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 2m18.110377729s ago: executing program 3 (id=152): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m13.739966375s ago: executing program 3 (id=160): socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80203, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a', 0xd) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) 2m12.546273394s ago: executing program 33 (id=160): socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80203, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a', 0xd) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) 2m3.552406369s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x3, 0x13, 0xffff9509, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x2}, 0x0) inotify_init() r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000", 0xd3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1m59.007834674s ago: executing program 1 (id=181): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.380770481s ago: executing program 1 (id=191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x40000000000080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m53.63894669s ago: executing program 1 (id=193): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 1m53.04854707s ago: executing program 1 (id=196): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) 1m51.133783739s ago: executing program 1 (id=199): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000", 0xd3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1m50.03480263s ago: executing program 34 (id=199): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000", 0xd3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 1m13.821339557s ago: executing program 4 (id=264): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) close(0x3) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0x94f5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) 1m10.60632503s ago: executing program 4 (id=274): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(0x0, 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 1m9.007592916s ago: executing program 4 (id=275): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) 1m2.040355617s ago: executing program 4 (id=290): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000000540)=""/42, 0x2a) getdents64(r3, &(0x7f0000000040)=""/75, 0x4b) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x23}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0x1a) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0x6, 0x8, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) close(0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000040)='0\x00', 0x2) 59.53148166s ago: executing program 4 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\n', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff8e}]}, 0x30}}, 0x20000000) 56.908545456s ago: executing program 4 (id=299): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x63) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x40000000000080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 41.626167083s ago: executing program 35 (id=299): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x63) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x3, 0x3, {0x5, 0x4, 0x3, 0x8, 0x8, 0x65, 0xa53, 0x98, 0x6, 0x1, @multicast2, @multicast1}}}}}}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, 0x0, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x40000000000080, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 23.135788014s ago: executing program 0 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x3, 0x13, 0xffff9509, 0x5, 0x0, 0x9, 0x0, 0x7fffffff, 0x2}, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000", 0xd3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 21.706056581s ago: executing program 0 (id=371): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0xa0, 0xff}, 0x0, 0x0, 0x3, 0x2, 0xffffffffffff8c17, 0x2, 0x3, 0x3aa, 0x8000, 0x1, r1}) 17.920385642s ago: executing program 0 (id=378): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.613478467s ago: executing program 8 (id=388): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0xa0, 0xff}, 0x0, 0x0, 0x3, 0x2, 0xffffffffffff8c17, 0x2, 0x3, 0x3aa, 0x8000, 0x1, r1}) 11.483635366s ago: executing program 8 (id=391): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) 10.341101272s ago: executing program 6 (id=393): syz_open_dev$vim2m(0x0, 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) 10.073448773s ago: executing program 7 (id=394): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) 9.762337439s ago: executing program 0 (id=396): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 8.906128886s ago: executing program 6 (id=397): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400000600000800"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) 7.987280892s ago: executing program 5 (id=398): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) 7.764213825s ago: executing program 7 (id=399): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r0}, 0x38) 7.706908555s ago: executing program 8 (id=400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 7.649056749s ago: executing program 0 (id=401): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 6.987649465s ago: executing program 8 (id=402): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) keyctl$clear(0x7, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0xd}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x3008804, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.801374927s ago: executing program 6 (id=403): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.677708919s ago: executing program 0 (id=404): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.57346765s ago: executing program 7 (id=405): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0xff070000, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x4}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[], 0xfffffeff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r3, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x17) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r5, 0x123, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20000040) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000007c0)={&(0x7f0000000200), 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x248, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0xc41}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x16, 0x16f}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x61c}, {0x6, 0x16, 0x7ff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x48}, {0x5}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000040}, 0xd0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4810) write(r4, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x4, 0xd22, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0xa4, 0xf3, 0x7a, 0xff, 0x1a72, 0x100e, 0x8782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd10, 0x3, 0x8, 0x8, 0x50, 0xf, "", [{{0x9, 0x4, 0xb, 0xfe, 0xf, 0xa6, 0x25, 0x5d, 0x7, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "c4a3f1a95ca6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x400, 0x500, 0xdc}, {0x6, 0x24, 0x1a, 0x800, 0x4}, [@acm={0x4, 0x24, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x1, 0x3, 0xfc, 0x9, 0x44}]}], [{{0x9, 0x5, 0xa, 0xc, 0x20, 0x80, 0x9, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0xb1}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xf, 0x2b, 0x1e, [@generic={0xa, 0x21, "bb27c27d088863e8"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xa, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}, @generic={0x26, 0x4, "55c058b50e70ffe4bae5238a8f704769339ff2cd4679bac9cd6861e7a1c6376847b5564c"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x9, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x3, 0xed87feabf4f3c73a, 0x3ff, 0xb0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x6, 0x27, 0xf, [@generic={0x52, 0x4, "cf717076c49c8a5a62115d413ad77ab1d316da95b93396b468bb0f10c1aaa4ff342c543d44f09dc99d5814cd84ad4011ac07ccd640f526d5de1e6b762d8175ee589acfcf377bfec589a9c7a3178fbcc2"}, @generic={0x81, 0x3, "57a01bee7ccd1f4f61673a75e7d11a9a7b32b39923ef0b962abd51060d7d982e80e4f4f47e237780ad406d35cd97f15ca0739dda6b1d4a10dcdaaf169c7583f0086ced4259733942c1d0b0fcdf8a6c07be3d8552083b0b8184c8b3ea72ba801e67ebcaf3e9a0085dcdd71f36fbe4622e7874973c5caaa5877674b37b2c1a13"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x1, 0x40, [@generic={0xcf, 0xd, "d06d124f98fe42729f63d62a6bedc27d41de50b579c5242637e61ae698b3461c1bee8d81c850468a0a033be176e04d22dd103b6b2da307839c1308908abc221ea0104c7efca52bfda1d5217583f01ab92d71a888c2c08fd802e1024649904240962df3fcf434632f2a8bb781095cc982774b465ece61636183638054451d515180ce0f95e080f7f9ed8279e1d9fda23b555823982200c180e8aab39875fdf8fe9955940ad7738c262c8f60010d4e1ad0d3221aa845a64b27fca4a7c893c18ff5c897a558dd0aadd83234278893"}]}}, {{0x9, 0x5, 0xd, 0x66abd200ab9ba0a6, 0x8, 0x1, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x8}]}}, {{0x9, 0x5, 0x8, 0x16, 0x400, 0x6, 0x5, 0x2, [@generic={0x3, 0x22, "a4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x7}]}}, {{0x9, 0x5, 0xcfb29d2be7a77154, 0x2, 0x40, 0x40, 0xbe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x3108}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x8, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x5, 0x42, 0x3, [@generic={0x56, 0x11, "46baf33443c0d9fec02093b35ebe7ee1fbd6143d865defa2cdb0579f094016127c5f80f6c0e6bd6d18171ece22ddcc3cff24c68be25f5d5be8b177b63521fb704e6cc05f02597f344a7db00788842836df274e07"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xd}]}}, {{0x9, 0x5, 0x8f, 0x0, 0x8, 0x9, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xde}]}}, {{0x9, 0x5, 0xc, 0x4, 0x8, 0x8, 0x7f, 0x9, [@generic={0x30, 0xe, "f9767acdac3dce60662efb2769872ff0568b37999b7e8810c52e743fc0da96bc4038919087e0eaebc5e4b31596e2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x678, 0x5, 0x5, 0x4, [@generic={0xc3, 0x4, "8167a517ccb093cc1bdb6692942f9efe6f8689eb49b2850450f1ce92681505064d807cd8f24544c81779f1ce847f2c122d6a9abead2f89b3824f2753cf29eed2e3d7480de32edd0dc5edaf606df89b416cd465a5342ccc71a98fd914f32387bca87f13741455ad20c1b19ae623911aaccd808839c4b20c5ed925ca5083661259c6f519c2d85d70c9d5f9a9cca6ec6c7dc1ec37d4788d30b442d2746c6b0e758cba736ef66c53f687bd09ea05af1e0f95bfc9f3e338260a2a3a777f68c8c7cfa6cc"}]}}]}}, {{0x9, 0x4, 0x43, 0x6, 0x7, 0x46, 0xc9, 0x9d, 0x35, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x8, 0x4d, 0xfd, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x75, 0x5, 0x9, 0xff}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7a, 0x2, 0xc3, 0x81, "03f5baa5378986"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc9, 0x1, 0xfb, 0x4e, "d3c5e9", "f0"}]}, @generic={0x5d, 0x30, "d327f8dbfb9ec8bd161ceb61ed6d1ade45d55226e03cdcc990251cdd3149f890c2352b10ac1457072e2fa29014f344f090f80c7aabf5d255379ff49675f0e45faf10f7eb9b8b63a47040bf776d0222d29d59e507fd2bb98cbea32d"}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x80, 0x2, [@generic={0xf3, 0x23, "de9b5e7bdd0006beb0d40e75d27ed968c710548cdf062dce6017f615657906ca66ad1047f8701ea6a989ff0d8063dcbafdabff351b6c709e1a5787b1164b4ff9033a0dd3a443d34e74b1ecd53ba9029ef0df24722aba2a504a675dafa51de7e747c4a24833ffe83cad81114575551246a88033d88184e1def57edd47e8e54535fe6b7f76bc6b3c3569bc10be7d6c9640948102c5f74a8128b307c9a1f0b2df3cac475bda587361b8b5bcd669e5f5ab3ac61542613e3e16ae15b45db95612641a98bfbae6de5e823edf38657c025c63a045cca8ac385870f008d99c0d3121fddc37c6c1e1a2b07c3f2ea114504e536308f5"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x5, 0x0, 0xf5, [@generic={0x79, 0xe, "9fec3d9228613e2a15504ed5321fca1999799bc4cd6bed9d2283f0d016cc1fddb83a128ae1af0938badb5c22c573cedce8020296fd74648d59c06ab1f620058f581f723898542b76e265b02253e433b9fea4c77ab38f09540a5599d02434e476841d3aa21f84ec116a2449071dc1098bdf66a7d61fb43e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x965d}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x1, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0xfff7}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x38, 0x91, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0xcd}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0xa0, 0x2, [@generic={0x58, 0x1, "3723ec2f1827c74553055a68fafc9f0a32280bc6f5fa1e3e5df33840bb63a66481b05d7dc08c70dc45fb406ef60b4e393f9e060f71fe059517cf46470d27a94f4a2dc177dfc439e6cd05df71c8f4825bd4bb47e06c2d"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x9, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x8, 0xb4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x3014}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0xf523}]}}]}}, {{0x9, 0x4, 0x9d, 0x2, 0x10, 0x3f, 0x89, 0xf, 0xa, [@generic={0x57, 0x2, "bea2e72dd211090c8c33fad34d683a76c7757b3b456a7241f643409b889225b63cc88d22529610ad70b5ccd6750b694ae11afba9086ee9ad10bad7448482a66eb8484f031228f2b7d780f59d283b701102f3f1685b"}], [{{0x9, 0x5, 0xe, 0x1, 0x400, 0xe0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xfd, 0x3, 0x7, [@generic={0x7b, 0x6, "fd27419f29380ce581cef407162b9daa9ebe6049eea485d55e12c100803f1763c4104df19cd1c4178da8537842f4c87ab4633f0d383375f42280151f067f9583e1c8f5a89f84c180d327cbb3507fc8251098bcc5c62f445ad0059d5d5f08f1a21b073187a91bc5ed6464202acfd64ed4bbe155787309214694"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x3}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x4, 0x7, 0x9, [@generic={0xc9, 0x9, "53e774931f482440498f7ada1ec31ce3a66da703601ff54625930e756ac97694b7a00340efa082817de1813263731d894f7807093eb1b8dcf9cc48fd704a2e576cc70d1e884282dff664d651c941daa7c5a8f5460a0b743f827480109765ea6cd86f2646344107522c8ff69e5661585e217e829a2fbca965462707445b55fb5e44303da287c79987b8baada2666715be810740b509b7b47453f34ca0191d869dbff1990e424b6e3c48645b91a0d8caa152a088bb8221dac7127b7c86dbf2a8cc0b9720e5111e89"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0x3, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9c, 0x1}, @generic={0x31, 0x22, "20a7a76173f1f631a78df995074868b2ad00eadf1a6f676cb15eb61105f515642e8e259cb1e89fe9b11bfd625c9b97"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x0, 0xd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x200, 0x6, 0x6, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0xe, 0x12, 0x40, 0xf, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x4, 0x3, 0x0, [@generic={0x5c, 0x21, "d8796cd6dc65a11bc81109e7efddf9fb592d84e5923feb544302a7383bafd8e81d0dbb1e0cf119bfd71eb68668e23f588e7889b3469ac35b9b18804b04860a4f63d8ae104f2b6bd501880a84635c723fe1bd1be1db1a153ab6b4"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x4, 0xb, 0x7, [@generic={0xc4, 0x23, "5114b31f81444797d52aaf96c1baba0faffff3c964bb8a68e17ce52aa5b77dd030476cb592058f4748f8a2fe6979ff67947f630266b50e73a6d1b5e9afa75774a61d9d4010a2484ea66926e8d6d6ebbef3eb46c5044ea05d7f01dbc2d3159ca3e7e24d1933096d3d61e117d852c1519a9c1afb1084505deed13f4baae5fa2f3f2a93fe542a092fda23bbd341488e452e9c670ca423e8a81f41c133bca0dcab3a8f66b57d7a084cf70ebc723036aa7443d3cfbdf93b97a473d72d09681a8ca590a51c"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x1600}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x1, 0x51, 0x0, [@generic={0x40, 0x30, "cf0b2d10a856c7ddfac19687beb5306326b978c765dafa5e90a382db9a0eaadb821fb2e4a8ff6cfe99700e888ac424647fec4182e46588d261690e2fe5e6"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x48, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x3}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x0, 0x4, 0xa, [@generic={0x8e, 0xb, "cf71ae351c1babedd8d8aff8d9f090b658a7b5e60477e95415f78c55501f98796791be5188d36c1020ab562dbb94479e045212941a274111998410b716a59acce41cf856285fa2120c2e48db8bfdb16bc78744da6b3423796925bfeb386c66d50119838cb0cf334e52d9849c6f77e68d270febc36b0293ae212de3c78263306b908ed22985e854c39be4a1a3"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xcd, 0x8, 0x1, [@generic={0x54, 0x9b0c30e62b5685b4, "58583018f570d82c3425ff23721555a05ac9cd1684ee6adb7fb522424219a3e34e74392908db5cbfb2099d7334a0a9cfa544e281155c0496abec06f675f32fa293b157b5386f060596c62eed3b91121ef3ae"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0xf, 0x9, [@generic={0xbd, 