last executing test programs: 2m32.768349919s ago: executing program 0 (id=1361): socket(0x848000000015, 0x805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0xec778000) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) socket$inet(0x2, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xf20}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m32.127493529s ago: executing program 0 (id=1365): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 2m31.653905266s ago: executing program 0 (id=1368): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x20000, 0x800}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES8=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x468}, 0x1, 0x0, 0x0, 0xd4}, 0x44010) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/81, 0xffffff8d}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000060) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f00008a9000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m29.27606074s ago: executing program 0 (id=1375): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) syz_usb_connect(0x2, 0x3b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x800, 0x3, 0xc}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) (async) syz_usb_connect(0x2, 0x3b, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x800, 0x3, 0xc}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) 2m25.677780204s ago: executing program 0 (id=1384): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/199, 0x1c, 0xc7, 0x1, 0x8}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r2, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX=r4], 0x27) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0xfffffffc, @local}, 0x20) sendmmsg$inet6(r0, 0x0, 0x0, 0xff00) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 2m24.982643672s ago: executing program 0 (id=1387): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010027bd70000000000001000000080007008a0101024e00010003dfe4dd9e6efa9e72e4065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e4000008000c000300040008000800ffffffff0800020007"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c0001800800020001008610cae5efd7b52a5a450000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x578410eb) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r8) ftruncate(0xffffffffffffffff, 0x200004) 2m9.870546047s ago: executing program 32 (id=1387): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010027bd70000000000001000000080007008a0101024e00010003dfe4dd9e6efa9e72e4065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e4000008000c000300040008000800ffffffff0800020007"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c0001800800020001008610cae5efd7b52a5a450000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r6, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x578410eb) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r8, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r8) ftruncate(0xffffffffffffffff, 0x200004) 1m7.481303956s ago: executing program 1 (id=1708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$unix(0x1, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x3) 1m6.884266218s ago: executing program 1 (id=1709): sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x51, 0x0, 0x0, 0x4, 0x8000000000000000, 0x6b44, 0xffffffff, 0xfffffffe}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x4000010, 0xffffffffffffffff, 0xa47e9000) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1010000007c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798", 0x98}], 0x1}, 0x0) (async) syz_pidfd_open(0x0, 0x0) (async) setns(0xffffffffffffffff, 0x20000) (async) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) getpriority(0x1, 0x0) syz_io_uring_setup(0xe00, &(0x7f00000001c0)={0x0, 0x81a6, 0x10, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000240), 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) 1m6.471898695s ago: executing program 1 (id=1715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fbe879b8fe555cf2cec6a75d3e4a274ce4f4bbcd62efdb27d7353b9fa267404ff86d227bdfde8ed7b555ff4b333bb47245a04efd89775ac8c9e8cfc61cd6a5b984cbf2c88700f2a2e5c757d15085611c084f3f98ef3e7efd8d8eecae08cb1d6f4b92baba08bb3d330844b73b371f8067e867f69df53579bc6bb7a39a018d60ff7f63da2a78d8dfd48178fcd1b88dc239f5c912a9d7638dcd81ff72995f2a2cf4732125b7794baf6f416d32cca91ba363d209884769538af9e876799f8b914faa928fd2907dc2a1ecd8e57929ffcdbc9aa7a4a7aaa7725e2175d3e9e7fda9620958f3efe74e063003", 0xe8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000001c000000001400000000000000290000003e00000005000000000000001400000000000000290000003400000001000000000000001400000000000000290000000b00000000000007000000003822000000000000290000000400000000030000000000000502000604"], 0xb0}}], 0x2, 0x20080058) 1m5.267580612s ago: executing program 1 (id=1718): openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.110808498s ago: executing program 2 (id=1721): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$unix(0x1, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) close(0x3) 1m4.640710513s ago: executing program 5 (id=1723): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r1 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x800007, @loopback, 0xffffff70}}, 0x6, 0x2a}, 0x90) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x420100, 0x0) epoll_create1(0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0e0}, 0x0) r4 = io_uring_setup(0x4757, &(0x7f0000000040)={0x0, 0x2150, 0x800, 0x7, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0xfffffffd, 0x9) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x80000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x85, 0xffffffff, 0x2}) 1m4.15612682s ago: executing program 2 (id=1725): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) capget(&(0x7f0000000040)={0x20071026}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 1m4.090277185s ago: executing program 5 (id=1726): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000280)=0x7fff) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x4aa, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x2}, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000b98f9ef10e26ea337b9cecb57b795d99637259d280de268e30bc7c4cde2a32c3bd69673edaf2f5cbc7b5c1c5412dcd45bcff8dd6e4cba32eac3989a33991dc97c431243a276b95e7893e76f7cbf5f3f3b6cb62855a55f0fc50a4b37410b74e47d75f67ac8ce32c15f31b5b348f6fe8011a86e632b037c60e84f24207fceda"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m4.063758214s ago: executing program 1 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x92000, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000900)=[0x4, 0x1], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) 1m3.828685012s ago: executing program 4 (id=1728): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x0, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x24}, 0x28) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYBLOB="0000000000000000b705000008b7cd0fc6000000a500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0xb, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x134, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x123, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="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", @generic="3ed73c"]}]}, 0x134}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) fgetxattr(r8, &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000200)=""/178, 0xb2) 1m2.990975989s ago: executing program 2 (id=1729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fbe879b8fe555cf2cec6a75d3e4a274ce4f4bbcd62efdb27d7353b9fa267404ff86d227bdfde8ed7b555ff4b333bb47245a04efd89775ac8c9e8cfc61cd6a5b984cbf2c88700f2a2e5c757d15085611c084f3f98ef3e7efd8d8eecae08cb1d6f4b92baba08bb3d330844b73b371f8067e867f69df53579bc6bb7a39a018d60ff7f63da2a78d8dfd48178fcd1b88dc239f5c912a9d7638dcd81ff72995f2a2cf4732125b7794baf6f416d32cca91ba363d209884769538af9e876799f8b914faa928fd2907dc2a1ecd8e57929ffcdbc9aa7a4a7aaa7725e2175d3e9e7fda9620958f3efe74e063003", 0xe8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000001c000000001400000000000000290000003e00000005000000000000001400000000000000290000003400000001000000000000001400000000000000290000000b000000000000070000000038220000000000002900000004000000000300000000000005"], 0xb0}}], 0x2, 0x20080058) 1m2.875216957s ago: executing program 4 (id=1731): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xe8, "05061b5d7dda5982f9673c2e77b928a20bbc92433e58aac920817397c837118ae1dccda485d3ce5c4783d71191bf2e0eea95996307de87734bd19bcb488406690d059290865125d1053c3800285659dfc6bde687928635a2de183e55cd55ff9fe2a8d8f994056e9f7f4c3b8cd3f971f0e526173947d337a8222be06fe5c36368f66a03487901dde8d269a46e5a004a5f03b449ece6496723b6ca6a8c5f15efb0e9a959317c4fad81c65ad679c3501d55fcb2fdcf4301bbe2332d79e43b5b21f86249898ab0717219570bbfd8e0ac13811d6a8794d890b1e6b0623e7c6740d0eb92c65005e8423916"}, &(0x7f0000000340)=0xf0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={r2, 0x5}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/171, &(0x7f0000000200)=0xab) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) 1m2.763679829s ago: executing program 5 (id=1732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x90, 0x14}, {0xfff, 0x7, 0xe, 0x3, [0x9, 0x8, 0x6, 0x79, 0xa, 0x800]}}}}, 0x21) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0xd3, 0x6, 0x74, 0x3, "fbebff7f"}, 0x4000ff, 0x2, {&(0x7f00000002c0)}, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 1m2.722120578s ago: executing program 2 (id=1733): mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f0000000680)={0xc80a4000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f0000000500)=""/189, 0xbd}], 0x2, 0x300100, 0x0) 1m2.591664071s ago: executing program 4 (id=1735): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000040)={0x0, 0x0, r1}) 1m2.491553239s ago: executing program 5 (id=1737): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x6e20, @empty}, 0x10) mknod$loop(0x0, 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000140)={&(0x7f0000000780)=[{0x9, 0x5a00, 0x0, 0x0}], 0x1}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f00000002c0)="1e1c7f01", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40), 0x0, &(0x7f0000001380)=ANY=[], 0x108}}], 0x2, 0x40) close(r7) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r9, 0x910, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$VIDIOC_S_TUNER(r8, 0x4054561e, &(0x7f0000000080)={0x81, "76748b8b8be4948d2d592177763e9a576f093c1baf4581e63e416162e797a597", 0x5, 0x20, 0x1, 0xffffffff, 0x2, 0x1, 0x7, 0x5}) ioctl$VIDIOC_G_EDID(r8, 0xc0285629, &(0x7f0000000000)={0x3, 0x0, 0x4, '\x00', &(0x7f0000000640)=0xfc}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) 