0x24, "e35b2629bd5cc4bc6210b0ff12bb900deccce5e5947112c2a7514921508c5777bb0dc8e386d49fd6638890d08431c7bc9fb2beeef7ed9bd2f03f589498b8a1ab5bf0787dab386621b7ed003b30aee6f7b5a29b1e8be1f7530d7c3ebec17af3df832a6b9f45408b2e57f59d72f5793efca4943047c784c015cd404b85b3cb274fdfac4426ded62a8c3491cc13eb557fbe4364c67699b570c324e4ae1f0d12b60660eae95662492b8d1c0634c42ca7277046768e5ffec561cb878b4d"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x0, 0xb, 0x9f, [@generic={0x67, 0x21, "5ad472cd8db1d65c93a41290920a45e259883704caa8c5ab125784b272227f2026de5eae392404a1b1fb9f714dce987960f6655556e8b0b6103ac40dac45ac8a3033d7d35e72879834e87915ac09c47a03d25e643f12486f4712beaceb301ea0954faa98df"}]}}]}}]}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x110, 0x2, 0xe, 0x8, 0xff, 0x2}, 0x2e, &(0x7f0000001dc0)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x5, 0x8, 0x244, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4397d30fa71a22a0c1d83343b26bb993"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xd0, 0x6, 0x2}]}, 0x2, [{0x38, &(0x7f0000001e00)=@string={0x38, 0x3, "9a041e04a334721079c269b9311a772148b60dc1d95b80d3953fa20677b75d712914807420620faa7947e34ca8f98790aebb4d7e3fd2"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x418}}]}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 5.52333698s ago: executing program 5 (id=406): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) close(0x3) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0x94f5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0x317e, 0x4) 4.480438491s ago: executing program 7 (id=407): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) close(0x3) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e24, 0x94f5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0x317e, 0x4) 3.970015198s ago: executing program 5 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0xffffffff, 0x0, 0xff, 0x12, "ccd800000000eeff00001000000000008000"}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './my_sys/bus/pci/devices/0000:00:01.0/config', [], 0xa, "e24c8abc1a246d261ba35b1950"}, 0x3d) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) write$FUSE_WRITE(r2, 0x0, 0x0) 3.935480389s ago: executing program 6 (id=409): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000200)={0x2}, 0x8, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x228, 0x0, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x75b1817ec7c0652, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x854, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @remote, @empty, @port=0x4e22, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0xffffffffffffffff, 0x4, 0x3}, 0x3, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r5, &(0x7f0000000040)="3c5c413ecd45036a2762bb626c65640a", 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x3}, [@generic={0x91, 0x1, 0x1, 0xae}]}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 3.20764311s ago: executing program 8 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000001c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)=@generic={0x19, "459754d151572dfb8708e85fa111c2be372e43808bf6b8fa7c788f0c6904fda9c965795e71828afcbc13e7e83d1123832d39cc712f546d96b3809009250ea2450800200000000000dafff5a70753bf8df9632e71d8e7e261340052d5569225e00fdf6c9194f8ca3991543010589fd4088d13b5030000006b00"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="3c32c01bd63a2b3d488f807e97a4c2056453909ae1d9bec47b0d5b69f47358179b277b55c07a70052da97785586b73b0990cd6544dfb4a610e7a388c2897457e2b65ca47de372320a2d0d0d2df7813720edd5ad3c7524e6c5b30201b9ed38f1ccdcf918a470139000c23fcc3034b627b1287c0a20a49f3ff13c0493f0593abad19f173c884d327967a3c10bec45a5db921b04cc5", 0x94}], 0x1, &(0x7f00000004c0)=ANY=[], 0x18}, 0x2c000811) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.20326317s ago: executing program 8 (id=411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000003040), &(0x7f0000003080)={'syz', 0x1}, &(0x7f00000030c0)=ANY=[@ANYBLOB="02"], 0x18, 0xffffffffffffffff) keyctl$set_timeout(0xf, r1, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x200040d1) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x444100, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x23, 0x3, 0x2000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = dup(r0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 2.149173009s ago: executing program 6 (id=412): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 1.329210785s ago: executing program 6 (id=413): ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x1, 0x0, [0x3, 0x9, 0x800, 0x7, 0x21c970e4, 0x9, 0x7f, 0xd]}) lsetxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x8, &(0x7f0000000080)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="1f59c92bf04d2580490bad123703f3117cf07c000200000000fd1fab0000cba116", 0x0}}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502", @ANYRESDEC], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setresgid(0xee00, 0xee01, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x30, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_emit_ethernet(0xc2, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa350800490200b40065000072019078ac1414bbe0000001070bc1ac1414aae00000010100000000059a9078e0000001419d000e00670004c00c0004ac141439e000000201050000000001010973934bd7e71e3f28ec7486c61886fced939897e30009da36f4b05854c20503ae0010016586900360bff9429111e9e7f7890f447f000001ac141439ac1e20a0200000000180000001000000010000001000001000000001fb00800001000707aaac1414bb729ace0f130ac5c6f789510dab5c49c291f86822cdebbefe4a000000"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex_waitv(&(0x7f0000000100)=[{0x1, 0xfffffffffffffffe, 0x82}], 0x1, 0x0, &(0x7f0000000180), 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r4 = eventfd2(0x83, 0x80001) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x80, r4, 0x0, 0x0, 0xfbe, 0x0, 0x1, r4}]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000edd6ae78000000060a0b160000000000000000020000084c0004805240925e080001006f7366000c000280080001400000000430000180080001006e6174002400028008397770762380e90d00034000bd0a601f000240000000020800041d0000c77e0c2fc84c9eed7a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) close(r4) r6 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r6, 0xc0686611, &(0x7f0000000080)=0x68) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0xd46ae33d42132da9}, 0x200080c4) 1.209720392s ago: executing program 7 (id=414): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 1.19992047s ago: executing program 5 (id=415): syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000f00000002000000bfef000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xacb, r0}, 0x38) 1.016290739s ago: executing program 5 (id=416): r0 = socket$rxrpc(0x21, 0x2, 0x2) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) listen(r0, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @local}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0xa0, 0xff}, 0x0, 0x0, 0x3, 0x2, 0xffffffffffff8c17, 0x2, 0x3, 0x3aa, 0x8000, 0x1, r1}) 950.30439ms ago: executing program 7 (id=417): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 0s ago: executing program 5 (id=418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): atadv0: Interface activated: batadv_slave_0 [ 67.321609][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.326267][ T5603] veth1_macvtap: entered promiscuous mode [ 67.344543][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345349][ T1116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345382][ T1116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345412][ T1116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.391024][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.393763][ T116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.404488][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.404545][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.404572][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.442442][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.295935][ T5601] Bluetooth: hci2: command tx timeout [ 68.295948][ T5600] Bluetooth: hci3: command tx timeout [ 68.296013][ T4918] Bluetooth: hci1: command tx timeout [ 68.296071][ T52] Bluetooth: hci0: command tx timeout [ 68.300963][ T5604] veth0_macvtap: entered promiscuous mode [ 68.367832][ T5604] veth1_macvtap: entered promiscuous mode [ 68.378164][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.378202][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.378229][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.378255][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.386453][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.386470][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.425578][ T52] Bluetooth: hci4: command tx timeout [ 68.464852][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.464866][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.494923][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.538063][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.548239][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.548254][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.612032][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.612051][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.686442][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686539][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.686554][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.724516][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.766915][ T965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.811555][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.811573][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.834724][ T965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.900868][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.900895][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.970007][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.970026][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.398618][ T52] Bluetooth: hci0: command tx timeout [ 70.398745][ T52] Bluetooth: hci1: command tx timeout [ 70.399056][ T52] Bluetooth: hci2: command tx timeout [ 70.399322][ T52] Bluetooth: hci3: command tx timeout [ 70.532090][ T4918] Bluetooth: hci4: command tx timeout [ 70.532841][ T5804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.763056][ T5792] nbd0: detected capacity change from 0 to 127 [ 72.057657][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 72.057675][ T31] audit: type=1400 audit(1790728747.223:185): avc: denied { read write } for pid=5818 comm="syz.4.7" name="sg0" dev="devtmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.061129][ T31] audit: type=1400 audit(1790728747.223:186): avc: denied { open } for pid=5818 comm="syz.4.7" path="/dev/sg0" dev="devtmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.236982][ T31] audit: type=1326 audit(1790728747.403:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5818 comm="syz.4.7" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f004999e159 code=0x0 [ 72.325481][ T4918] block nbd0: Receive control failed (result -104) [ 73.323784][ T31] audit: type=1400 audit(1790728747.553:188): avc: denied { bpf } for pid=5826 comm="syz.2.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.323813][ T31] audit: type=1400 audit(1790728748.013:189): avc: denied { ioctl } for pid=5826 comm="syz.2.6" path="/dev/sg0" dev="devtmpfs" ino=1166 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.331893][ T31] audit: type=1400 audit(1790728748.493:190): avc: denied { create } for pid=5818 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 73.411145][ T31] audit: type=1400 audit(1790728748.573:191): avc: denied { mmap_zero } for pid=5818 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 73.782522][ T31] audit: type=1400 audit(1790728748.943:192): avc: denied { prog_load } for pid=5832 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.825745][ T31] audit: type=1400 audit(1790728748.983:193): avc: denied { read } for pid=5820 comm="syz.0.8" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.825778][ T31] audit: type=1400 audit(1790728748.983:194): avc: denied { open } for pid=5820 comm="syz.0.8" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.353376][ T5704] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.854573][ T5704] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 76.120880][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.120899][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.143182][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.143204][ T5704] usb 2-1: Product: syz [ 76.143216][ T5704] usb 2-1: Manufacturer: syz [ 76.143228][ T5704] usb 2-1: SerialNumber: syz [ 76.313346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.243546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.466611][ T5704] usb 2-1: usb_control_msg returned -71 [ 77.466653][ T5704] usbtmc 2-1:1.0: can't read capabilities [ 77.466687][ T5704] usbtmc 2-1:1.0: Failed to submit iin_urb [ 77.466759][ T5704] usbtmc 2-1:1.0: probe with driver usbtmc failed with error -90 [ 77.471225][ T5704] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 77.527778][ T5704] usb 2-1: USB disconnect, device number 2 [ 77.555315][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 77.555332][ T31] audit: type=1400 audit(1790728752.723:204): avc: denied { create } for pid=5857 comm="syz.0.16" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.576986][ T31] audit: type=1400 audit(1790728752.733:205): avc: denied { read write } for pid=5857 comm="syz.0.16" name="vbi0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.577027][ T31] audit: type=1400 audit(1790728752.733:206): avc: denied { open } for pid=5857 comm="syz.0.16" path="/dev/vbi0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.585234][ T31] audit: type=1400 audit(1790728752.733:207): avc: denied { ioctl } for pid=5857 comm="syz.0.16" path="/dev/vbi0" dev="devtmpfs" ino=948 ioctlcmd=0x5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.669294][ T31] audit: type=1400 audit(1790728753.813:208): avc: denied { mount } for pid=5857 comm="syz.0.16" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 78.675525][ T31] audit: type=1400 audit(1790728753.843:209): avc: denied { create } for pid=5857 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.734498][ T31] audit: type=1400 audit(1790728753.903:210): avc: denied { read } for pid=5857 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.736049][ T31] audit: type=1400 audit(1790728753.903:211): avc: denied { bind } for pid=5857 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.754451][ T31] audit: type=1400 audit(1790728753.923:212): avc: denied { create } for pid=5857 comm="syz.0.16" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.780575][ T31] audit: type=1400 audit(1790728753.943:213): avc: denied { ioctl } for pid=5857 comm="syz.0.16" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8095 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.069679][ T5872] Zero length message leads to an empty skb [ 79.103484][ T5868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9'. [ 81.367954][ T967] cfg80211: failed to load regulatory.db [ 83.397494][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 84.176928][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 84.176944][ T31] audit: type=1400 audit(1790728759.343:223): avc: denied { create } for pid=5895 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.257136][ T31] audit: type=1400 audit(1790728759.423:224): avc: denied { connect } for pid=5895 comm="syz.3.