1m2.027885347s ago: executing program 4 (id=1738): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x3c05, &(0x7f0000000280)={0x0, 0x98bf, 0x0, 0x1, 0xad}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) process_madvise(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00') fsopen(0x0, 0x0) writev(r3, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/30, 0x1e, 0x80000000, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 1m1.903053519s ago: executing program 3 (id=1739): socket$packet(0x11, 0x2, 0x300) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={0x0, 0x8c}}, 0x0) unshare(0x600) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mkdir(0x0, 0x10) r1 = socket(0x10, 0x3, 0x0) getsockopt(r1, 0x2, 0x9, &(0x7f0000000200)=""/249, &(0x7f0000000300)=0xf9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@union={0x2, 0xa, 0x0, 0x5, 0x1, 0x4, [{0x4, 0x0, 0x4}, {0xf, 0x5, 0x9a}, {0x7, 0x0, 0x43}, {0x6, 0x3, 0x3ff}, {0x10, 0x0, 0x9}, {0xe, 0x2, 0x8000}, {0xb, 0x2, 0x7}, {0x3, 0x3, 0x401}, {0xb, 0x3, 0x10000}, {0x7, 0x5, 0x1}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000680)=""/234, 0xb0, 0xea, 0x0, 0x1}, 0x28) signalfd4(r3, &(0x7f00000000c0)={[0xc21]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, r3}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28, 0x20000811}, 0x4008005) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7efc5, 0xe8f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff, 0xffffffffffff0001}}]}]}]}, 0x50}}, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xfce1) 1m1.582127039s ago: executing program 3 (id=1740): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8) syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x42c000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 1m0.630052581s ago: executing program 3 (id=1741): r0 = syz_open_dev$I2C(&(0x7f0000000880), 0x0, 0x101001) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x3c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) statx(r2, &(0x7f0000000280)='./file0\x00', 0x1000, 0x800, &(0x7f0000000980)) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f00000019c0)=[{0x2b6, 0xf411, 0x1, &(0x7f0000000180)='\x00'}], 0x1}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd700fffdbdf250e000000ae9a54dce4b146db2c00028008000800064000000801030000000000080006000001210005000d000100fb6a"], 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x100) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f00000000c0)=0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e4099107323f5", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "7ca14e0bb42b00ca", "e393a639e1714663d647b57d50144087", "d5825cc3", "e35bb6550c4661d5"}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000002e00)=[{}, {{&(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000300)="e6f28231722929d6c13ab2d28a2af94895bac0f935b223fe0fbb1182f470a7d482a27bf65b53779c0ad33f127174a57a64a9b00fc4c3f38b2b82c664aedde55d1da8612bebd78afc811d4d7abf1b1f1162495ca445defc710b9b92d78896391bbedb1dda83e226b694db5c95d6e269409c0fe8fdeedbf395bb8f4ffd28530509dccc9d863587b6128ecd091a7c618a8dcac478e975864b82e849e5c5f0e4f03fa184d202edfab1722551078d8f5184db6116856f5e674c7db48464264b12bfd09fdbf3bfb3fb61e034291b0796c8bd652c5c1d4d6679646ba5ebf6a4894019643475fd666621a9", 0xe7}, {&(0x7f00000008c0)="a7421721b65900cef9ae4a701d1c4e97a760d0d1debbabcd830aeb56878afca665052dc4a69a97beaf8d50a30c89fe25664169dc2a40c6c5647f51b02503028bf36786a107cc71e04819e6c5bf72b88663c415e9982714d3649c2e58a411f7e7d4f07f9c5989ad3dd272ad74693c7a4a3ac0955cdc0fa25675892233d407588345e7d2aa6645b720ec62fa", 0x8b}, {&(0x7f0000000580)="1dc4f0db17fbc35e28b64172", 0xc}, {&(0x7f00000005c0)="6522e805aa4c8b7e86e9bd2a1b97c045d2ea98276131ddfa0bc6e01008865d35f0b0df2c1d342396f3e2dcc4ced66ae9d0c1ce5a06a2e855cffd10c20bd8c4ec4190621116b3f4fe9245a32723f2f2fc44a31e1331bc1f2cd6340fb9f9168e793324ac9366631c2e716822d6f700492a97ea5427ea449bfab988ccef9b32a1d0cbb7a2748b1216ad41ff94eac90656e458dc48066864b977cc3930d93fd121987b3fccf56c568a4261", 0xa9}], 0x4}}, {{&(0x7f00000006c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000000700)="483762889a5c1185b60fa3a4e8bf1f841ef838fe444fcf616db4cd0734833f7c306e459cd74b2b772c1cc5ea8ea571ca6350ab3c4532e4c26a0539587a7ee9e7331748b5710111df5dd7614fbd752707d8c60635c32bd5e7e94db48832e89c2e4be815f221bdc6f03813e67c51ee5d55228556e783cf408b42b7b4b36e3f55cfffb648b1fc217eab1d6331e80b29f2dee50db1e7cb5aa8d0e05f3a6ab8fddb5ee2295daaa8058a11ac398f9347adf69bacf92e7f6111617d0a71834b545ccff53b24c4f1b2bc4fe9f2e1b63bc8765cd00e3c4e027e1f84501bc9bf9ed2e64c1cf2549e", 0xe3}, {&(0x7f0000002ec0)="1882f74f9c30211ea428577e40b8368d3e6635717ead70ee76d6b63fcab0b0ed9390e6f8d51eb042aa7eddf682d2a5b6aba92c17df7483a36aed0829e48e86cf4b76c772e191aecf1bfe2bbdbee9a8604951de6e86a215cf6b372fe2a25b62483470b6d18cda5f46f0c9304cfd0d75e4b9984221ed4ae8e58afb6b75f45edad522bdbcd9cc50e1bc96d901bd968a5c5e37102bf8a943596191b4caaca889bc8a27c3d02a8a5f1ab3f676bc62b1acb8083e439bf87b2dac6a51a92058de5091317d91d68bacc5e93fe79888fec01df07bf023380e6a6c8d5274d7acb47f8cb451c141a927a6a7e1483eacba09fa2fdb827d1d44f9849f9197736c921a1413efbfb0e661317cb39c642cef43154691c1acda3795290cbc5cf852b3e15094cf3269b1eafa9cd59bdbe15799adad4014db48d7e7b7d13c701969ca776e782823a2716d4d1db72af622c5a2fed8d12f3a72dfab947c2fd69b097a084bd86a8fe081239f16464bc410e47788449bbee9e7756788ea2eb3cb74840f29390192d5976a876970a7e5c6d50a0869a9f4a37338aea9378f7189e100d32139c648465a6dd588d5642df0e337e9cb2cf40476e9eebba04c91c9098204de039b2a8d041722adcae79c1afc4839a3d3712a6f278ea17c671866de8a13deae856e32809ef1e2dab66c29371f8bbb5beba7975c029c025bf4dd04f95edb14e637173d6202baf6515a2d9a8176e290c8837658794302e06e979090459b9c35b177c30f19a1c0ef974cbd877024bc53695293fead10cff5e094e6bb5b7ee82af7aad792bd729ff2d02a32cac96e0d04e67539d8b4bc7ba74327c18917dc56fcdc6ee29452779697728b61a3e3195ff8baaea260c91923c56dbf8ad587c5f834ff5b4d3e83656f99d508f76ee303d17bb72f8e072f83657a4e15309588875a4a7974f671d2d832fa08fa20fe02531b8fcfef206484062f02cd1fd9b4d2b392f90754025bd6a6d14b37f011036356e4e24acfcdcb768a128d0667622abd0847311e2ecfdd9f648668779e24d540abdaf59b455f6ff017284e4012c79722e063e41cec9f7243048b588d82b8ad2e84bdf5c7ddadd4a014ae73fe909dc993fca38efa1a2c96b057949311eb28661cf1608574980f4b0ed9beb06b8770f696db914aa6dd293fb32c9c8447a1d690e30226c9723656919bb8a27b744d4876c34e0d9e9b5ae1cbf3c8d06a67f30d22bb9490f260095e26aa990858434dc3f7ccefd5bcf00c6183b15ee8552f1faa84725c60d31656f4fbebc3794be2acf0ae401f74eae482a7fc8058a707ebbc634e4db27d7c0f1b72cf430113a5d9b38e9d2ed8ee2509d83bf9cf13e7b0266d3520ff97c476708f999d1ac08e46b2bfdb3fb62fcb69f17408ce5e4c217c146fd80a1083dd513a87d7c380139d3412ae2e965e21abae17d40ba7b54a84fed61677f58705184caf48e1a4e92df347f8d91482b7b1889cf962073ad8b8365c3de62cb8c6dc3546626c449cbe3ef911fb2a5106f12fd00f0be3cb90eaffbc9967d7b1a7162197ec354e758641502ff77924a6cfeebe160d008a74b99456aff4d5a2e8c9eca5ded62211b25a0ff5a93e01f78353bd57c9426a231978c76a88a0a401d5341b88433f0e830b0e948154c8e916db06035a87587dede9b26e8bb64a751477ba1d4d245b5f1d5b5bb8fcffea2fad457a2ba3ae5aebf1b0c546da9985303b5771b68ed0a8d3ac390512f3d95570b043bde6f7ccc4d1bdcd1d028959634faa2dbe4387aa82997f7c3852c3c67092450560916bcd56c630f9a99bb20da52e32ad30e979b07b9d373990aee54d521db0cb4aa819fe1fa1b2a4b84aba792a3809dc78d89c93d36bc62e7ec4ea453dc4a010eac00e0e53743149e40044a671af20ff91b1cb256c546b52bba7134dfdac2e6ed3887905b4d9d5c1b98bcda8bc7a31d2d553acb4ddeaae5e14cd43c9ae84726c7bc59033d9f14ea863b2a489bb292a5e9f451edd3eda7a6f2751851af32815f76b10acd3ea1d38c3bf3b30059b6ac0a7bf082923f98ed47f856a10062a97be8a3a082bebbfb540e94e24896667dd3dcf000ebb960f634a175a5e4f33dcd2f43224618c4ac1b53530ea63fb4809751a35b51a46cae21bc6b9b9e07cd53c1040596ddeb7728f04407cfc91f9cbb22cf59352120ee8dd7238003dabaf58e759bccfdb09d89fba54d83009a4969673c052d0cae16d906fae3b4fbe78d9012be9144993a7a305854774948ccae6675aad9cab216d9e6048db4cf5caf79d78b91fdeb65eb25d793c40601208062c1123142323f6d8a0c6b5fdba79aae67e15a1958fb48986dc49ad40f2e837cc049f0794b12b3258fbd6964536eb66a2acb584e57a304fcf162de921a60b59260e1f82cbd9bc0e8ca799083892be040f6a287ec0118f967d1e362484038d13db1a05dbcd7f8777dfe7010dd1679bf943cdc7685e61908d58d8fd00327cc2dfc5e6efd7dda8284dada5cb5844c144c46bb7c332205020380fa19f48d00478274496c64a5087fa76ba0212d2ac5f9c35f891e4fa5f7270bff6c168d3cf23fd461744348822b02e8669da8172668dde43fc7eeb06240310b6c1ae32622d7c585247d13c51d617d38c1b52269f05c4ade6509156f99fb2fc3c8c3bf52679d5f5917c0543a6ebcd0fa0d863d917747af0c1ee537e2ed3df6dcc10d7c06767a172c4645fa84eab72088d2619afb5736e71ad22114163a7a59bec40664f4bc78e1aebaa491d65a4e50ce21bf58282547462b36d740bcbb039ac4587925b72def94b49d2b826a2b092e6e34232fc20d3e3175b56a5c88a4e39fb4d0713c1f35c7acb4e9dcc89f192bc01d6ab3516d87ba2a31465e0da17edd51338fa808fe99107817ff471532ef3c70f2861339a2e1c5089e3384ac15e09dbc103a1a6c2c71396aec0be5ff8c1372f727f7b8cd0cc1ee77e5b964b20077d54d49013b39b37a79677413e458760215ab82afd8c914e28e63539cf1c0d4c912f84b1438de12bdf81c03ee01b4483ef33050e4b7418675e7912a040d5ec9c63bba91978771d2df0a583945784c73e81a4a94f3aa0476ea2b75fea9d668b9162f406b0312b9ff72908fb3c94896cee0052c6098aa0ae2a97bd58128923023d435b43be3f9432c3e2667c68df7e971fefd43085e54e48582c57a332c8e859bc32641c6cbf8ce03d13bb1ae35ff6ac5d3b796b5348dea9062947e06dfb53506f6cc30cd1ecd91e387f86fcca228462a5f0aae3a0e09489c87b4f0c90e91def133f825d8d4797581f31aa6365fe3d268fdd9052a1eaa3b4942fae90f18e86c85623c8bccb57798d0349e1c643428623feafa5a28236df0ce0f8eb5be2f90278a7b14192c8cb9dd46152a10d7acf95675ed38ba53fb4555f8e8a7cb6b9cfc415a4f560f2fccfb448e88b5cc02ae4755d0e4d914212f3fae984bacee87f13428bec42915b6bfd6c0374ebfb0aa7bcd9b761a83580210257caa4bbd7ef4bceeb830ba1fc8f53457fc628008d4ed517cdc9ed0b53fb1b2218aca63dd3286bbc5dad6bfe5ca0405da5b6aff99f1c08917036042f3af142866f4154ab84693cf5a05a5403d765acb9972a719544338bb619b8f55478a527c66f5c72ace139693e2e5013df9def6b323b0667c1c799df4810bfa0a52666a0c043b82b024905ba0bc6c774c8d9dd5ab4ac96110efafd2ebd17785a13249e68016e5108a5ecf62b231d9d10d4c3de9d02c5c89de8796a4f534c306b6ec06af4fc66cbf0b2dc8546c591f47039958e47e6761d7225383c7519c7864dd368df6d88a08067cf09b85675057cda63222255c68f31901b311027c49aa3ac46fbbb58f78ebb2c5a2134d9c4ca2648902de6c4aee482aa257c15cf67126e733fa70bdac75ee725a2122e8eaa03692da9b46c739340459d4cc0687fef849c2f10a8abdbe1a41458675989ba6f1d0298f935eb236e25666b5ca7c1fdc5618f5aa7cae0f04d68c2c22eee57bdaeb857fc509837e5bcf8323ed9294a18e8d64d3fe70f22d4b97a9433bf65f961c7a2cdf205c292262ca080cce71c2d64b0b82403ee342c26385eb3c058ef67f9810e87e41d20f58b4220a7d18ea2b719b086c28ebab863bf318b8d43edf50a546d435f70eecc4eb18c5485fd9b16428383eb20d1018c3679ea9b0b4c21b52acbfbe11ea915903337e615a3c948954cfbdc98042c8005a45834d36f297c761409293c4254eed9c387f6ccf00dcd689b046f2b28fad3366d9b1a0d720d26dc36e4947db664d332a3db8f10467282623d13030812b6beebc65f6d7cc4006b34407bc27b70dec16b13a948e418005471004594267eabcd7956ed7a39ca21424cf38fe9496d3057371d25701491c24f7cc46e8a78a662504bb459fe689f70110194077696414c9c88507f7a6f2a8ed2db6e8bd2fda6fc2cf60419956df42c50505822050b0c27da54e1e6bd62cf48058b7a1d123a04db5cc347bcfa9e9353b2c80bf5470099a22ca92395fa38f24f0b87d452652ce40596546c0ef5457f8746a0d04d4a4b5fe9aadee6ea2581ac19461fe3e7e3733c31ceb4f835a6381e48b63fc170187aa8d9ef5fa2a61dfc7158a3e6c668555aa8b01559cebfedc1bda2ea53ae6195639c628f627d54123780974663514fab1aca8accb39f2b7b0f77157b3bb9b21880e375d9e1408def9f0de0317c5b05156528b7da7dc40a3803107221884ac40fba6f0fd9b43e05d2fde3ef9d571b5ba157bcacd76211e583583933d57d0b6f72f3a54f16bcbf47994406eb307981848b13c552f4486331248fc891e75c95dda8d5959f32181a723ffcd951d4124e1e849465b4f1bb442e4f8024fe375c4929d56937547394a803b52cdd6d7dfde1f4cb954080b14e7edd108f6bb2b404e99cf4321fe9c8297a98ae751167a4730581056e4e4e1dd7041f49d8410408ad1864f66a585a51c43f3a554d0aadea6d5871f6db096291521ed432ab405f4dad3b33acb5cb967c630a5a1472bf58b82dd6324cb6359eeec5db68ef1d83a14c702f4c31c9c3e01affeb86411ed9c0abc836954b1dac647b7d3975605fc889574585854157b917909e04bad62811dedbbd8cbaf038b44346474f5813450a0accd43bafd858bb90de7a3da1f5cacabc9512900e7785aa643add1c2dc35e44712071f44300fcf287bd07f1ac153c8f1d02e7a22a0427816319890594ac0a1d1b9dc7a13767f2c5bdeb0ee1b442e042747bfbcad3a27bcc87a028eda66c549cee6e1204578a0de1dc0902cef84d3a1d3e8e238fbc999b2f4ce0cc431006a2a262b7fc960a8c129529a2febdc2821921479083ca2a9ffa46b51e998039d9e8a1bc75f662a0718f7d350cb5e8190c25fa4be622ffa16090bb61eae97100a094fa05f8897b217eac9fe07cd5b001e99b36cac0305812c06efb9194123591bf5f678fff6c384e10f3f69cc41e245672d2b76b701daddbdfea08ce705f5df17c94cbfc318a1e221d8c9a43a5c49b618f93dd506e1d23e7c9a3e288447ea6b8b06cdf46f74ec4a98f5bfa83457b6b0bccd03e75ed7b760aa828b3cc04821229af26afb0a54dabb1e473375a17578ed89290f9bb72b822428f249e9c1ffdf3650c7c1317f1866a3dc648cbe343606f86ea7240cd68ef968f6b505fd5246d33f28816cc059b240138912f3b6164fa3f830cdff37674061b1b9ff2c686e4e62d0d42a71758a3d9ada094d64fba49c69c3566b6551eba56eb2e35b1102f838a92f8a878d7af50cfbef4d37f79838b65821f75b1fb9e79fe0b818fcdfabdb781", 0x1000}, {&(0x7f00000018c0)="2ba03f77d9944e7d18c84d55d34d8adfc90c52fd58dd2e29195687efe3f25602b2310418ab515a91ab8085327bb972643bec842908bc6ad8522a8909812c8b7e13352ac19d6955b08d83fc882f05e7d78a2c8a0f2de40fc73cbf76007ef1cc6a955995bb7301b862623f446a083ce952c1048a6e32079cea99b67ea266afa21d9c9ac68fae68fb9b4bb57d175d9ee92fd738a9298295e2c271ad06c0608d32e52fe4603e5d33968b5dd71ddc1519492e1733cfec3d4e055f139254eb698feb8d2afb913e153e830d64b0b295c59b6fed851b92536ead501c615d", 0xda}, {&(0x7f0000001a00)="6d098a02a5c4300800753b178e19315283e033c6b765d3e08b579003cb5950ce7689c21814b39a1008979324f69cbc75447712fb7211", 0x36}, {&(0x7f0000001a40)="3349c3", 0x3}, {&(0x7f0000001a80)="d60c27738086824860f94fbea74f633dd8fcfe7bfdfe1726184cb2ea4d0c6a6ea37b5a065e41e50ea5293b177832a75eb9821526b5ddf65a19b02ac3ac1f170fbdc1c5473e1a2bf7487cf403bdd8839425d5639e2200cab3694fe1a26a31afa3c8fab87d1ebd36148c54252984dc5c423dc83f36faed09e3b395329e7ed3f9fbbd164f550e1e2ff7ee2b243dbdf5f3822c6b5a0324a4d2dcb467dbbf3f29db9fee3fc96fddc8d91c98ef3279976ea9ac7a42217b87e66e4a6158cea7ac01cfaf892ba7eb019d0d19beab7498e744a15051bd587bcad00db4c74e19c59becb28664440bf7ffcc", 0xe6}, {&(0x7f0000001b80)="181d87cb642f548f528369b68e88b9b62ba88a5aabdb83e982871f2a53150b6fe2980a987e16ad820c73ddc89f40d9338e2f01ced6d3edcfd0a57753ad4ee7e50d203163d098d0f1c3f10c01fcbae31926b9081135ea2954b35c40c7f455cfee682e428cf975ea5d47a08f54901784d477a60e5a45c866867bd816cf27197505c3e08c22f0632a5d3a5ef369a3e73ed1f72d77530de6dd6ec947536b24afa74d0946c0217a5c2801a5edd981992d5cdcfef261fd33f57273f8d6ef5db95f45dd6dc93efe8394e4dcd8928a7468360b2435d9cb2f1510105c1c5fbd164d761cb25df41a5c29192d4e725a7f23aac78faea06de545ed0501dd84a287602b0f6ae75eda779db9c9c8a0ae73232aceb88fd8d9783019205099e37bdfae6447cd9ef839390d3a0c41a11e58700d3abca783b8bffff96788604d1b8b9675828dd0ff88a9ca468fe8072571b0046c2eb9802e733c9d23fdbd2167467a860920b497cbecb0baddfeaef1606eccc658b2f8b697d322b1f21073df4bf785ba2115d7d9787d23354d5dbe82a06385f7d514e74d32c2b7ad2d998d5f07a5b740bd354eb18c680c0ea5aafb6ca06084effc30617fc85777cdf2df398a19e9c6ed2bf3ad9075d9d002b03981c71b48d796f8f0276dc994be0f346fae265cdf9555b148aa7cc35f495e5da88b584ed99b525aab20302ab2e5fb72ed5525d7439dc8699d53a2b6bbd3dd2bda3970316d3887c62c3207c4d2c31d19a07958b808691d50ec03eb517f0a520f9fc3cccadb04f76695d2922ff7c6e1e50e0abccbccc64471aa48d6652f2c58e63e09d8b10a740761469041974da16f6533416f6c697da704388143544690c468882d11b1b9c9e33c98a96e4df7943b1489d931dbe2f5ebf0acc803267a6b2c4a70272162576a6283c056b00d06ac24042330ab527109fd4b8262ce323fe3e911fe315d50ca96c341b9f031cab321141fdb9525c053bdc5b7f086316e3186ba59ec5424e8608a5642bc0b3265ec7fdf5df502e84e9720ed661f099d728c754a3124d3d883963e89be542fe94eba8cc1b16b8e69c71720eebd7f5ac77d33f9a51ded497e277c31764a02cbb07eb4ae34da5ed0abe3294427e5808c78e4319c011b9d355d35909af491b8230f0f8658d68225afd428e63bc20eb30bef458cebe03e0e27370a3d2645681c72d784059c119ed4430ab635adfc678c55fb29f528180c1ffd0a0f1adca0d2d2f1101b2dbfc1dd88d8c6f42c987848846547678730a17621cb7a5034530325ad534bbbe67a6594d3d0743deeeee0e510915538b6d1f3b4ed2b561d0375752b050290416fdd06e6ce1f98a4cb50a0e3f651bb1d7b6dff13cecdf5938c191578afa71e0490e278cacdcba01c6d1bac6b199583b08922cd3d1b78a24bd48ff6014d6d3b602a3aa3e3be83da7e3ad7fbbe0c05bc515ac9326badd72ec94b071c1f1ffe231ef401ec8556776368ed6a5d6af79341894fb75e6e5b26ebf3bac03d170dee550da340d170c9c3913dcae54c3d3c35e66e59e5b67f0e7dfdadc438966d2ee436a22a875dce9434fe7ba8068fe3bbbe289358e3c8ecd7447578eebd74299a9319cdec1341b98577b51279372d8cd6be43902680ce60a155a2a2f824ff0d1b16943f2e6915b080de96461678c5ae6d83b87ae73f60a49dab827fb2f55027765228a3da253726f55c97c09aaa79aeac4857d7d234468e13e0d1526eaf8d388c659fb2b2b78289ed00a8d889770ac140b3cd9870bd2de8f1ef2df887d09e6dc2c9a28a5cae26f16ec7ca1355d1da78641ca07b43134ba1151bd4a415fd19b5ae3ecf6f736fe80d01d398828611be0da6506d54a4af5ad8da7b60c4f343ac19762af92d092e14547043758213a7265d21aa61e182ee72f543a246287b53a4a06d2583a1fb1a96210e774415ceb3f616c8f5616a9bd0a54a18125b7bac1f5092ae6c3cdd418cbd26bc82289ebc16a3f4b512784b6aed2edeeee3ad46ad6ec9e6b0e5cdcae8fd02f410767d89debb33b3190b5b212a0ea724d8b8e9d36d5be1e1204507be17f9dd35e7a862b82caf5ddc7c717b1ecbf3325624ff6cb19d3b7d4c9fbd6485969412cf67dad4feebe6f7119ed4cc26e2542da3546850dc2b8c9db7148c6eb413d65100b9662d1ce667b6affe1702595b5062131cc4e4cd89cafddf7bf55d10584af91ac1aec09ff5b6e10f06695c4bdd7382b7dbf666259b9c896db4c455fd371d7928a47a97cddf9fafc6aff9da8250d66b2fcd138f491109a974ca5d0b8b1c26d230791e2181ff7611b1a52977de6a2d8644f93c41901cead31615eb14566b8856fcc27b7b49e609894826eff68b94a0fb194da876e25ff92eb0e30b201c8b3b5ef8a28020772cf9ab061c965427af9f7c11710e2342c1752861974fad86a888dd3c59d73491dafc3f9d9f49d860a1dfe5b57a5c215176a0d8f870963f67310dacb8ced912e6e9cac8540ae24e8b0565f4b324097ccd22eaf313283313fa8ff804ae82eaaf6655f13a0b3acd0656f3737aefac3be5df12368e2c0126bbdc7f92775770b4847e780378aa28d2cc30449fd80cfa93002e4e82ee6e74a51b0e025ffc70b783cef09da65dc921815dc5bb64066b18d2721e9e7e0c718f5284373077c7d9f79727e41bec820d906bd94e9e67c7e74c4dc2377f182bbfef7599ea4d533b871791bfc8a1daf779668240b906c6603077233f6e8d9323ff721f1dffbaa9f46c5dc22b898a8656505b44eda20afd31a29be8a99bcad099192b9f384f4146c08a89b623f2f5b88bf157f9ba49564ed2f64eb452e0b02a8eed09dc2619ed5f06a237a2fbdd6719958d0ae9e1a95560ec9b9b7b20bf54b3b1783ad8ad368808590529a2925b88559e0c1e83543e09371cdd676bbe1cc236d25b51428c1e50d0a961980ff3128e6f130b9d7c4586cfb1e99b57dc6521b9f64f18688c5863c4566e40e6cf91eb1446938c4341ccfe622f0350d80760fa7d3a5d72558f36709b0c65bfd245ee5986542d0b8992abdf87928be49edb65b1af19cbfe02ee7c3298988189950cecb7ed602832294bc1765dd00a177e7eb75b642a48ab3dbc8077d77fef05aa0ef11f0d3c59d3f94ca16ed626d9c17fed0c3d9334fa21ad67cf09c8dc2eaac0bd6aa812dc813f43a27ea27dc88ab9c7ca463fdcc8cea1dd6b5025d1ac4a9572cafe39ea3972b4ddff68bbb9e879534bad855bd796ca78992a066de5b3598e1cbcf24cb800b9cd0f8eff5cd5051acb134de454d0b1b7355bcc09fdc6e77375b49bfc981801d372a429a22efe358523beb96069b3666784a2dce476937c6ab77569c24fec814a5afbb6175dc9b90a934a639cb3d60759bcc0563b5cf667de853b876eb5ebb74697405ce629e415fc12fbb824009015802f32456e2b72ffeafb98225adeb428c3f4d1cf1ec0d171a57c1c953a3b3adccf9dd7445ac3d65940c19b4c6f5401c1f3692d9a813bdcddeb07d71c2d8f9d1aaee9257d83d2e59e00d059a6d2282916418b8d86b56e7090c47bf783f5e9c13d9b71b5dc8ccbf6b950a24b8692e719d44135231d2556ec32dcc1b8b2388bcc0e39e4d4faff2264ae54d716763710e12ee626bd86cd106b1656f477c557bc1c5219e56d47de41a29690a381363fd90d5ca30e2f1515604b98ddc22a077bacc2a7efdd4eca438f8d04d8bdc6ba97c88349f4726e848639d780180532952917039dfa8433a8eda06622be3435ddbf25097414783f14944494134545f0f9a330ecbd1397dacc7a36fa8d779421efcbb370a4201eab77cb3edd5b9a42d8fe4414d404402b802932e21740b18c4bad814e81ce6912dea443bdf3d9aa19c9fb47ec8f5e3349f9630a1c48419dbe4cc676b3e3cb25387bd15d0b6570829eacbf578141f514447909b94e07f21a5987e43be24aea6fc4bc7753ea9c00d1ce2102e1f71162807ef1a494fcd6db3787d0a9d146c825e133307568d5483d70d3c422b3ca44dc50948d8d8f96ed9ac016b2e16e69989e925d87ebea5c0a2d50586dc7751ca2dcfe807a803be60d952e4f8c284066e6355cccdcb685fd780758236b4b156e5e4dc28d9d74f16bed300e34c124e1e218bc6b09133304c2a680eed1821a318fd7c1aa704449115a2c0789f9e0ec92bc32bf2fb7c17cfa796c80b1364d82587e1ad828c3fb90ee5fbb47130fab9b4d31961f5e3be29887fb9b21d3fbf0e8615756db8a296919003925d15ee5a037b133a4d5f574a5df8dee324453987671c606c964fa577deafdd00a4f6c1bc1069d0caa05e9e51497ca8abfac6e37efc21f75bf1a874709173a2a44ddc26c1b9057e2b805ccae1873df70d9c2e20fa4fe396f61770e07b1b4484e74490ec97a974bdde08667dd1a43fb0027b115b899a7cb30a7340f483a14b7e0165ad09bdf00af8ff1e312219da0d62719ea57e602c5b40c75201930c7dcd9eaacccde6f9aa35cf79d45747f146b855d81432585f919e1fe3432a2d951f174a75937236f07c1f43fec7acfd98659aa5df309cab3015c995463219c7e82050c887e443d77f0e54adcc80f4a974781cac5dfd34d45a5d4b351cf90a492e3cf39ed1e595509d9af0d6bcb6a53c93dfd5e944c6a164edf44679df1b76dd0402016877ba9d87587412537aae982a6cf4929da2ca4914519061b7210ea316a0e4679e1ca7138b9e57111a143282c65ec4cd42e03eef68c67627ce641ec4ec512239027b276802fd51ab21c3b86af8ad80fbfadbff6e7ba89d2188cd2f5cbe0e7d49103f2410b9c9cd48a161a17f9ccbf8dff53e1e728f19ec1f7c0f2716204c6319cad0350722890d30c7c3256534aa630b122281ca0a3914d6ea0d3eed9010da30172f74259d76768837a9dc78f2ac43b4e7fd4a99091377dde961beafa4a59c140b8f2225957dc41c37f8ac0ed79340802848fd668a9c30653a92a8a9de80b39edb7f5ee070f6a87b6cb0d3a99b7c5e891e06d0d2bd8230b3ee42c75da97134f588a9cd563f73b7100995c216f2f4c3a9982082ddf26f7e0c03f0fd3ad7e37bda9e4223fb43de06737b1926f261302954215039e6d28a147c8677ccd51957eed86f90061d396c3189520bc3760f4a59f11c26c060ff7a19c217b8136de2d74d5dfcafc2b12a8c027dec291bcdadf78b15e51af6079fb5ebc4a4930a15f03e4fab74330a4534382f5a4b0c6be1f7b77a5a2766fe6601626c9436df3415d05ffee7e266b36e61a3adc2a4f273accf44509a328240cfaf37f33982aafad10c93e7c1c64d9a5456f92e60dcf7a2e0c97ea30e959a24a095b1c904e38a0a4f0b4550ef2af516e46024c1ffdf1ee9e0ab15391966ffa1a7401284b85ebfeb013eba93a8feb17917c3399174a2b5efc4f60f0beac4c9466896453d4c664bbf99ff13459c217c745a4d00b41bc884e5a6af400018289b76f855a1293b8064236010ae23c83616f59a746d7afb294d2cf978f93dd82d26417b0b3db2bb686d82a07a114bb278d6b457b9638c6d3cb6504ddad769db00c6f8e712baedb9aefadc226e926f29329c3e81a5e6c6f5e8e725c064b4fb929bb312630baa6ffdce59d1483319e07cd54edf0153531d8e67ef3a3cb3614bf9b3d1c52f070ed5369fd44f21bb3c8d60c956a30a997c80949b242a87acf573ecffd4b0296e33189a7ff41dc32d2c987ddecaa1472992f280c818ef3ef97e407301acbf111d850bac0d0dfc7a0175454048db154f2dc69abc623b38edad826f7b96494a822b4b078ae66165947a92231769e6eedbe66a616545024a873d4f937dd52ee", 