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.923583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 86.536707][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1057 jiffies old. [ 87.956881][ T31] audit: type=1400 audit(1790728763.123:225): avc: denied { wake_alarm } for pid=5930 comm="syz.0.25" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.408043][ T5931] nbd1: detected capacity change from 0 to 127 [ 89.410801][ T4918] block nbd1: Receive control failed (result -104) [ 89.517500][ T31] audit: type=1400 audit(1790728764.683:226): avc: denied { read write } for pid=5944 comm="syz.0.38" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.521248][ T31] audit: type=1400 audit(1790728764.683:227): avc: denied { open } for pid=5944 comm="syz.0.38" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.700746][ T31] audit: type=1400 audit(1790728764.863:228): avc: denied { ioctl } for pid=5944 comm="syz.0.38" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xaee2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.877802][ T31] audit: type=1400 audit(1790728766.043:229): avc: denied { create } for pid=5956 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.882530][ T31] audit: type=1400 audit(1790728766.043:230): avc: denied { setopt } for pid=5956 comm="syz.0.42" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.887544][ T5957] pim6reg: entered allmulticast mode [ 90.962559][ T31] audit: type=1400 audit(1790728766.123:231): avc: denied { read write } for pid=5956 comm="syz.0.42" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.962917][ T31] audit: type=1400 audit(1790728766.123:232): avc: denied { open } for pid=5956 comm="syz.0.42" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.982603][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982635][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982652][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982669][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982686][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982703][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982719][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982736][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982753][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.982769][ T5786] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 90.998078][ T5786] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz1] on syz1 [ 91.433377][ T5783] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.585223][ T5783] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 91.586797][ T5783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.586814][ T5783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 91.588286][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.588299][ T5783] usb 3-1: Product: syz [ 91.588307][ T5783] usb 3-1: Manufacturer: syz [ 91.588315][ T5783] usb 3-1: SerialNumber: syz [ 91.906477][ T5783] usb 3-1: usb_control_msg returned -71 [ 91.906502][ T5783] usbtmc 3-1:1.0: can't read capabilities [ 91.906522][ T5783] usbtmc 3-1:1.0: Failed to submit iin_urb [ 91.906555][ T5783] usbtmc 3-1:1.0: probe with driver usbtmc failed with error -90 [ 91.907152][ T5783] usbtouchscreen 3-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 91.953727][ T5783] usb 3-1: USB disconnect, device number 2 [ 92.013394][ T1216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.042122][ T31] audit: type=1400 audit(1790728767.203:233): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.043528][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.186136][ T1216] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.186176][ T1216] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 92.187930][ T1216] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 92.187997][ T1216] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 92.188014][ T1216] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 92.188046][ T1216] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 92.188062][ T1216] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 92.189627][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.189641][ T1216] usb 2-1: Product: syz [ 92.189649][ T1216] usb 2-1: Manufacturer: syz [ 92.189657][ T1216] usb 2-1: SerialNumber: syz [ 92.303384][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 92.304454][ T967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.305294][ T967] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 92.305314][ T967] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 92.305347][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.305385][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.305401][ T967] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 92.305434][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.396257][ T967] usbtmc 4-1:16.0: bulk endpoints not found [ 92.537590][ T1216] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.013474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 93.593197][ T1216] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 93.611554][ T1216] usb 2-1: USB disconnect, device number 3 [ 93.657170][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.048931][ T5980] pim6reg: entered allmulticast mode [ 95.044637][ T10] usb 4-1: USB disconnect, device number 2 [ 95.101538][ T5786] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 97.064036][ T5786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.218304][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.218331][ T5786] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 97.219052][ T5786] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 97.219066][ T5786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.219076][ T5786] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.219096][ T5786] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 97.219113][ T5786] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 97.219127][ T5786] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.219139][ T5786] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 97.220568][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.220581][ T5786] usb 3-1: Product: syz [ 97.220589][ T5786] usb 3-1: Manufacturer: syz [ 97.220597][ T5786] usb 3-1: SerialNumber: syz [ 97.472616][ T5786] usb 3-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 97.493583][ T5786] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 97.543552][ T5783] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.705108][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.705134][ T5783] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 97.705859][ T5783] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 97.705871][ T5783] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 97.705880][ T5783] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.705905][ T5783] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 97.705922][ T5783] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 97.708659][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.708671][ T5783] usb 2-1: Product: syz [ 97.708679][ T5783] usb 2-1: Manufacturer: syz [ 97.708687][ T5783] usb 2-1: SerialNumber: syz [ 98.629048][ T5786] usb 3-1: USB disconnect, device number 3 [ 98.785849][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.993350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.015986][ T5783] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.216416][ T5786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.255267][ T5783] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 100.273432][ T5704] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.273449][ T5783] usb 2-1: USB disconnect, device number 4 [ 100.348690][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.872200][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.872240][ T5786] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 100.898451][ T5786] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 100.898478][ T5786] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 100.898495][ T5786] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.898530][ T5786] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 100.898560][ T5786] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 100.898582][ T5786] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 100.900741][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.900762][ T5786] usb 3-1: Product: syz [ 100.900776][ T5786] usb 3-1: Manufacturer: syz [ 100.900790][ T5786] usb 3-1: SerialNumber: syz [ 100.915064][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 100.958739][ T5704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.964839][ T5704] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 100.964877][ T5704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.964895][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.964914][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.964933][ T5704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.964962][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.217629][ T5704] usb 5-1: usb_control_msg returned -32 [ 101.217670][ T5704] usbtmc 5-1:16.0: can't read capabilities [ 101.343716][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.365429][ T6027] nbd2: detected capacity change from 0 to 127 [ 101.371348][ T4918] block nbd2: Receive control failed (result -104) [ 101.371923][ T5852] block nbd2: Dead connection, failed to find a fallback [ 101.371940][ T5852] block nbd2: shutting down sockets [ 101.371983][ T5852] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.372034][ T5852] Buffer I/O error on dev nbd2, logical block 1, async page read [ 101.372142][ T5852] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.372162][ T5852] Buffer I/O error on dev nbd2, logical block 2, async page read [ 101.372239][ T5852] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 101.372259][ T5852] Buffer I/O error on dev nbd2, logical block 3, async page read [ 101.449860][ T5704] usb 5-1: USB disconnect, device number 2 [ 101.471479][ T5786] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 101.553554][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 101.555494][ T30] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.560491][ T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.560507][ T30] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 101.560527][ T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.560539][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.560551][ T30] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.560574][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.649968][ T30] usbtmc 2-1:16.0: bulk endpoints not found [ 101.715453][ T5786] usb 3-1: USB disconnect, device number 4 [ 101.809783][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.103698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.194888][ T2428] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 30 seconds [ 103.195414][ T2428] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 30 seconds [ 103.195442][ T2428] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 30 seconds [ 103.195463][ T2428] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 30 seconds [ 103.349967][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 104.306968][ T5786] usb 2-1: USB disconnect, device number 5 [ 105.713430][ T5704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.871969][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.871996][ T5704] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 105.890723][ T5704] usb 2-1: config index 0 descriptor too short (expected 40744, got 96) [ 105.890749][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.890768][ T5704] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.890801][ T5704] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 105.890826][ T5704] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 105.890848][ T5704] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 105.890864][ T5704] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 105.914573][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.914594][ T5704] usb 2-1: Product: syz [ 105.914606][ T5704] usb 2-1: Manufacturer: syz [ 105.914619][ T5704] usb 2-1: SerialNumber: syz [ 106.738356][ T5704] usb 2-1: 1:1 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 107.013802][ T5704] usb 2-1: 1:1: cannot set freq 48000 to ep 0x1 [ 107.156527][ T5704] usb 2-1: USB disconnect, device number 6 [ 107.963478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 108.071442][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1129 jiffies old. [ 108.284134][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 108.896492][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.029294][ T6069] nbd3: detected capacity change from 0 to 127 [ 110.413846][ T4918] block nbd3: Receive control failed (result -104) [ 114.172382][ T31] audit: type=1400 audit(1790728788.663:234): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 114.874101][ T31] audit: type=1400 audit(1790728790.043:235): avc: denied { create } for pid=6094 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.975392][ T6089] nbd4: detected capacity change from 0 to 127 [ 115.025297][ T31] audit: type=1400 audit(1790728790.153:236): avc: denied { write } for pid=6094 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.059189][ T4918] block nbd4: Receive control failed (result -104) [ 116.025947][ T6098] fuse: Unknown parameter 'group_i00000000000000000000' [ 116.424649][ T31] audit: type=1400 audit(1790728791.193:237): avc: denied { mounton } for pid=6096 comm="syz.3.80" path="/15/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.553425][ T5786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.723553][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 118.726320][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.743416][ T5786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 118.743446][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.743459][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.743472][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.743484][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.743504][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.061831][ T5786] usb 1-1: usb_control_msg returned -32 [ 119.061872][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 119.176710][ T5786] usb 1-1: USB disconnect, device number 2 [ 119.629518][ T2428] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 30 seconds [ 119.629542][ T2428] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 30 seconds [ 119.629555][ T2428] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 30 seconds [ 119.629568][ T2428] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 30 seconds [ 120.607186][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 120.686909][ T31] audit: type=1400 audit(1790728795.853:238): avc: denied { read write } for pid=6120 comm="syz.3.86" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 120.690025][ T31] audit: type=1400 audit(1790728795.853:239): avc: denied { open } for pid=6120 comm="syz.3.86" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 125.964576][ T1216] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.063720][ T5712] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.143918][ T1216] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 126.144811][ T1216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.144837][ T1216] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 126.148112][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.148132][ T1216] usb 5-1: Product: syz [ 126.148145][ T1216] usb 5-1: Manufacturer: syz [ 126.148158][ T1216] usb 5-1: SerialNumber: syz [ 126.233591][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 126.234265][ T5712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.235199][ T5712] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 126.235237][ T5712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.235258][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.235279][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.235320][ T5712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.235359][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.679809][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 127.433996][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.434026][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.437024][ T5712] usb 2-1: usb_control_msg returned -32 [ 127.437061][ T5712] usbtmc 2-1:16.0: can't read capabilities [ 127.499164][ T5712] usb 2-1: USB disconnect, device number 7 [ 127.611653][ T1216] usb 5-1: usb_control_msg returned -71 [ 127.611698][ T1216] usbtmc 5-1:1.0: can't read capabilities [ 127.611732][ T1216] usbtmc 5-1:1.0: Failed to submit iin_urb [ 127.611791][ T1216] usbtmc 5-1:1.0: probe with driver usbtmc failed with error -90 [ 127.612975][ T1216] usbtouchscreen 5-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 127.665106][ T1216] usb 5-1: USB disconnect, device number 3 [ 