0x1000}, {&(0x7f0000002b80)="d65febe613ec42762dedb87877bf7eefe1c95fc641dbeec6f2741cf06e9a31cb511694df0aad67abdeec681ea8c80eeb24dbc513a7475953dbae3d2fba4b6b7277f805e29e1282146b2081d24b23cb5193e68d2c5ed3d5297f690797c83110bca534d7da5cc4f2", 0x67}, {&(0x7f0000002c00)="b3291c05bdf4d33c20991cfe0929d1afca395afce7b6d1525367b4d2d03f0bf38998692ffbb197cb16fbba1fd293652728bbf6e32b085413537953a1ab5eca0f8100a29e4519d9d53a6ebd6057aa786bfd4dd20a2b9963729500c2ecf9ee86632d9b50b20c4cb47b09e80babbbe520f87d289aac48710f01d675d0c3571954425c9209d917b49bbd48289422f031d90b8a18e97849daf6f54ef4f4155dc9e2ece62fc035323b87d351d9851d9d9507c35db392ecc0a73b66b45e7655c79700815f3482ebcdcbe29c42f2db5a0e57698a39fc85312d", 0xd5}], 0x9, &(0x7f0000000200)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0xfffffffffffffebb, 0xe7, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x28}}], 0x3, 0x0) 1m0.355556519s ago: executing program 3 (id=1742): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140), 0x6, 0x408002) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x420800, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xca23c7c810a7c4df, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x24}, {r1, 0x1021}, {r0, 0x1443}, {r2, 0x2}, {r3, 0x44}, {r0, 0x3008}], 0x6, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x3]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6ec8, &(0x7f0000000040)={0x0, 0xac4c, 0x1, 0x8, 0x23}) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) 1m0.246172716s ago: executing program 5 (id=1743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="fbe879b8fe555cf2cec6a75d3e4a274ce4f4bbcd62efdb27d7353b9fa267404ff86d227bdfde8ed7b555ff4b333bb47245a04efd89775ac8c9e8cfc61cd6a5b984cbf2c88700f2a2e5c757d15085611c084f3f98ef3e7efd8d8eecae08cb1d6f4b92baba08bb3d330844b73b371f8067e867f69df53579bc6bb7a39a018d60ff7f63da2a78d8dfd48178fcd1b88dc239f5c912a9d7638dcd81ff72995f2a2cf4732125b7794baf6f416d32cca91ba363d209884769538af9e876799f8b914faa928fd2907dc2a1ecd8e57929ffcdbc9aa7a4a7aaa7725e2175d3e9e7fda9620958f3efe74e063003", 0xe8}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000001c000000001400000000000000290000003e00000005000000000000001400000000000000290000003400000001000000000000001400000000000000290000000b000000000000070000000038220000000000002900000004000000000300000000000005"], 0xb0}}], 0x2, 0x20080058) 1m0.153022797s ago: executing program 5 (id=1744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000c6e41c00ffff0400000002", @ANYBLOB='r\x00.\x00'], 0x1c}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x665, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xd, 0x8, 0x8, 0x1009f, 0xfffffff5, 0x81, 0x6, 0x1db, 0x0, 0x7, 0x400, 0x10001, 0xf, 0x0, 0x3fe, 0x2, 0xfff, 0x3, 0x0, 0x6, 0xc00, 0x1003f, 0x8, 0x6, 0xffffffff, 0xfffffffc]}) write$UHID_CREATE2(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0x1, 0x5}) mmap(&(0x7f0000511000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 59.98890688s ago: executing program 4 (id=1745): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8ab43, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r5, r4, r4}, &(0x7f0000000580)=""/204, 0xcc, &(0x7f0000000680)={&(0x7f00000004c0)={'sha3-384\x00'}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 59.607612937s ago: executing program 1 (id=1746): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000001c0)) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0xffff, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x402, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xfffffffc, 0x3, 0x8, 0x800, 0xffff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x8001, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x800, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x8, 0x3fa6, 0x4, 0x0, 0x6, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x9, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r4 = dup(r3) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f00000023c0)={&(0x7f0000000440)=0x4, 0x4, &(0x7f0000002080)=[{}, {}, {}, {}], &(0x7f0000002380)}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000040) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) userfaultfd(0x801) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100, 0xdfe7}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r7, 0x5501) 59.431733747s ago: executing program 2 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0x90, 0x14}, {0xfff, 0x7, 0xe, 0x3, [0x9, 0x8, 0x6, 0x79, 0xa, 0x800]}}}}, 0x21) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100), &(0x7f0000000140), 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x8, {0x0, 0x2710}, {0x2, 0x0, 0xd3, 0x6, 0x74, 0x3, "fbebff7f"}, 0x4000ff, 0x2, {&(0x7f00000002c0)}, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 59.430865403s ago: executing program 3 (id=1748): mknod$loop(0x0, 0x6000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0x7}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x8004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680), 0x0, 0x40000}}], 0x1, 0x1) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x81, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0xd4, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc0, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0xffffffffffffffd4, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='SPEAKER\'Capture\' 000000000000000000\n\x00\x00'], 0x27) (async) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='SPEAKER\'Capture\' 000000000000000000\n\x00\x00'], 0x27) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) io_uring_setup(0x1b7f, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x100032, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x20000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x3}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) close(r8) 59.119062915s ago: executing program 3 (id=1749): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000240)="3ca0474bcc0c8b001fb5e46b55cef9ad34bb517e914d11bb37cab84538f792ad60205b6fe8b0cfda1de4892d3ff86b429e544f8b14189eba9de6575a73f2d1a3a1535629626a78417fb7967316", 0x4d) execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc18, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004af000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ad6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r5, 0x1) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000480)={[&(0x7f00000001c0)='\xac#!', &(0x7f0000000200)='/dev/cpu/#/msr\x00']}, 0x1000) 55.88421107s ago: executing program 2 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r8}) (fail_nth: 2) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], 0x0, 0x0, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 54.595183454s ago: executing program 4 (id=1751): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8) syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x42c000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 43.816029378s ago: executing program 33 (id=1744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000c6e41c00ffff0400000002", @ANYBLOB='r\x00.\x00'], 0x1c}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x2000775) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x665, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0xfffffffd, 0x9, 0x7ff, 0x40300000, 0xe4, 0xd, 0x8, 0x8, 0x1009f, 0xfffffff5, 0x81, 0x6, 0x1db, 0x0, 0x7, 0x400, 0x10001, 0xf, 0x0, 0x3fe, 0x2, 0xfff, 0x3, 0x0, 0x6, 0xc00, 0x1003f, 0x8, 0x6, 0xffffffff, 0xfffffffc]}) write$UHID_CREATE2(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r4, 0x40406f06, &(0x7f0000000140)={0x0, 0x1, 0x8000, 0x1, 0x5}) mmap(&(0x7f0000511000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 30.051238466s ago: executing program 34 (id=1746): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) write$binfmt_format(r0, &(0x7f0000006240)='0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000001c0)) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x20009, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x20000006, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0xffff, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0xfffffffe, 0x400, 0xe, 0x4, 0xffffffff, 0x6c, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x35, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x200025, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x5, 0x402, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x68, 0x1, 0xfffffffc, 0x3, 0x8, 0x800, 0xffff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x200, 0x401, 0xc, 0x2, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0x5, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x8001, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x6, 0x5, 0x800, 0x9, 0x7ffe, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0xfffffffc, 0x8, 0x3, 0x3ff, 0x20000006, 0x9, 0x95e, 0xffffffff, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x10002, 0x1, 0x3, 0x88, 0x2, 0xffffff80, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x8, 0x3fa6, 0x4, 0x0, 0x6, 0x3, 0x6, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xfffff734, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x82, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x9, 0x1f3, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x1f, 0x136, 0x6]}, 0x45c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r4 = dup(r3) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f00000023c0)={&(0x7f0000000440)=0x4, 0x4, &(0x7f0000002080)=[{}, {}, {}, {}], &(0x7f0000002380)}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000040) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_int(r5, 0x0, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) userfaultfd(0x801) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000100)={{0x100, 0xdfe7}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r7, 0x5501) 25.7108338s ago: executing program 35 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000000c0)='fd', 