128.443472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.931741][ T6164] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 129.574592][ T1216] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.916613][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 130.580288][ T1216] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 130.581271][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.581299][ T1216] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 130.592212][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.592235][ T1216] usb 2-1: Product: syz [ 130.592247][ T1216] usb 2-1: Manufacturer: syz [ 130.592259][ T1216] usb 2-1: SerialNumber: syz [ 130.616827][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 131.413437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.803452][ T5852] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 30 seconds [ 132.117879][ T31] audit: type=1400 audit(1790728807.283:240): avc: denied { mount } for pid=6182 comm="syz.4.102" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.133449][ T31] audit: type=1400 audit(1790728807.293:241): avc: denied { search } for pid=6182 comm="syz.4.102" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.159280][ T31] audit: type=1400 audit(1790728807.303:242): avc: denied { read write } for pid=6182 comm="syz.4.102" name="uprobe_events" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.165457][ T31] audit: type=1400 audit(1790728807.333:243): avc: denied { open } for pid=6182 comm="syz.4.102" path="/21/trace/uprobe_events" dev="tracefs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 133.617934][ T4969] udevd[4969]: worker [5605] /devices/virtual/block/nbd0 is taking a long time [ 133.704982][ T5808] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 60 seconds [ 133.707561][ T5808] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 60 seconds [ 133.707593][ T5808] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 60 seconds [ 133.707615][ T5808] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 60 seconds [ 133.931568][ T31] audit: type=1400 audit(1790728809.093:244): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 135.904895][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 136.043325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.540303][ T1216] usb 2-1: usb_control_msg returned -110 [ 136.540343][ T1216] usbtmc 2-1:1.0: can't read capabilities [ 136.540377][ T1216] usbtmc 2-1:1.0: Failed to submit iin_urb [ 136.540428][ T1216] usbtmc 2-1:1.0: probe with driver usbtmc failed with error -90 [ 136.541400][ T1216] usbtouchscreen 2-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 137.212571][ T6203] fuse: Bad value for 'user_id' [ 137.212669][ T6203] fuse: Bad value for 'user_id' [ 138.835275][ T5786] usb 2-1: USB disconnect, device number 8 [ 138.860757][ T31] audit: type=1400 audit(1790728814.023:245): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 139.754855][ T5711] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.302698][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 140.318734][ T5711] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.356560][ T5711] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 140.356610][ T5711] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.356630][ T5711] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.356661][ T5711] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.356682][ T5711] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.356716][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.769869][ T4932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.789261][ T11] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 30 seconds [ 140.882853][ T5711] usb 5-1: usb_control_msg returned -71 [ 140.882896][ T5711] usbtmc 5-1:16.0: can't read capabilities [ 140.924249][ T4932] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 140.925217][ T4932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.925242][ T4932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 140.926967][ T4932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.926989][ T4932] usb 4-1: Product: syz [ 140.927003][ T4932] usb 4-1: Manufacturer: syz [ 140.927016][ T4932] usb 4-1: SerialNumber: syz [ 140.933666][ T5711] usb 5-1: USB disconnect, device number 4 [ 141.600247][ T31] audit: type=1400 audit(1790728816.263:246): avc: denied { mount } for pid=6216 comm="syz.1.111" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.937795][ T6221] bridge0: entered promiscuous mode [ 141.937818][ T6221] bridge0: entered allmulticast mode [ 142.004066][ T31] audit: type=1400 audit(1790728817.173:247): avc: denied { create } for pid=6222 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 142.011449][ T31] audit: type=1400 audit(1790728817.173:248): avc: denied { write } for pid=6222 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 143.281169][ T31] audit: type=1400 audit(1790728818.443:249): avc: denied { write } for pid=6231 comm="syz.2.116" name="nbd2" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.295350][ T31] audit: type=1400 audit(1790728818.463:250): avc: denied { mount } for pid=6229 comm="syz.4.114" name="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 143.668690][ T31] audit: type=1400 audit(1790728818.713:251): avc: denied { search } for pid=6229 comm="syz.4.114" name="/" dev="configfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.668963][ T31] audit: type=1400 audit(1790728818.723:252): avc: denied { search } for pid=6229 comm="syz.4.114" name="nvmet" dev="configfs" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.669169][ T31] audit: type=1400 audit(1790728818.723:253): avc: denied { search } for pid=6229 comm="syz.4.114" name="ports" dev="configfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.669365][ T31] audit: type=1400 audit(1790728818.723:254): avc: denied { write search } for pid=6229 comm="syz.4.114" name="ports" dev="configfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.232513][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 144.232530][ T31] audit: type=1400 audit(1790728819.393:273): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 144.640626][ T6240] pim6reg: entered allmulticast mode [ 144.928634][ T4932] usb 4-1: usb_control_msg returned -71 [ 144.928841][ T4932] usbtmc 4-1:1.0: can't read capabilities [ 144.929063][ T4932] usbtmc 4-1:1.0: Failed to submit iin_urb [ 144.930446][ T4932] usbtmc 4-1:1.0: probe with driver usbtmc failed with error -90 [ 145.224254][ T4932] usbtouchscreen 4-1:1.0: probe with driver usbtouchscreen failed with error -12 [ 145.330065][ T4932] usb 4-1: USB disconnect, device number 3 [ 145.694573][ T11] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 30 seconds [ 145.734188][ T31] audit: type=1400 audit(1790728820.903:274): avc: denied { setopt } for pid=6249 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.735454][ T31] audit: type=1400 audit(1790728820.903:275): avc: denied { name_bind } for pid=6249 comm="syz.1.121" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.735720][ T31] audit: type=1400 audit(1790728820.903:276): avc: denied { node_bind } for pid=6249 comm="syz.1.121" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 145.736484][ T31] audit: type=1400 audit(1790728820.903:277): avc: denied { write } for pid=6249 comm="syz.1.121" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.736636][ T31] audit: type=1400 audit(1790728820.903:278): avc: denied { connect } for pid=6249 comm="syz.1.121" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.736779][ T31] audit: type=1400 audit(1790728820.903:279): avc: denied { name_connect } for pid=6249 comm="syz.1.121" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 145.797105][ T31] audit: type=1400 audit(1790728820.963:280): avc: denied { create } for pid=6251 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.803681][ T31] audit: type=1400 audit(1790728820.963:281): avc: denied { bind } for pid=6251 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.806317][ T31] audit: type=1400 audit(1790728820.963:282): avc: denied { map } for pid=6251 comm="syz.3.120" path="socket:[10435]" dev="sockfs" ino=10435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 149.706743][ T5808] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 60 seconds [ 149.706779][ T5808] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 60 seconds [ 149.706801][ T5808] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 60 seconds [ 149.706822][ T5808] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 60 seconds [ 149.828337][ T6266] nbd5: detected capacity change from 0 to 127 [ 149.879628][ T4918] block nbd5: Receive control failed (result -32) [ 149.910306][ T11] block nbd5: Dead connection, failed to find a fallback [ 149.911306][ T11] block nbd5: shutting down sockets [ 149.911353][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.912030][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 149.912083][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 149.912121][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 149.912158][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 149.913272][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.924833][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 149.924859][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 149.924886][ T11] Buffer I/O error on dev nbd5, logical block 2, async page read [ 149.924921][ T11] Buffer I/O error on dev nbd5, logical block 3, async page read [ 149.925835][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.925902][ T11] Buffer I/O error on dev nbd5, logical block 0, async page read [ 149.925938][ T11] Buffer I/O error on dev nbd5, logical block 1, async page read [ 149.926289][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.937223][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.937845][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.938360][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.939590][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.939714][ T6013] ldm_validate_partition_table(): Disk read failed. [ 149.940090][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 149.941281][ T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.047417][ T6013] Dev nbd5: unable to read RDB block 0 [ 150.192334][ T6013] nbd5: unable to read partition table [ 150.278528][ T6013] ldm_validate_partition_table(): Disk read failed. [ 150.299310][ T6013] Dev nbd5: unable to read RDB block 0 [ 150.302383][ T6013] nbd5: unable to read partition table [ 151.576679][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 151.576704][ T31] audit: type=1400 audit(1790728826.743:286): avc: denied { ioctl } for pid=6278 comm="syz.3.123" path="socket:[10481]" dev="sockfs" ino=10481 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.659655][ T6280] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 151.768877][ T6280] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 151.816119][ T31] audit: type=1400 audit(1790728826.983:287): avc: denied { create } for pid=6278 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.825999][ T31] audit: type=1400 audit(1790728826.993:288): avc: denied { ioctl } for pid=6278 comm="syz.3.123" path="socket:[10495]" dev="sockfs" ino=10495 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.874854][ T31] audit: type=1400 audit(1790728827.043:289): avc: denied { bind } for pid=6278 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 151.905554][ T31] audit: type=1400 audit(1790728827.073:290): avc: denied { connect } for pid=6278 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.511474][ T31] audit: type=1400 audit(1790728827.353:291): avc: denied { create } for pid=6277 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.511521][ T31] audit: type=1400 audit(1790728827.353:292): avc: denied { write } for pid=6277 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.306838][ T31] audit: type=1400 audit(1790728828.473:293): avc: denied { name_bind } for pid=6293 comm="syz.0.134" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.308845][ T31] audit: type=1400 audit(1790728828.473:294): avc: denied { name_connect } for pid=6293 comm="syz.0.134" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.387542][ T31] audit: type=1400 audit(1790728828.553:295): avc: denied { read } for pid=6297 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.388117][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 154.941768][ T4969] udevd[4969]: worker [5606] /devices/virtual/block/nbd1 is taking a long time [ 156.793854][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 156.793876][ T31] audit: type=1400 audit(1790728831.953:299): avc: denied { write } for pid=6315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.962909][ T31] audit: type=1400 audit(1790728833.123:300): avc: denied { write } for pid=6349 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.093038][ T31] audit: type=1400 audit(1790728833.253:301): avc: denied { create } for pid=6351 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.149443][ T31] audit: type=1400 audit(1790728833.293:302): avc: denied { read } for pid=6351 comm="syz.1.142" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 158.149609][ T31] audit: type=1400 audit(1790728833.293:303): avc: denied { open } for pid=6351 comm="syz.1.142" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 159.606909][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.624011][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.626753][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.629383][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.665781][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.213674][ T4918] Bluetooth: hci5: command tx timeout [ 162.223462][ T31] audit: type=1400 audit(1790728837.233:304): avc: denied { write } for pid=6379 comm="syz.1.148" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 162.226744][ T11] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 60 seconds [ 162.462466][ T31] audit: type=1400 audit(1790728837.623:305): avc: denied { write } for pid=6362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.784839][ T31] audit: type=1400 audit(1790728837.953:306): avc: denied { write } for pid=6394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.022241][ T6400] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 163.796744][ T5808] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 90 seconds [ 163.796778][ T5808] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 90 seconds [ 163.796806][ T5808] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 90 seconds [ 163.796827][ T5808] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 90 seconds [ 164.022060][ T967] hid_parser_main: 134 callbacks suppressed [ 164.022081][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022102][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022120][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022138][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022156][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022174][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022192][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022211][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022229][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.022246][ T967] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.031939][ T967] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 164.074922][ T31] audit: type=1400 audit(1790728839.243:307): avc: denied { read } for pid=6403 comm="syz.4.151" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 164.074962][ T31] audit: type=1400 audit(1790728839.243:308): avc: denied { open } for pid=6403 comm="syz.4.151" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 164.202890][ T6406] fido_id[6406]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 164.256919][ T6410] ======================================================= [ 164.256919][ T6410] WARNING: The mand mount option has been deprecated and [ 164.256919][ T6410] and is ignored by this kernel. Remove the mand [ 164.256919][ T6410] option from the mount to silence this warning. [ 164.256919][ T6410] ======================================================= [ 164.263429][ T4918] Bluetooth: hci5: command tx timeout [ 164.358752][ T31] audit: type=1400 audit(1790728839.523:309): avc: denied { mount } for pid=6409 comm="syz.3.147" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 164.412725][ T31] audit: type=1400 audit(1790728839.573:310): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 164.438774][ T31] audit: type=1400 audit(1790728839.603:311): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.989592][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.009212][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.010386][ T6364] bridge_slave_0: entered allmulticast mode [ 165.057885][ T6364] bridge_slave_0: entered promiscuous mode [ 165.116259][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.117013][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.121042][ T6364] bridge_slave_1: entered allmulticast mode [ 165.179637][ T6364] bridge_slave_1: entered promiscuous mode [ 165.662250][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.688774][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.234907][ T31] audit: type=1400 audit(1790728841.383:312): avc: denied { write } for pid=6422 comm="syz.0.153" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.235128][ T31] audit: type=1400 audit(1790728841.393:313): avc: denied { write } for pid=6422 comm="syz.0.153" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.393361][ T4918] Bluetooth: hci5: command tx timeout [ 168.444679][ T4918] Bluetooth: hci5: command tx timeout [ 168.512688][ T6364] team0: Port device team_slave_0 added [ 168.525872][ T6364] team0: Port device team_slave_1 added [ 168.587536][ T31] audit: type=1400 audit(1790728843.753:314): avc: denied { create } for pid=6443 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.625833][ T6448] 9pnet_virtio: no channels available for device syz [ 168.678097][ T31] audit: type=1400 audit(1790728843.823:315): avc: denied { create } for pid=6443 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.330846][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.336126][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.336181][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.444557][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.444582][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.444608][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.662174][ T6439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 169.702904][ T6364] hsr_slave_0: entered promiscuous mode [ 169.724953][ T6364] hsr_slave_1: entered promiscuous mode [ 169.725731][ T6364] debugfs: 'hsr0' already exists in 'hsr' [ 169.725748][ T6364] Cannot create hsr debugfs directory [ 170.133817][ T6453] 9pnet_virtio: no channels available for device syz [ 170.321241][ T4969] udevd[4969]: worker [6016] /devices/virtual/block/nbd2 is taking a long time [ 170.321480][ T4969] udevd[4969]: worker [6014] /devices/virtual/block/nbd3 is taking a long time [ 170.502114][ T6457] 9pnet_virtio: no channels available for device syz [ 171.422986][ T5852] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 60 seconds [ 171.963580][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.966424][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.967333][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.968174][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.969096][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.126405][ T6466] syzkaller0: entered promiscuous mode [ 172.126536][ T6466] syzkaller0: entered allmulticast mode [ 172.180806][ T31] audit: type=1400 audit(1790728847.343:316): avc: denied { write } for pid=6465 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.207130][ T31] audit: type=1400 audit(1790728847.373:317): avc: denied { prog_load } for pid=6462 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.300505][ T31] audit: type=1400 audit(1790728847.463:318): avc: denied { map_create } for pid=6469 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.302497][ T31] audit: type=1400 audit(1790728847.463:319): avc: denied { map_read map_write } for pid=6469 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.502494][ T6364] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.668686][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.025832][ T6364] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.082001][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.082689][ T6364] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.110805][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.122864][ T6364] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.137764][ T6364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.339648][ T31] audit: type=1400 audit(1790728848.493:320): avc: denied { write } for pid=6481 comm="syz.4.166" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.339888][ T31] audit: type=1400 audit(1790728848.493:321): avc: denied { write } for pid=6481 comm="syz.4.166" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 174.103953][ T4918] Bluetooth: hci1: command tx timeout [ 175.141632][ T31] audit: type=1400 audit(1790728850.303:322): avc: denied { write } for pid=6485 comm="syz.1.167" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.787421][ T31] audit: type=1400 audit(1790728850.953:323): avc: denied { bind } for pid=6495 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.792475][ T31] audit: type=1400 audit(1790728850.953:324): avc: denied { setopt } for pid=6495 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.825133][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 175.833805][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 175.874559][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.902194][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.929915][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.929962][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.950805][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.950873][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.955692][ T11] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 60 seconds [ 176.995993][ T4918] Bluetooth: hci1: command tx timeout [ 177.787851][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.142778][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.144442][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.144562][ T6460] bridge_slave_0: entered allmulticast mode [ 178.148868][ T6460] bridge_slave_0: entered promiscuous mode [ 178.155418][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.155485][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.155589][ T6460] bridge_slave_1: entered allmulticast mode [ 178.156724][ T6460] bridge_slave_1: entered promiscuous mode [ 178.862384][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.879574][ T6530] bridge1: entered promiscuous mode [ 178.879588][ T6530] bridge1: entered allmulticast mode [ 178.882382][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.051171][ T6460] team0: Port device team_slave_0 added [ 179.061540][ T6460] team0: Port device team_slave_1 added [ 179.063846][ T4918] Bluetooth: hci1: command tx timeout [ 179.312217][ T31] audit: type=1400 audit(1790728854.463:325): avc: denied { write } for pid=6533 comm="syz.0.175" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.312457][ T31] audit: type=1400 audit(1790728854.473:326): avc: denied { write } for pid=6533 comm="syz.0.175" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.843602][ T11] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 90 seconds [ 179.843641][ T11] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 90 seconds [ 179.843663][ T11] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 90 seconds [ 179.843683][ T11] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 90 seconds [ 179.951368][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.951384][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.951405][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.000172][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.000185][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.000203][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.311393][ T4918] Bluetooth: hci1: command tx timeout [ 181.340619][ T6539] 9pnet_virtio: no channels available for device syz [ 181.402468][ T6460] hsr_slave_0: entered promiscuous mode [ 181.411221][ T6460] hsr_slave_1: entered promiscuous mode [ 181.419861][ T6460] debugfs: 'hsr0' already exists in 'hsr' [ 181.419875][ T6460] Cannot create hsr debugfs directory [ 181.591089][ T6549] 9pnet_virtio: no channels available for device syz [ 182.123666][ T31] audit: type=1400 audit(1790728857.283:327): avc: denied { create } for pid=6551 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.181076][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 182.207643][ T6364] veth0_vlan: entered promiscuous mode [ 182.472512][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 182.496026][ T986] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.388068][ T4969] udevd[4969]: worker [5963] /devices/virtual/block/nbd4 is taking a long time [ 183.404855][ T1016] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.473265][ T6364] veth1_vlan: entered promiscuous mode [ 184.474042][ T5610] Bluetooth: Fragment is too long (len 14, expected 2) [ 184.552025][ T6364] veth0_macvtap: entered promiscuous mode [ 184.556100][ T6364] veth1_macvtap: entered promiscuous mode [ 184.570529][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.590850][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.622050][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.627405][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.627441][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.627467][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.627492][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.627524][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.790520][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.790540][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.844296][ T6460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.863265][ T6460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.864358][ T6460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.871097][ T6460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.880664][ T6460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.907192][ T6460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.907934][ T6460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.910325][ T6460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.917372][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.917390][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.049244][ T31] audit: type=1400 audit(1790728860.213:328): avc: denied { mounton } for pid=6364 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 185.212104][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.393585][ T967] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.603659][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 185.610724][ T967] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.611729][ T967] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 185.611771][ T967] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.611792][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.611814][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.611836][ T967] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.611871][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.762449][ T31] audit: type=1400 audit(1790728860.923:329): avc: denied { create } for pid=6580 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 185.785748][ T31] audit: type=1400 audit(1790728860.953:330): avc: denied { setopt } for pid=6580 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 185.918327][ T967] usb 2-1: usb_control_msg returned -32 [ 185.918369][ T967] usbtmc 2-1:16.0: can't read capabilities [ 186.203969][ T31] audit: type=1400 audit(1790728861.323:331): avc: denied { write } for pid=6582 comm="syz.0.184" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.204080][ T31] audit: type=1400 audit(1790728861.333:332): avc: denied { write } for pid=6582 comm="syz.0.184" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.693481][ T6564] Bluetooth: hci2: command 0x0406 tx timeout [ 186.693598][ T6564] Bluetooth: hci4: command 0x0406 tx timeout [ 186.693683][ T6564] Bluetooth: hci3: command 0x0406 tx timeout [ 186.696168][ T6566] Bluetooth: hci0: command 0x0406 tx timeout [ 186.973945][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.980115][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.980191][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.019684][ T5712] usb 2-1: USB disconnect, device number 9 [ 187.038570][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.038657][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.108999][ T6460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.109021][ T6460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.399562][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.187'. [ 187.492309][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 188.613043][ T6616] 9pnet_virtio: no channels available for device syz [ 188.761876][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.761921][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.124789][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.223592][ T6627] SET target dimension over the limit! [ 189.227079][ T31] audit: type=1400 audit(1790728864.393:333): avc: denied { mount } for pid=6618 comm="syz.0.192" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 190.844497][ T6644] SET target dimension over the limit! [ 191.536975][ T31] audit: type=1400 audit(1790728866.703:334): avc: denied { unmount } for pid=6364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 192.362435][ T6460] veth0_vlan: entered promiscuous mode [ 192.376020][ T6460] veth1_vlan: entered promiscuous mode [ 192.480172][ T6460] veth0_macvtap: entered promiscuous mode [ 192.502863][ T6460] veth1_macvtap: entered promiscuous mode [ 192.559436][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.576409][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.597013][ T11] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 90 seconds [ 192.624083][ T1116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.624127][ T1116] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.624157][ T1116] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.624188][ T1116] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.697332][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.201'. [ 192.729961][ T6654] 9pnet_virtio: no channels available for device syz [ 192.780253][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.780273][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.849175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.849194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.895153][ T4918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.900728][ T4918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.910850][ T4918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.929547][ T4918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.930423][ T4918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.914735][ T2428] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 120 seconds [ 193.914771][ T2428] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 120 seconds [ 193.914792][ T2428] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 120 seconds [ 193.914812][ T2428] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 120 seconds [ 195.034461][ T5600] Bluetooth: hci0: command tx timeout [ 197.063881][ T5600] Bluetooth: hci0: command tx timeout [ 199.261291][ T5600] Bluetooth: hci0: command tx timeout [ 199.558023][ T6702] 9pnet_virtio: no channels available for device syz [ 200.619932][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 200.984082][ T31] audit: type=1400 audit(1790728876.153:335): avc: denied { block_suspend } for pid=6718 comm="syz.0.206" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.281770][ T6656] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.281823][ T6656] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.281920][ T6656] bridge_slave_0: entered allmulticast mode [ 201.286152][ T6656] bridge_slave_0: entered promiscuous mode [ 201.291066][ T6656] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.291134][ T6656] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.291431][ T6656] bridge_slave_1: entered allmulticast mode [ 201.296657][ T6656] bridge_slave_1: entered promiscuous mode [ 201.303970][ T4918] Bluetooth: hci0: command tx timeout [ 201.388621][ T6656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.397015][ T6656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.596873][ T31] audit: type=1400 audit(1790728876.743:336): avc: denied { write } for pid=6726 comm="syz.0.218" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.597096][ T31] audit: type=1400 audit(1790728876.753:337): avc: denied { write } for pid=6726 comm="syz.0.218" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.107166][ T11] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 90 seconds [ 202.108938][ T6656] team0: Port device team_slave_0 added [ 202.111217][ T6656] team0: Port device team_slave_1 added [ 202.131223][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.131237][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.131254][ T6656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.132650][ T6656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.132660][ T6656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.132676][ T6656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.161896][ T6656] hsr_slave_0: entered promiscuous mode [ 202.162709][ T6656] hsr_slave_1: entered promiscuous mode [ 202.163142][ T6656] debugfs: 'hsr0' already exists in 'hsr' [ 202.163156][ T6656] Cannot create hsr debugfs directory [ 204.710439][ T6742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.220'. [ 206.005142][ T6656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 206.033528][ T11] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 90 seconds [ 206.041957][ T6656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.068555][ T6656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 206.090114][ T6656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.092574][ T6656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 206.099497][ T6656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.101870][ T6656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 206.135280][ T6656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.902767][ T31] audit: type=1400 audit(1790728881.533:338): avc: denied { write } for pid=6757 comm="syz.6.215" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 206.902811][ T31] audit: type=1400 audit(1790728881.543:339): avc: denied { write } for pid=6757 comm="syz.6.215" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.248075][ T6656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.265112][ T6656] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.270432][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.270518][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.282954][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.283097][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.518647][ T6772] netlink: 32 bytes leftover after parsing attributes in process `syz.5.222'. [ 207.907764][ T31] audit: type=1400 audit(1790728883.063:340): avc: denied { read } for pid=6777 comm="syz.4.228" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 207.907814][ T31] audit: type=1400 audit(1790728883.063:341): avc: denied { open } for pid=6777 comm="syz.4.228" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.336261][ T6787] SET target dimension over the limit! [ 208.662762][ T6790] 9pnet_virtio: no channels available for device syz [ 208.732498][ T6793] bridge1: entered promiscuous mode [ 208.732535][ T6793] bridge1: entered allmulticast mode [ 209.990654][ T31] audit: type=1400 audit(1790728885.143:342): avc: denied { write } for pid=6796 comm="syz.0.231" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.990887][ T31] audit: type=1400 audit(1790728885.153:343): avc: denied { write } for pid=6796 comm="syz.0.231" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.532071][ T11] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 120 seconds [ 210.532095][ T11] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 120 seconds [ 210.532109][ T11] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 120 seconds [ 210.532123][ T11] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 120 seconds [ 211.320121][ T6656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.625657][ T6656] veth0_vlan: entered promiscuous mode [ 213.653893][ T6656] veth1_vlan: entered promiscuous mode [ 213.712038][ T6656] veth0_macvtap: entered promiscuous mode [ 213.723043][ T6656] veth1_macvtap: entered promiscuous mode [ 213.748764][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.779306][ T6656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.823761][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.824043][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.824104][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.824132][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.534963][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.534978][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.635374][ T5845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.635395][ T5845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.722098][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 216.788593][ T6857] 9pnet_virtio: no channels available for device syz [ 216.863434][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 216.863873][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.865066][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 216.865107][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.865129][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.865151][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.865172][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.865204][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.717399][ T10] usb 8-1: usb_control_msg returned -32 [ 217.717440][ T10] usbtmc 8-1:16.0: can't read capabilities [ 218.092893][ T5704] usb 8-1: USB disconnect, device number 2 [ 219.219541][ T30] hid_parser_main: 62 callbacks suppressed [ 219.219561][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219583][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219603][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219620][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219638][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219655][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219673][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219691][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219709][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.219726][ T30] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 219.246040][ T30] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 219.350219][ T6872] fido_id[6872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.506094][ T31] audit: type=1400 audit(1790728894.673:344): avc: denied { read write } for pid=6873 comm="syz.7.248" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.510811][ T31] audit: type=1400 audit(1790728894.673:345): avc: denied { open } for pid=6873 comm="syz.7.248" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.566537][ T31] audit: type=1400 audit(1790728894.733:346): avc: denied { create } for pid=6873 comm="syz.7.248" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.569599][ T31] audit: type=1400 audit(1790728894.733:347): avc: denied { map } for pid=6873 comm="syz.7.248" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.569764][ T31] audit: type=1400 audit(1790728894.733:348): avc: denied { read write } for pid=6873 comm="syz.7.248" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 219.672752][ T31] audit: type=1400 audit(1790728894.833:349): avc: denied { append } for pid=6873 comm="syz.7.248" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 222.066825][ T4918] Bluetooth: Unexpected continuation frame (len 16) [ 222.179719][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 222.665799][ T11] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 120 seconds [ 223.943840][ T5808] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 150 seconds [ 223.943877][ T5808] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 150 seconds [ 223.943898][ T5808] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 150 seconds [ 223.943919][ T5808] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 150 seconds [ 224.174022][ T6904] 9pnet_virtio: no channels available for device syz [ 226.788596][ T6920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 228.713479][ T5704] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 228.864536][ T5704] usb 6-1: Using ep0 maxpacket: 8 [ 228.922578][ T5704] usb 6-1: device descriptor read/all, error -71 [ 228.954691][ T4918] Bluetooth: Fragment is too long (len 14, expected 2) [ 229.079020][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.266'. [ 229.843502][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 229.877207][ T6949] pim6reg: entered allmulticast mode [ 229.878667][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.258'. [ 229.972195][ T5704] hid_parser_main: 62 callbacks suppressed [ 229.972215][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972236][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972253][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972271][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972289][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972307][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972324][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972342][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972358][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.972376][ T5704] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 230.049956][ T5704] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 230.073934][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.073975][ T30] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 230.076375][ T30] usb 1-1: config index 0 descriptor too short (expected 40744, got 96) [ 230.076400][ T30] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 230.076418][ T30] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 230.076460][ T30] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 230.076487][ T30] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 230.076510][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 230.076531][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 230.076552][ T30] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 230.078508][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.078532][ T30] usb 1-1: Product: syz [ 230.078545][ T30] usb 1-1: Manufacturer: syz [ 230.078558][ T30] usb 1-1: SerialNumber: syz [ 231.327505][ T31] audit: type=1400 audit(1790728905.943:350): avc: denied { append } for pid=6956 comm="syz.5.270" name="cec0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.327617][ T31] audit: type=1400 audit(1790728905.953:351): avc: denied { create } for pid=6956 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 231.327734][ T31] audit: type=1400 audit(1790728906.023:352): avc: denied { prog_run } for pid=6956 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.405115][ T6964] 9pnet_virtio: no channels available for device syz [ 231.643385][ T6955] fido_id[6955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.681756][ T30] usb 1-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 231.684388][ T30] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 231.926581][ T30] usb 1-1: USB disconnect, device number 3 [ 232.028954][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.106516][ T6981] netlink: 32 bytes leftover after parsing attributes in process `syz.6.273'. [ 233.312968][ T11] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 120 seconds [ 234.093475][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 234.243709][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 234.264359][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.267237][ T30] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 234.267363][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.267393][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.267420][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.267447][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.267540][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.690605][ T30] usb 7-1: usb_control_msg returned -32 [ 234.690756][ T30] usbtmc 7-1:16.0: can't read capabilities [ 234.895832][ T30] usb 7-1: USB disconnect, device number 2 [ 236.115935][ T11] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 120 seconds [ 239.502488][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.287'. [ 240.624993][ T11] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 150 seconds [ 240.625031][ T11] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 150 seconds [ 240.625054][ T11] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 150 seconds [ 240.625075][ T11] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 150 seconds [ 243.168717][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.291'. [ 243.203619][ T986] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.203727][ T986] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.203759][ T986] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.203777][ T986] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.367217][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.291'. [ 243.388274][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.291'. [ 244.382099][ T7054] nbd6: detected capacity change from 0 to 127 [ 244.562847][ T7057] nbd7: detected capacity change from 0 to 127 [ 244.572733][ T5600] block nbd7: Receive control failed (result -32) [ 244.610892][ T11] block nbd7: Dead connection, failed to find a fallback [ 244.610907][ T11] block nbd7: shutting down sockets [ 244.610915][ T11] blk_print_req_error: 70 callbacks suppressed [ 244.610922][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.610937][ T11] buffer_io_error: 138 callbacks suppressed [ 244.610943][ T11] Buffer I/O error on dev nbd7, logical block 0, async page read [ 244.610952][ T11] Buffer I/O error on dev nbd7, logical block 1, async page read [ 244.610960][ T11] Buffer I/O error on dev nbd7, logical block 2, async page read [ 244.610968][ T11] Buffer I/O error on dev nbd7, logical block 3, async page read [ 244.721951][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.721982][ T11] Buffer I/O error on dev nbd7, logical block 0, async page read [ 244.721997][ T11] Buffer I/O error on dev nbd7, logical block 1, async page read [ 244.722009][ T11] Buffer I/O error on dev nbd7, logical block 2, async page read [ 244.722022][ T11] Buffer I/O error on dev nbd7, logical block 3, async page read [ 244.754374][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.754403][ T11] Buffer I/O error on dev nbd7, logical block 0, async page read [ 244.754417][ T11] Buffer I/O error on dev nbd7, logical block 1, async page read [ 244.763677][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.763852][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.763989][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.764112][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.764218][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.764259][ T6013] ldm_validate_partition_table(): Disk read failed. [ 244.764335][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.764444][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 244.764658][ T6013] Dev nbd7: unable to read RDB block 0 [ 244.766100][ T6013] nbd7: unable to read partition table [ 244.953500][ T6013] ldm_validate_partition_table(): Disk read failed. [ 244.954842][ T6013] Dev nbd7: unable to read RDB block 0 [ 244.957583][ T6013] nbd7: unable to read partition table [ 245.385737][ T4918] block nbd6: Receive control failed (result -104) [ 245.631287][ T31] audit: type=1400 audit(1790728920.793:353): avc: denied { name_bind } for pid=7068 comm="syz.0.286" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 245.663900][ T31] audit: type=1400 audit(1790728920.833:354): avc: denied { node_bind } for pid=7068 comm="syz.0.286" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 245.885223][ T31] audit: type=1400 audit(1790728921.053:355): avc: denied { read write } for pid=7071 comm="syz.5.300" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.885267][ T31] audit: type=1400 audit(1790728921.053:356): avc: denied { open } for pid=7071 comm="syz.5.300" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 245.888871][ T31] audit: type=1400 audit(1790728921.053:357): avc: denied { ioctl } for pid=7071 comm="syz.5.300" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.934384][ T5786] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.085161][ T5786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 247.092054][ T5786] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 247.111515][ T5786] usb 6-1: config index 0 descriptor too short (expected 40744, got 96) [ 247.111541][ T5786] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 247.111555][ T5786] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.111577][ T5786] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 247.111595][ T5786] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 247.111608][ T5786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 247.111621][ T5786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 247.111633][ T5786] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 247.176541][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.176569][ T5786] usb 6-1: Product: syz [ 247.176584][ T5786] usb 6-1: Manufacturer: syz [ 247.176597][ T5786] usb 6-1: SerialNumber: syz [ 247.584027][ T5786] usb 6-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 247.589308][ T5786] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 247.742742][ T5786] usb 6-1: USB disconnect, device number 4 [ 247.892566][ T6984] udevd[6984]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.388234][ T7085] SET target dimension over the limit! [ 249.758884][ T7095] 9pnet_virtio: no channels available for device syz [ 249.887358][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 250.019697][ T43] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.035647][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.035674][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.035693][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.080714][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 250.081264][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.306'. [ 250.185812][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.185841][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.744636][ T11] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 150 seconds [ 254.449671][ T4969] udevd[4969]: worker [5605] /devices/virtual/block/nbd0 timeout; kill it [ 254.449752][ T4969] udevd[4969]: seq 10564 '/devices/virtual/block/nbd0' killed [ 254.472835][ T2428] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 180 seconds [ 254.472869][ T2428] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 180 seconds [ 254.472890][ T2428] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 180 seconds [ 254.472911][ T2428] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 180 seconds [ 256.280777][ T31] audit: type=1326 audit(1790728931.443:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.5.319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933739e159 code=0x0 [ 258.120819][ T5711] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 258.319196][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.319358][ T5711] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 258.359919][ T5711] usb 1-1: config index 0 descriptor too short (expected 40744, got 96) [ 258.359996][ T5711] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 258.360035][ T5711] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.360121][ T5711] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 258.360216][ T5711] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 258.360280][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 258.360308][ T5711] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 258.360336][ T5711] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 258.521999][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.522058][ T5711] usb 1-1: Product: syz [ 258.522094][ T5711] usb 1-1: Manufacturer: syz [ 258.522109][ T5711] usb 1-1: SerialNumber: syz [ 259.204614][ T5711] usb 1-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 259.206924][ T5711] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 259.313732][ T5711] usb 1-1: USB disconnect, device number 4 [ 259.532742][ T6984] udevd[6984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.963341][ T5711] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 260.143329][ T5711] usb 7-1: Using ep0 maxpacket: 8 [ 260.312977][ T5711] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.364343][ T5711] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 260.364392][ T5711] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.364411][ T5711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.364433][ T5711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.364452][ T5711] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.364483][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.952749][ T5711] usb 7-1: GET_CAPABILITIES returned 0 [ 260.952774][ T5711] usbtmc 7-1:16.0: can't read capabilities [ 262.215107][ T30] usb 7-1: USB disconnect, device number 3 [ 262.358235][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.359212][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.359633][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.363523][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.374096][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.779489][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 263.729335][ T11] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 150 seconds [ 264.051265][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 264.511534][ T5600] Bluetooth: hci6: command tx timeout [ 265.818151][ T31] audit: type=1400 audit(1790728940.613:359): avc: denied { append } for pid=7208 comm="syz.6.340" name="cec0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 266.185969][ T11] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 150 seconds [ 266.584451][ T5600] Bluetooth: hci6: command tx timeout [ 267.691481][ T7184] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.692964][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.693056][ T7184] bridge_slave_0: entered allmulticast mode [ 267.719318][ T7184] bridge_slave_0: entered promiscuous mode [ 267.737742][ T7184] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.737785][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.739079][ T7184] bridge_slave_1: entered allmulticast mode [ 267.765876][ T7184] bridge_slave_1: entered promiscuous mode [ 267.997022][ T7184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.016073][ T7184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.229393][ T7184] team0: Port device team_slave_0 added [ 269.083636][ T5600] Bluetooth: hci6: command tx timeout [ 269.099433][ T7184] team0: Port device team_slave_1 added [ 269.269200][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.345'. [ 269.363908][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.363924][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.363947][ T7184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.365440][ T7184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.365452][ T7184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.365472][ T7184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.203810][ T7184] hsr_slave_0: entered promiscuous mode [ 270.204629][ T7184] hsr_slave_1: entered promiscuous mode [ 270.205744][ T7184] debugfs: 'hsr0' already exists in 'hsr' [ 270.205761][ T7184] Cannot create hsr debugfs directory [ 270.663600][ T11] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 180 seconds [ 270.663625][ T11] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 180 seconds [ 270.663639][ T11] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 180 seconds [ 270.663652][ T11] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 180 seconds [ 271.177074][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.354'. [ 271.776873][ T5600] Bluetooth: hci6: command tx timeout [ 272.313083][ T7277] SET target dimension over the limit! [ 272.892925][ T7184] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.920707][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.981942][ T7184] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 273.017324][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.017773][ T7184] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 273.058322][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.060730][ T7184] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 273.108225][ T7184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.699023][ T7291] fuse: Bad value for 'rootmode' [ 274.362033][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.422509][ T7184] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.436684][ T967] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 274.462476][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.462569][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.506952][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.507044][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.388682][ T11] block nbd6: Possible stuck request ffff8880284d7000: control (read@0,4096B). Runtime 30 seconds [ 275.432245][ T967] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.432290][ T967] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 275.459194][ T967] usb 6-1: config index 0 descriptor too short (expected 40744, got 96) [ 275.459226][ T967] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 275.459244][ T967] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.459282][ T967] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 275.459316][ T967] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.459339][ T967] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 52, changing to 7 [ 275.459361][ T967] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid maxpacket 9272, setting to 1024 [ 275.459389][ T967] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 275.543519][ T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.543547][ T967] usb 6-1: Product: syz [ 275.543561][ T967] usb 6-1: Manufacturer: syz [ 275.543574][ T967] usb 6-1: SerialNumber: syz [ 276.020834][ T967] usb 6-1: 1:1 : invalid sync pipe. bmAttributes 31, bLength 9, bSynchAddress 37 [ 276.031906][ T967] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 276.121622][ T967] usb 6-1: USB disconnect, device number 5 [ 276.259199][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.431693][ T7184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.263344][ T5786] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 279.435549][ T5786] usb 7-1: Using ep0 maxpacket: 8 [ 279.437320][ T5786] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 279.438584][ T5786] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 279.438767][ T5786] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 279.438781][ T5786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 279.438794][ T5786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.438807][ T5786] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.438837][ T5786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.675697][ T5786] usb 7-1: GET_CAPABILITIES returned 0 [ 280.675739][ T5786] usbtmc 7-1:16.0: can't read capabilities [ 280.906102][ T31] audit: type=1400 audit(1790728956.073:360): avc: denied { write } for pid=7327 comm="syz.6.367" name="usbtmc0" dev="devtmpfs" ino=2893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 281.008167][ T5704] usb 7-1: USB disconnect, device number 4 [ 281.026969][ T7184] veth0_vlan: entered promiscuous mode [ 281.065952][ T7184] veth1_vlan: entered promiscuous mode [ 281.130172][ T7184] veth0_macvtap: entered promiscuous mode [ 281.141260][ T7184] veth1_macvtap: entered promiscuous mode [ 281.174602][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.196742][ T7184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.334604][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.334644][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.334673][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.334701][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.458074][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.458095][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.607134][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.607147][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.802418][ T7350] pim6reg: entered allmulticast mode [ 282.592547][ T30] hid_parser_main: 62 callbacks suppressed [ 282.592572][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592594][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592613][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592631][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592650][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592668][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592687][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592705][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592723][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.592742][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 282.699158][ T30] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 282.983334][ T4918] Bluetooth: hci5: command 0x0406 tx timeout [ 283.354037][ T5852] block nbd2: Possible stuck request ffff888028390000: control (read@0,1024B). Runtime 180 seconds [ 284.763143][ T2428] block nbd0: Possible stuck request ffff888028300000: control (read@0,1024B). Runtime 210 seconds [ 284.763999][ T2428] block nbd0: Possible stuck request ffff8880283001c0: control (read@1024,1024B). Runtime 210 seconds [ 284.764056][ T2428] block nbd0: Possible stuck request ffff888028300380: control (read@2048,1024B). Runtime 210 seconds [ 284.764198][ T2428] block nbd0: Possible stuck request ffff888028300540: control (read@3072,1024B). Runtime 210 seconds [ 286.615266][ T4969] udevd[4969]: worker [6016] /devices/virtual/block/nbd2 timeout; kill it [ 286.616019][ T4969] udevd[4969]: seq 10717 '/devices/virtual/block/nbd2' killed [ 286.616055][ T4969] udevd[4969]: worker [5606] /devices/virtual/block/nbd1 timeout; kill it [ 286.617044][ T4969] udevd[4969]: seq 10582 '/devices/virtual/block/nbd1' killed [ 288.163336][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 288.241777][ T7396] SET target dimension over the limit! [ 288.703322][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 288.703840][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.704724][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 288.704771][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.704793][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.704815][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.704835][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.704868][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.930455][ T5786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 288.970778][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 288.970824][ T9] usbtmc 7-1:16.0: can't read capabilities [ 289.117332][ T7407] SET target dimension over the limit! [ 289.548839][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 289.578855][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.585696][ T5786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 289.585816][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.585844][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.585872][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.585898][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.585993][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.085032][ T9] usb 7-1: USB disconnect, device number 5 [ 290.103768][ T5786] usb 1-1: GET_CAPABILITIES returned 0 [ 290.103794][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 291.109426][ T5711] hid_parser_main: 62 callbacks suppressed [ 291.109444][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109464][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109482][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109500][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109517][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109535][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109552][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109570][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109589][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.109607][ T5711] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 291.112360][ T5711] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.03 Device [syz1] on syz1 [ 291.248837][ T5712] usb 1-1: USB disconnect, device number 5 [ 291.297633][ T7425] fido_id[7425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.612040][ T31] audit: type=1400 audit(1790728966.763:361): avc: denied { write } for pid=7427 comm="syz.6.392" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.612284][ T31] audit: type=1400 audit(1790728966.773:362): avc: denied { write } for pid=7427 comm="syz.6.392" name="subsystems" dev="configfs" ino=9634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 294.343886][ T5852] block nbd3: Possible stuck request ffff888028415080: control (read@0,4096B). Runtime 180 seconds [ 295.511445][ T4969] udevd[4969]: worker [6014] /devices/virtual/block/nbd3 timeout; kill it [ 295.511507][ T4969] udevd[4969]: seq 10795 '/devices/virtual/block/nbd3' killed [ 295.511534][ T4969] udevd[4969]: worker [5963] /devices/virtual/block/nbd4 timeout; kill it [ 295.511597][ T4969] udevd[4969]: seq 10797 '/devices/virtual/block/nbd4' killed [ 296.964050][ T5852] block nbd4: Possible stuck request ffff888028470000: control (read@0,4096B). Runtime 180 seconds [ 297.190947][ T30] hid_parser_main: 62 callbacks suppressed [ 297.190969][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.190990][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191009][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191027][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191045][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191064][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191082][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191101][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191119][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.191148][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 297.280192][ T5786] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 297.299324][ T30] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 297.428323][ T7478] fido_id[7478]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 297.447144][ T5786] usb 7-1: Using ep0 maxpacket: 8 [ 297.452707][ T5786] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 297.463569][ T5786] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 297.463621][ T5786] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.463641][ T5786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 297.463663][ T5786] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 297.463683][ T5786] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.463720][ T5786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.732769][ T5786] usb 7-1: GET_CAPABILITIES returned 0 [ 297.732810][ T5786] usbtmc 7-1:16.0: can't read capabilities [ 298.051252][ T30] usb 7-1: USB disconnect, device number 6 [ 298.884257][ T7495] SET target dimension over the limit! [ 298.924708][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 299.353394][ T5712] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 300.413319][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 300.414980][ T5712] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 300.415834][ T5712] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 300.415859][ T5712] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.415872][ T5712] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.415884][ T5712] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.415897][ T5712] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.415917][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.196675][ T5852] block nbd1: Possible stuck request ffff888028360000: control (read@0,1024B). Runtime 210 seconds [ 301.196721][ T5852] block nbd1: Possible stuck request ffff8880283601c0: control (read@1024,1024B). Runtime 210 seconds [ 301.196763][ T5852] block nbd1: Possible stuck request ffff888028360380: control (read@2048,1024B). Runtime 210 seconds [ 301.196784][ T5852] block nbd1: Possible stuck request ffff888028360540: control (read@3072,1024B). Runtime 210 seconds [ 301.221771][ T5712] usb 1-1: GET_CAPABILITIES returned 0 [ 301.221807][ T5712] usbtmc 1-1:16.0: can't read capabilities [ 301.548353][ T30] usb 1-1: USB disconnect, device number 6 [ 302.663444][ T32] INFO: task syz.2.116:6232 blocked for more than 143 seconds. [ 302.663468][ T32] Not tainted syzkaller #0 [ 302.663478][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.663485][ T32] task:syz.2.116 state:D stack:28280 pid:6232 tgid:6231 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 302.663539][ T32] Call Trace: [ 302.663546][ T32] [ 302.663555][ T32] __schedule+0x1259/0x6920 [ 302.663582][ T32] ? __lock_acquire+0x5c0/0x1f40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.663604][ T32] ? do_raw_spin_lock+0x128/0x260 [ 302.663633][ T32] ? __pfx___schedule+0x10/0x10 [ 302.663658][ T32] ? find_held_lock+0x2b/0x80 [ 302.663685][ T32] ? schedule+0x225/0x2c0 [ 302.663715][ T32] schedule+0xdd/0x2c0 [ 302.663742][ T32] schedule_preempt_disabled+0x13/0x30 [ 302.663769][ T32] __mutex_lock+0xccb/0x1bd0 [ 302.663789][ T32] ? bdev_open+0x41a/0xe40 [ 302.663812][ T32] ? find_held_lock+0x2b/0x80 [ 302.663839][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 302.663875][ T32] ? bdev_open+0x41a/0xe40 [ 302.663894][ T32] bdev_open+0x41a/0xe40 [ 302.663917][ T32] ? iput+0x3a/0x40 [ 302.663939][ T32] blkdev_open+0x34e/0x4f0 [ 302.663965][ T32] do_dentry_open+0x6ab/0x14d0 [ 302.663988][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 302.664017][ T32] vfs_open+0x82/0x3f0 [ 302.664047][ T32] path_openat+0x19fa/0x2440 [ 302.664080][ T32] ? __pfx_path_openat+0x10/0x10 [ 302.664112][ T32] do_file_open+0x20e/0x430 [ 302.664139][ T32] ? __pfx_do_file_open+0x10/0x10 [ 302.664181][ T32] ? _raw_spin_unlock+0x28/0x50 [ 302.664207][ T32] ? alloc_fd+0x471/0x7a0 [ 302.664240][ T32] do_sys_openat2+0x10f/0x1e0 [ 302.664267][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 302.664292][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 302.664393][ T32] __x64_sys_openat+0x12d/0x210 [ 302.664422][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 302.664464][ T32] do_syscall_64+0x123/0x790 [ 302.664486][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.664506][ T32] RIP: 0033:0x7f2e81b5e98e [ 302.664522][ T32] RSP: 002b:00007f2e82b41b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.664541][ T32] RAX: ffffffffffffffda RBX: 00007f2e82b426c0 RCX: 00007f2e81b5e98e [ 302.664554][ T32] RDX: 0000000000002002 RSI: 00007f2e82b41c00 RDI: ffffffffffffff9c [ 302.664566][ T32] RBP: 00007f2e82b41c00 R08: 0000000000000000 R09: 0000000000000000 [ 302.664577][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 302.664589][ T32] R13: 00007f2e81e26038 R14: 00007f2e81e25fa0 R15: 00007fffa506aa18 [ 302.664615][ T32] [ 302.664647][ T32] [ 302.664647][ T32] Showing all locks held in the system: [ 302.664657][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 302.664669][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 302.664730][ T32] locks held by kworker/u8:8/1016: 2, last CPU#1: [ 302.664742][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 302.664795][ T32] #1: ffffc9000509fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 302.664916][ T32] locks held by getty/5361: 2, on CPU#1: [ 302.664928][ T32] #0: ffff8880368cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 302.664973][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 302.665017][ T32] locks held by udevd/5605: 1, on CPU#1: [ 302.665029][ T32] #0: ffff8880282d3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665079][ T32] locks held by udevd/5606: 1, on CPU#1: [ 302.665091][ T32] #0: ffff8880282d7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665142][ T32] locks held by udevd/5963: 1, on CPU#0: [ 302.665155][ T32] #0: ffff888027029350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665201][ T32] locks held by udevd/6014: 1, on CPU#0: [ 302.665213][ T32] #0: ffff88802833f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665258][ T32] locks held by udevd/6016: 1, on CPU#0: [ 302.665270][ T32] #0: ffff88802833b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665314][ T32] locks held by syz.2.116/6232: 1, on CPU#0: [ 302.665326][ T32] #0: ffff88802833b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665370][ T32] locks held by udevd/6248: 1, on CPU#0: [ 302.665382][ T32] #0: ffff888027bdd350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 302.665425][ T32] locks held by syz-executor/6364: 1, last CPU#1: [ 302.665437][ T32] #0: ffff88807d8c4460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 302.665492][ T32] locks held by syz-executor/6460: 1, last CPU#0: [ 302.665505][ T32] #0: ffff888051e78460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 302.665562][ T32] locks held by syz-executor/7184: 1, last CPU#1: [ 302.665574][ T32] #0: ffff888047966460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 302.665631][ T32] [ 302.665635][ T32] ============================================= [ 302.665635][ T32] [ 302.665643][ T32] NMI backtrace for cpu 0 [ 302.665655][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.665674][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 302.665685][ T32] Call Trace: [ 302.665691][ T32] [ 302.665697][ T32] dump_stack_lvl+0x100/0x190 [ 302.665724][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 302.665752][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.665773][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 302.665801][ T32] sys_info+0x141/0x190 [ 302.665823][ T32] watchdog+0xcb1/0x1030 [ 302.665850][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 302.665876][ T32] ? __pfx_watchdog+0x10/0x10 [ 302.665898][ T32] ? __kthread_parkme+0x18f/0x230 [ 302.665923][ T32] ? kthread+0x13a/0x450 [ 302.665946][ T32] ? __pfx_watchdog+0x10/0x10 [ 302.665965][ T32] kthread+0x373/0x450 [ 302.665989][ T32] ? __pfx_kthread+0x10/0x10 [ 302.666014][ T32] ret_from_fork+0x730/0xd60 [ 302.666036][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 302.666057][ T32] ? __switch_to+0x800/0x10f0 [ 302.666089][ T32] ? __pfx_kthread+0x10/0x10 [ 302.666116][ T32] ret_from_fork_asm+0x1a/0x30 [ 302.666147][ T32] [ 302.666154][ T32] Sending NMI from CPU 0 to CPUs 1: [ 302.666177][ C1] NMI backtrace for cpu 1 [ 302.666188][ C1] CPU: 1 UID: 0 PID: 6364 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 302.666204][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 302.666212][ C1] RIP: 0010:__css_rstat_updated+0x185/0x590 [ 302.666232][ C1] Code: 00 0f 85 97 03 00 00 4c 8b 63 20 49 83 fd 08 0f 83 4b 03 00 00 4a 8d 14 ed 20 a9 65 8e 48 b8 00 00 00 00 00 fc ff df 48 89 d1 <48> c1 e9 03 80 3c 01 00 0f 85 3c 03 00 00 4e 03 24 ed 20 a9 65 8e [ 302.666245][ C1] RSP: 0018:ffffc90002ed7410 EFLAGS: 00000097 [ 302.666256][ C1] RAX: dffffc0000000000 RBX: ffff88801da8ee00 RCX: ffffffff8e65a928 [ 302.666266][ C1] RDX: ffffffff8e65a928 RSI: ffffffff8204ade3 RDI: ffff88801da8ee20 [ 302.666275][ C1] RBP: 1ffff920005dae84 R08: 0000000000000005 R09: 0000000000000000 [ 302.666284][ C1] R10: 0000000000000002 R11: 0000000000000001 R12: 0000607edc171dc0 [ 302.666293][ C1] R13: 0000000000000001 R14: ffff88801da8ee08 R15: 0000000000000001 [ 302.666303][ C1] FS: 0000555559747500(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 302.666318][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.666328][ C1] CR2: 0000001b329f3ff8 CR3: 000000005d2ed000 CR4: 00000000003526f0 [ 302.666337][ C1] Call Trace: [ 302.666342][ C1] [ 302.666348][ C1] ? __pfx___css_rstat_updated+0x10/0x10 [ 302.666369][ C1] __mod_memcg_lruvec_state+0x28a/0x5b0 [ 302.666390][ C1] mod_memcg_lruvec_state+0x1d0/0x280 [ 302.666407][ C1] lru_gen_del_folio.constprop.0+0x645/0xd00 [ 302.666429][ C1] ? __pfx_lru_gen_del_folio.constprop.0+0x10/0x10 [ 302.666452][ C1] __page_cache_release.part.0+0x406/0x1440 [ 302.666473][ C1] folios_put_refs+0x70b/0xaa0 [ 302.666493][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 302.666512][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 302.666528][ C1] shmem_undo_range+0x5e5/0x1570 [ 302.666544][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 302.666564][ C1] ? kernel_text_address+0x8d/0x100 [ 302.666589][ C1] ? __kernel_text_address+0xd/0x30 [ 302.666601][ C1] ? unwind_get_return_address+0x59/0xa0 [ 302.666620][ C1] ? arch_stack_walk+0xa6/0xf0 [ 302.666644][ C1] ? kasan_save_stack+0x3f/0x50 [ 302.666660][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 302.666675][ C1] shmem_evict_inode+0x3b1/0xca0 [ 302.666690][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 302.666703][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 302.666719][ C1] ? lock_acquire+0x1d1/0x380 [ 302.666734][ C1] ? find_held_lock+0x2b/0x80 [ 302.666752][ C1] ? evict+0x37e/0xad0 [ 302.666763][ C1] ? evict+0x37e/0xad0 [ 302.666776][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 302.666789][ C1] evict+0x3c2/0xad0 [ 302.666802][ C1] ? __pfx_evict+0x10/0x10 [ 302.666814][ C1] ? lock_acquire+0x1d1/0x380 [ 302.666830][ C1] ? iput.part.0+0x981/0x1050 [ 302.666845][ C1] iput.part.0+0x989/0x1050 [ 302.666860][ C1] iput+0x35/0x40 [ 302.666871][ C1] filename_unlinkat+0x466/0x730 [ 302.666890][ C1] ? __pfx_filename_unlinkat+0x10/0x10 [ 302.666912][ C1] ? do_getname+0x191/0x390 [ 302.666926][ C1] __x64_sys_unlink+0x46/0x70 [ 302.666945][ C1] do_syscall_64+0x123/0x790 [ 302.666959][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.666973][ C1] RIP: 0033:0x7f933739d247 [ 302.666984][ C1] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 302.666996][ C1] RSP: 002b:00007ffef8c9c2d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 302.667009][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f933739d247 [ 302.667018][ C1] RDX: 00007ffef8c9c300 RSI: 00007ffef8c9c390 RDI: 00007ffef8c9c390 [ 302.667026][ C1] RBP: 00007ffef8c9c390 R08: 00007ffef8c9d390 R09: 00000000ffffffff [ 302.667035][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffef8c9d420 [ 302.667043][ C1] R13: 00007f93374344bb R14: 0000000000049a30 R15: 00007ffef8c9d460 [ 302.667057][ C1] [ 302.668664][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 303.674248][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 303.683361][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 303.693411][ T32] Call Trace: [ 303.696676][ T32] [ 303.699591][ T32] dump_stack_lvl+0x100/0x190 [ 303.704265][ T32] vpanic+0x553/0x970 [ 303.708229][ T32] ? __pfx_vpanic+0x10/0x10 [ 303.712719][ T32] panic+0xd1/0xe0 [ 303.716421][ T32] ? __pfx_panic+0x10/0x10 [ 303.720829][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 303.726971][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 303.733110][ T32] ? watchdog.cold+0x1ec/0x234 [ 303.737874][ T32] watchdog.cold+0x1fd/0x234 [ 303.742477][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 303.748280][ T32] ? __pfx_watchdog+0x10/0x10 [ 303.752972][ T32] ? __kthread_parkme+0x18f/0x230 [ 303.757984][ T32] ? kthread+0x13a/0x450 [ 303.762215][ T32] ? __pfx_watchdog+0x10/0x10 [ 303.766892][ T32] kthread+0x373/0x450 [ 303.770947][ T32] ? __pfx_kthread+0x10/0x10 [ 303.775526][ T32] ret_from_fork+0x730/0xd60 [ 303.780105][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 303.785199][ T32] ? __switch_to+0x800/0x10f0 [ 303.789866][ T32] ? __pfx_kthread+0x10/0x10 [ 303.794444][ T32] ret_from_fork_asm+0x1a/0x30 [ 303.799202][ T32] [ 303.802398][ T32] Kernel Offset: disabled [ 303.806698][ T32] Rebooting in 86400 seconds..