0x0, r4) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r8}) (fail_nth: 2) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r10, r9, r9], 0x0, 0x0, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000bf18a20000000a20000000000a01030000000000000000010000000900010073797a300000000040000000060a010400000000000000000100000008000b40000000000900010073797a30000000001800048014000180090001006d6574610000000004000280140000001100010000000000000000000000000a9df77e02bd3f001453b80a564efb5bc7414f9e89fca79a302d2d725af7ba995d59cb6129a3b598d264b7323f07ae5e20aab22fcf5ff3b69686230f925c339e94538f6fac9630ac37fe1fa3f274edaa5817d6f79095daf1c20971d7c7b3e8549f229d0709f8f4b5950d3260c8b43e88b243e498ab37c0f2"], 0x88}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 13.61679505s ago: executing program 36 (id=1749): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000240)="3ca0474bcc0c8b001fb5e46b55cef9ad34bb517e914d11bb37cab84538f792ad60205b6fe8b0cfda1de4892d3ff86b429e544f8b14189eba9de6575a73f2d1a3a1535629626a78417fb7967316", 0x4d) execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc18, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004af000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ad6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000140)="a6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r5, 0x1) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000480)={[&(0x7f00000001c0)='\xac#!', &(0x7f0000000200)='/dev/cpu/#/msr\x00']}, 0x1000) 13.533148488s ago: executing program 37 (id=1751): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa8) syz_open_dev$vcsa(&(0x7f00000001c0), 0x7, 0x42c000) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) fanotify_mark(0xffffffffffffffff, 0x1, 0x20, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='.\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='>', 0x1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 0s ago: executing program 7 (id=1753): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x1449, &(0x7f00000002c0)={0x0, 0xfff9, 0x0, 0xfffffe, 0x2bd, 0x0, r2}) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): USB device number 44 using dummy_hcd [ 457.237287][ T5628] Bluetooth: hci1: command 0x2016 tx timeout [ 457.237511][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 457.254602][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'. [ 457.313649][ T5611] Bluetooth: hci4: command 0x0405 tx timeout [ 457.413248][ T5344] usb 5-1: device descriptor read/64, error -71 [ 457.693763][ T5344] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 457.863430][ T5344] usb 5-1: device descriptor read/64, error -71 [ 458.151660][ T5344] usb usb5-port1: attempt power cycle [ 458.669248][ T30] audit: type=1400 audit(1777916765.159:794): avc: denied { ioctl } for pid=11022 comm="syz.1.1340" path="socket:[30818]" dev="sockfs" ino=30818 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 458.747501][ T30] audit: type=1800 audit(1777916765.229:795): pid=11023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1340" name="file0" dev="tmpfs" ino=1463 res=0 errno=0 [ 458.866043][ T5344] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 458.895571][ T5344] usb 5-1: device descriptor read/8, error -71 [ 458.902232][ T30] audit: type=1400 audit(1777916765.389:796): avc: denied { map } for pid=11025 comm="syz.3.1341" path="socket:[30828]" dev="sockfs" ino=30828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 459.143168][ T5344] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 459.152648][T11035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.165624][ T5344] usb 5-1: device descriptor read/8, error -71 [ 459.173645][ T5730] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 459.283926][ T5344] usb usb5-port1: unable to enumerate USB device [ 459.314041][ T5611] Bluetooth: hci2: command 0x0406 tx timeout [ 459.320090][ T5628] Bluetooth: hci1: command 0x2016 tx timeout [ 459.348375][ T5730] usb 4-1: New USB device found, idVendor=4ccd, idProduct=00b3, bcdDevice=2d.ea [ 459.358298][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.367621][ T5730] usb 4-1: Product: syz [ 459.371818][ T5730] usb 4-1: Manufacturer: syz [ 459.377330][ T5730] usb 4-1: SerialNumber: syz [ 459.392955][ T5730] usb 4-1: config 0 descriptor?? [ 459.434642][ T5612] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 459.554980][ T5344] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 459.594728][ T5612] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 459.603900][ T5612] usb 1-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 459.610357][ T5803] usb 4-1: USB disconnect, device number 54 [ 459.614766][ T5612] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 459.631042][ T5612] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36816, setting to 64 [ 459.649271][ T5612] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 459.658816][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 459.667274][ T5612] usb 1-1: Product: syz [ 459.671433][ T5612] usb 1-1: Manufacturer: syz [ 459.680403][ T5612] cdc_wdm 1-1:1.0: skipping garbage [ 459.686099][ T5612] cdc_wdm 1-1:1.0: skipping garbage [ 459.691489][ T5612] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 459.734993][ T5344] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 459.746021][ T5344] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 459.757084][ T5344] usb 2-1: string descriptor 0 read error: -22 [ 459.763345][ T5344] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 459.772369][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.773597][ T5730] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 459.934389][ T5344] usb 1-1: USB disconnect, device number 49 [ 460.001973][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.017481][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.042451][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 460.050484][ T5730] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 460.059993][ T5730] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.070472][ T5730] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.080668][ T5730] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.090979][ T5730] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.104522][ T5730] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.114010][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.138359][ T5344] usb 2-1: USB disconnect, device number 51 [ 460.442719][ T5730] usb 3-1: GET_CAPABILITIES returned 0 [ 460.448505][ T5730] usbtmc 3-1:16.0: can't read capabilities [ 460.894965][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.903698][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.414258][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 461.498691][ T5344] usb 3-1: USB disconnect, device number 55 [ 462.078672][T11081] overlayfs: failed to clone upperpath [ 462.975889][ T30] audit: type=1400 audit(1777916769.369:797): avc: denied { accept } for pid=11074 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 463.253205][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 463.416938][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 463.630080][ T10] usb 4-1: config 0 has no interface number 0 [ 463.655487][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 463.669904][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.698467][ T10] usb 4-1: Product: syz [ 463.709038][ T10] usb 4-1: Manufacturer: syz [ 463.731403][ T10] usb 4-1: SerialNumber: syz [ 463.758048][ T10] usb 4-1: config 0 descriptor?? [ 463.797738][ T10] usb 4-1: selecting invalid altsetting 1 [ 463.940717][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 463.959361][T11113] xt_TCPMSS: Only works on TCP SYN packets [ 463.967798][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 464.223581][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 464.495958][ T10] DVB: Unable to find symbol stv0299_attach() [ 464.557252][T11113] sit1: entered allmulticast mode [ 464.577011][ T10] DVB: Unable to find symbol tda8083_attach() [ 464.598002][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 464.618946][ T10] usb 4-1: USB disconnect, device number 55 [ 465.513233][ T5803] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 465.578963][ T30] audit: type=1400 audit(1777916772.069:798): avc: denied { bind } for pid=11139 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 465.802607][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1374'. [ 465.833524][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 466.429233][ T5803] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 466.439525][ T5803] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 466.454775][ T5803] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 466.467112][ T5803] usb 2-1: config 127 has no interface number 0 [ 466.473802][ T5803] usb 2-1: config 127 interface 171 has no altsetting 0 [ 466.492804][ T5803] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 466.501993][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.510275][ T5803] usb 2-1: Product: syz [ 466.530145][ T5803] usb 2-1: Manufacturer: syz [ 466.545252][ T5803] usb 2-1: SerialNumber: syz [ 466.628089][ T30] audit: type=1400 audit(1777916773.119:799): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 466.683203][ T10] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 466.839420][ T5611] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 466.876316][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 466.941125][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 467.036873][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 467.828246][ T10] usb 1-1: config 45 has an invalid interface number: 2 but max is 0 [ 467.836391][ T10] usb 1-1: config 45 has no interface number 0 [ 467.842552][ T10] usb 1-1: config 45 interface 2 has no altsetting 0 [ 467.852368][ T10] usb 1-1: string descriptor 0 read error: -22 [ 467.858644][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 467.868749][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.214079][ T5803] usb 2-1: USB disconnect, device number 52 [ 468.226319][ T10] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 468.254583][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 468.433657][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 468.444929][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.538567][T11175] Invalid ELF header type: 3 != 1 [ 468.570061][ T30] audit: type=1400 audit(1777916775.029:800): avc: denied { module_load } for pid=11168 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 468.593853][ T10] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 468.602294][ T10] usb 1-1: media controller created [ 468.609473][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 468.615721][ T10] dvb-usb: MAC address reading failed. [ 468.638443][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.781496][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.538604][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 469.540216][ T30] audit: type=1400 audit(1777916775.289:801): avc: denied { mount } for pid=11170 comm="syz.3.1382" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 469.568141][ T30] audit: type=1400 audit(1777916775.309:802): avc: denied { read } for pid=11170 comm="syz.3.1382" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 469.591995][ T30] audit: type=1400 audit(1777916775.319:803): avc: denied { open } for pid=11170 comm="syz.3.1382" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 469.603482][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 469.616101][ T30] audit: type=1400 audit(1777916775.349:804): avc: denied { ioctl } for pid=11170 comm="syz.3.1382" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 469.647154][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 469.671954][ T10] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 469.728514][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 469.750891][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 469.758166][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 469.785969][ T10] usb 1-1: USB disconnect, device number 50 [ 469.822075][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 470.130127][T11188] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 470.174687][ T30] audit: type=1400 audit(1777916776.039:805): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 470.553613][T11196] netlink: 'syz.0.1387': attribute type 2 has an invalid length. [ 470.563794][T11196] netlink: 'syz.0.1387': attribute type 2 has an invalid length. [ 470.990116][T11206] overlayfs: overlapping lowerdir path [ 471.127531][T11211] program syz.2.1391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.213658][ T5749] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 471.214166][ T10] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 471.593137][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 471.599316][ T10] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 471.607802][ T10] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 471.619659][ T10] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 471.631469][ T10] usb 5-1: config 127 has no interface number 0 [ 471.638337][ T10] usb 5-1: config 127 interface 171 has no altsetting 0 [ 471.647228][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 471.656762][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.664947][ T10] usb 5-1: Product: syz [ 471.666026][ T5749] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 471.669177][ T10] usb 5-1: Manufacturer: syz [ 471.687334][ T5749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.691712][ T10] usb 5-1: SerialNumber: syz [ 471.708730][ T5749] usb 4-1: config 0 has no interface number 0 [ 471.718900][ T5749] usb 4-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 471.731689][ T5749] usb 4-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 471.748891][ T5749] usb 4-1: config 0 interface 49 has no altsetting 0 [ 471.756338][ T5749] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 471.766551][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.781511][ T5749] usb 4-1: config 0 descriptor?? [ 471.953659][ T5730] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 472.013815][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.024495][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.034766][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.047801][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.057676][ T5749] usb 4-1: string descriptor 0 read error: -71 [ 472.068339][ T5749] usb 4-1: USB disconnect, device number 56 [ 472.105265][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 472.118114][ T5730] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 472.129630][ T5730] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.141946][ T5730] usb 2-1: config 0 has no interface number 0 [ 472.155747][ T5730] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 472.165996][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.174631][ T5730] usb 2-1: Product: syz [ 472.178830][ T5730] usb 2-1: Manufacturer: syz [ 472.184639][ T5730] usb 2-1: SerialNumber: syz [ 472.191414][ T5730] usb 2-1: config 0 descriptor?? [ 472.200019][ T5730] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 472.786527][ T5730] usb 2-1: qt2_attach - failed to power on unit: -71 [ 472.796805][ T5730] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 472.820778][ T5730] usb 2-1: USB disconnect, device number 53 [ 472.847752][T11231] netlink: 'syz.3.1397': attribute type 13 has an invalid length. [ 473.384610][T11250] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 473.553382][ T5803] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 473.726924][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.753413][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.769642][ T5803] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 473.779940][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.790020][ T5803] usb 4-1: config 0 descriptor?? [ 473.875039][ T10] usb 5-1: USB disconnect, device number 48 [ 474.015231][ T803] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 474.221363][ T5803] hid_parser_main: 27 callbacks suppressed [ 474.221377][ T5803] konepure 0003:1E7D:2DBE.001D: unknown main item tag 0x0 [ 474.247275][ T5803] konepure 0003:1E7D:2DBE.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 474.263983][ T803] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.275107][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.283936][ T803] usb 2-1: Product: syz [ 474.288183][ T803] usb 2-1: Manufacturer: syz [ 474.292790][ T803] usb 2-1: SerialNumber: syz [ 474.302698][ T803] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 474.317714][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.421164][ T803] usb 4-1: USB disconnect, device number 57 [ 474.453777][ T5749] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 474.605595][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.628072][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.653646][ T5749] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 474.674438][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.689711][ T5749] usb 3-1: config 0 descriptor?? [ 475.881177][ T10] usb 2-1: Service connection timeout for: 256 [ 475.910382][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 475.970232][ T10] ath9k_htc: Failed to initialize the device [ 475.992333][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 476.069869][ T25] block nbd0: Possible stuck request ffff8880286c7000: control (read@0,1024B). Runtime 150 seconds [ 476.075554][T11264] batadv_slave_0: Caught tx_queue_len zero misconfig [ 476.082128][ T25] block nbd0: Possible stuck request ffff8880286c71c0: control (read@1024,1024B). Runtime 150 seconds [ 476.099947][ T25] block nbd0: Possible stuck request ffff8880286c7380: control (read@2048,1024B). Runtime 150 seconds [ 476.107540][T11253] syz.1.1405 (11253): drop_caches: 2 [ 476.116686][ T25] block nbd0: Possible stuck request ffff8880286c7540: control (read@3072,1024B). Runtime 150 seconds [ 476.131884][ T5749] hid-thrustmaster 0003:044F:B65D.001E: item fetching failed at offset 5/7 [ 476.151267][ T5749] hid-thrustmaster 0003:044F:B65D.001E: parse failed with error -22 [ 476.155554][ T803] usb 2-1: USB disconnect, device number 54 [ 476.159792][ T5749] hid-thrustmaster 0003:044F:B65D.001E: probe with driver hid-thrustmaster failed with error -22 [ 476.267541][ T30] audit: type=1400 audit(1777916782.759:806): avc: denied { ioctl } for pid=11267 comm="syz.4.1411" path="socket:[31218]" dev="sockfs" ino=31218 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 476.294665][ T30] audit: type=1400 audit(1777916782.789:807): avc: denied { append } for pid=11267 comm="syz.4.1411" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 478.113874][T11296] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 478.137026][ T803] usb 3-1: USB disconnect, device number 56 [ 478.474784][T11298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.103098][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.110701][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.193837][ T5803] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 479.227761][T11306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.247782][T11306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.363203][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 479.370830][ T5803] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 479.380529][ T5803] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 479.394673][ T5803] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 479.407232][ T5803] usb 2-1: config 127 has no interface number 0 [ 479.414173][ T5803] usb 2-1: config 127 interface 171 has no altsetting 0 [ 479.426685][ T5803] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 479.436355][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.446704][ T5803] usb 2-1: Product: syz [ 479.458165][ T5803] usb 2-1: Manufacturer: syz [ 479.475880][ T5803] usb 2-1: SerialNumber: syz [ 479.578893][ T5612] wg1 speed is unknown, defaulting to 1000 [ 479.579182][ T8502] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.607199][ T5612] syz0: Port: 1 Link DOWN [ 479.627194][ T8502] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.660609][ T8502] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.699573][ T8502] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.249243][T11352] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 480.260862][ T5611] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 480.278627][ T5611] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 480.359449][ T30] audit: type=1400 audit(1777916786.849:808): avc: denied { write } for pid=11328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.536230][ T30] audit: type=1400 audit(1777916787.029:809): avc: denied { write } for pid=11361 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.646413][T11362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.448108][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.458500][T11362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.538157][ T3335] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.555463][ T3335] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.585338][ T3335] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.619335][ T3335] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.640778][ T3335] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.653684][ T3335] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.662972][ T3335] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.668700][ T30] audit: type=1400 audit(1777916788.159:810): avc: denied { write } for pid=11366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.676185][ T3335] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.813910][ T30] audit: type=1400 audit(1777916788.309:811): avc: denied { write } for pid=11384 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.002143][ T5803] usb 2-1: USB disconnect, device number 55 [ 482.072246][T11397] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1439'. [ 482.090636][ T30] audit: type=1400 audit(1777916788.579:812): avc: denied { setcurrent } for pid=11396 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 482.580739][ T30] audit: type=1400 audit(1777916789.019:813): avc: denied { mounton } for pid=11402 comm="syz.2.1440" path="/280/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 483.257618][ T30] audit: type=1400 audit(1777916789.749:814): avc: denied { write } for pid=11388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.503650][ T5612] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 483.664832][T11420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.074686][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.082121][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.119259][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.129034][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.171379][ T5612] usb 2-1: Using ep0 maxpacket: 8 [ 484.207173][ T5612] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 484.227185][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.247571][ T5612] usb 2-1: Product: syz [ 484.254065][ T5612] usb 2-1: Manufacturer: syz [ 484.258687][ T5612] usb 2-1: SerialNumber: syz [ 484.294990][ T3248] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.302387][ T30] audit: type=1400 audit(1777916790.789:815): avc: denied { write } for pid=11426 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.326697][ T3248] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.341176][ T3248] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.368407][T11431] IPVS: dh: FWM 3 0x00000003 - no destination available [ 484.388884][ T5612] usb 2-1: config 0 descriptor?? [ 484.411809][ T3248] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.432497][ T5612] gspca_main: se401-2.14.0 probing 047d:5003 [ 484.663458][T11441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 484.839646][ T5612] gspca_se401: ExtraFeatures: 48 [ 484.845678][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 484.944821][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 484.955498][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 484.984951][ T5612] gspca_se401: Frame size: 1x0 bayer [ 485.011945][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 485.028646][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 485.057150][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 485.082656][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 485.108240][ T5612] gspca_se401: Frame size: 0x0 1/16th janggu [ 485.130105][ T5612] gspca_se401: Frame size: 68x8196 bayer [ 485.156930][ T5612] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27 [ 485.271338][ T5612] usb 2-1: USB disconnect, device number 56 [ 485.701890][T11455] overlayfs: overlapping lowerdir path [ 485.727909][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.745353][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.754117][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.813997][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 485.843210][T11459] program syz.1.1453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.978215][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.991325][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.183651][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 486.216598][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.231399][ T24] usb 5-1: config 0 has no interface number 0 [ 486.259413][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 486.286988][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.306676][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.318505][ T24] usb 5-1: Product: syz [ 486.322814][ T24] usb 5-1: Manufacturer: syz [ 486.332401][ T24] usb 5-1: SerialNumber: syz [ 486.389009][ T24] usb 5-1: config 0 descriptor?? [ 486.600776][T11454] wg1 speed is unknown, defaulting to 1000 [ 486.693784][T11474] overlayfs: overlapping lowerdir path [ 487.126917][T11486] tmpfs: Unknown parameter '1844674407370955161500000000000000000000000' [ 487.197455][ T30] audit: type=1800 audit(1777916793.679:816): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1452" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 487.276256][T11476] smbdirect: ib_dev[syz0] removed [ 487.463172][ T5803] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 487.482809][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.490865][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.499288][T11454] bridge_slave_0: entered allmulticast mode [ 487.517101][T11454] bridge_slave_0: entered promiscuous mode [ 487.548930][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.557120][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.565859][T11454] bridge_slave_1: entered allmulticast mode [ 487.585201][T11454] bridge_slave_1: entered promiscuous mode [ 487.625973][ T5803] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 487.635279][ T5803] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 487.640162][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.643814][ T5803] usb 2-1: config 0 has no interface number 0 [ 487.643849][ T5803] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 487.643880][ T5803] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 487.643901][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.652340][ T5803] usb 2-1: config 0 descriptor?? [ 487.656549][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.818096][T11454] team0: Port device team_slave_0 added [ 487.842342][T11454] team0: Port device team_slave_1 added [ 487.972208][ T5803] usb 2-1: USB disconnect, device number 57 [ 488.034187][ T5628] Bluetooth: hci5: command tx timeout [ 488.075167][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.083028][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.111872][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.125400][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.146695][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.177612][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.326425][T11454] hsr_slave_0: entered promiscuous mode [ 488.332643][T11454] hsr_slave_1: entered promiscuous mode [ 488.338796][T11454] debugfs: 'hsr0' already exists in 'hsr' [ 488.344596][T11454] Cannot create hsr debugfs directory [ 488.966662][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 488.991530][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 489.028364][ T24] usb 5-1: USB disconnect, device number 49 [ 489.032410][ T30] audit: type=1400 audit(1777916795.519:817): avc: denied { map } for pid=11505 comm="syz.4.1459" path="socket:[33823]" dev="sockfs" ino=33823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 489.172689][T11454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 489.181260][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.188941][T11454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 489.195670][ T5803] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 489.205757][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.213453][T11454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.221829][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.229591][T11454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 489.239853][T11454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.319542][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.347343][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.364904][ T5803] usb 3-1: config 0 has no interfaces? [ 489.371590][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.378702][ T8502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.388077][ T5803] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 489.402605][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.419877][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.421512][ T5803] usb 3-1: config 0 descriptor?? [ 489.427041][ T8502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.433676][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 489.479752][T11454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.490327][T11454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.835703][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 490.064066][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 490.114402][ T5628] Bluetooth: hci5: command tx timeout [ 490.130497][ T24] usb 5-1: config 0 has no interface number 0 [ 490.146852][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 490.156940][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.165587][ T24] usb 5-1: Product: syz [ 490.169832][ T24] usb 5-1: Manufacturer: syz [ 490.175099][ T24] usb 5-1: SerialNumber: syz [ 490.184996][ T24] usb 5-1: config 0 descriptor?? [ 490.405832][T11530] ªªªªªª: renamed from vlan0 (while UP) [ 490.501163][T11454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.612004][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 490.653702][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.979092][T11454] veth0_vlan: entered promiscuous mode [ 490.992883][T11454] veth1_vlan: entered promiscuous mode [ 491.036719][T11454] veth0_macvtap: entered promiscuous mode [ 491.078655][T11454] veth1_macvtap: entered promiscuous mode [ 491.096012][T11454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.111728][T11454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.125209][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.134722][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.144718][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.156194][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.300043][ T5344] usb 3-1: USB disconnect, device number 57 [ 491.457013][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.561588][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.612897][ T8502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.635093][ T8502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.667605][ T30] audit: type=1400 audit(1777916798.159:818): avc: denied { mounton } for pid=11454 comm="syz-executor" path="/root/syzkaller.ty37Dx/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 491.850288][ T30] audit: type=1400 audit(1777916798.199:819): avc: denied { mounton } for pid=11454 comm="syz-executor" path="/root/syzkaller.ty37Dx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 491.889160][ T30] audit: type=1400 audit(1777916798.329:820): avc: denied { mounton } for pid=11454 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 491.966287][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 491.982606][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 492.189661][ T30] audit: type=1400 audit(1777916798.669:821): avc: denied { module_load } for pid=11549 comm="syz.5.1450" path=2F6D656D66643A2D42D59A707070F0202864656C6574656429 dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 492.193910][ T5628] Bluetooth: hci5: command tx timeout [ 492.218690][T11550] Invalid ELF header magic: != ELF [ 492.317799][ T30] audit: type=1400 audit(1777916798.809:822): avc: denied { node_bind } for pid=11549 comm="syz.5.1450" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 492.602508][T11568] syzkaller1: entered promiscuous mode [ 492.608933][T11568] syzkaller1: entered allmulticast mode [ 493.521971][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 493.561834][ T24] usb 5-1: USB disconnect, device number 50 [ 494.274122][ T5628] Bluetooth: hci5: command tx timeout [ 494.348095][ T30] audit: type=1400 audit(1777916800.839:823): avc: denied { getopt } for pid=11581 comm="syz.4.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 494.824479][T11586] SELinux: policydb version 3969470 does not match my version range 15-35 [ 494.871642][T11586] SELinux: failed to load policy [ 494.910922][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 495.669356][T11599] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 495.875761][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.997370][T11612] syzkaller0: entered promiscuous mode [ 496.018852][T11612] syzkaller0: entered allmulticast mode [ 498.607259][T11656] qnx4: no qnx4 filesystem (no root dir). [ 498.715354][ T5612] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 498.893716][ T5612] usb 2-1: Using ep0 maxpacket: 8 [ 498.903917][ T5612] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 498.914242][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.923679][ T5612] usb 2-1: Product: syz [ 498.930350][ T5612] usb 2-1: Manufacturer: syz [ 499.892479][ T5612] usb 2-1: SerialNumber: syz [ 500.340262][T11672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.554712][ T5612] usb 2-1: clock source 0 is not valid, cannot use [ 500.893021][T11648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.901712][T11648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.916095][T11648] ÿ: entered allmulticast mode [ 500.925387][T11647] ÿ: left allmulticast mode [ 500.934384][ T5612] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 500.949360][ T5612] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 500.966508][T11677] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1503'. [ 500.972150][ T5612] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 500.981671][T11681] ubi: mtd0 is already attached to ubi16 [ 501.011949][ T5612] usb 2-1: clock source 0 is not valid, cannot use [ 501.030022][ T5612] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 501.041832][T11677] netlink: Conntrack attr has 3 unknown bytes [ 501.059588][ T5612] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 501.202135][T11683] netlink: zone id is out of range [ 501.205097][ T5612] usb 2-1: USB disconnect, device number 58 [ 501.218900][T11683] netlink: zone id is out of range [ 501.281970][T11683] netlink: zone id is out of range [ 501.288836][ T5344] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 501.311309][T11683] netlink: zone id is out of range [ 501.324920][T11683] netlink: zone id is out of range [ 501.340477][T11683] netlink: zone id is out of range [ 501.362935][T11685] overlayfs: overlapping lowerdir path [ 501.373177][T11683] netlink: zone id is out of range [ 501.394421][T11683] netlink: zone id is out of range [ 501.414256][T11683] netlink: zone id is out of range [ 501.453265][T11687] program syz.2.1506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.593633][ T5344] usb 4-1: Using ep0 maxpacket: 8 [ 501.691836][ T5344] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 501.709669][ T5344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 501.826213][ T5344] usb 4-1: Product: syz [ 501.836894][ T5344] usb 4-1: Manufacturer: syz [ 501.848464][ T5344] usb 4-1: SerialNumber: syz [ 501.866056][ T5344] usb 4-1: config 0 descriptor?? [ 501.875804][ T5344] gspca_main: sq905-2.14.0 probing 2770:9120 [ 502.803862][ T5344] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 502.835084][ T5344] sq905 4-1:0.0: probe with driver sq905 failed with error -110 [ 502.858883][ T5344] usb 4-1: USB disconnect, device number 58 [ 503.343736][T11707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1510'. [ 503.537558][T11709] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 503.732565][T11714] netlink: 5252 bytes leftover after parsing attributes in process `syz.5.1514'. [ 503.805071][T11716] syzkaller0: entered promiscuous mode [ 503.823705][T11716] syzkaller0: entered allmulticast mode [ 503.877995][T11722] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1516'. [ 504.178345][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 505.279586][ T5612] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 505.464780][ T5612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 505.508235][ T5612] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.567472][ T5612] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 505.612686][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.656167][ T5612] usb 2-1: config 0 descriptor?? [ 506.439518][ T25] block nbd0: Possible stuck request ffff8880286c7000: control (read@0,1024B). Runtime 180 seconds [ 506.451588][ T25] block nbd0: Possible stuck request ffff8880286c71c0: control (read@1024,1024B). Runtime 180 seconds [ 506.463483][ T25] block nbd0: Possible stuck request ffff8880286c7380: control (read@2048,1024B). Runtime 180 seconds [ 506.477065][ T25] block nbd0: Possible stuck request ffff8880286c7540: control (read@3072,1024B). Runtime 180 seconds [ 506.570189][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x3 [ 506.603185][ T5738] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 506.642246][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.665500][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.691054][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.711513][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.731443][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.742785][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.768810][ T5612] sigmamicro 0003:1C4F:0059.001F: unknown main item tag 0x0 [ 506.804698][ T5612] sigmamicro 0003:1C4F:0059.001F: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 506.824804][ T5738] usb 4-1: config 0 has no interfaces? [ 506.830462][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 506.843710][ T5738] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 506.871498][ T5612] usb 2-1: USB disconnect, device number 59 [ 506.878466][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.906074][ T5738] usb 4-1: config 0 descriptor?? [ 506.943784][T11757] fido_id[11757]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 507.009154][ T24] usb 3-1: config 0 has no interfaces? [ 507.023021][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 507.042008][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.064421][ T24] usb 3-1: config 0 descriptor?? [ 507.233815][ T5730] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 507.384301][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 507.514513][ T5730] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 507.659020][ T30] audit: type=1400 audit(1777916814.149:824): avc: denied { ioctl } for pid=11765 comm="syz.5.1531" path="mnt:[4026533946]" dev="nsfs" ino=4026533946 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.673579][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 507.698212][ T5730] usb usb5-port1: attempt power cycle [ 507.753371][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 508.116137][ T5730] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 508.663655][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 509.107832][ T5344] usb 3-1: USB disconnect, device number 58 [ 509.117256][ T10] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 509.131587][ T10] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 509.140293][ T5716] usb 4-1: USB disconnect, device number 59 [ 509.145459][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 509.149121][ T10] usb 2-1: config 0 has no interface number 0 [ 509.157762][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has an invalid bInterval 58, changing to 9 [ 509.193633][ T10] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 49352, setting to 1024 [ 509.210708][ T5628] Bluetooth: hci1: unexpected event for opcode 0x041b [ 509.217907][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 509.217932][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.237174][ T10] usb 2-1: config 0 descriptor?? [ 509.293983][ T5730] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 509.317650][ T5730] usb 5-1: Invalid ep0 maxpacket: 64 [ 509.324204][ T5730] usb usb5-port1: unable to enumerate USB device [ 509.394477][ T30] audit: type=1400 audit(1777916815.889:825): avc: denied { nlmsg_read } for pid=11783 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 509.395128][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 509.533175][ T5344] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 509.703433][ T5344] usb 3-1: Using ep0 maxpacket: 16 [ 509.724641][ T5344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 509.739463][ T5344] usb 3-1: config 8 has too many interfaces: 234, using maximum allowed: 32 [ 509.752089][ T5344] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 509.762855][ T5344] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 234 [ 509.801243][ T5344] usb 3-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 509.811275][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.821235][ T5344] usb 3-1: Product: syz [ 509.829282][ T5344] usb 3-1: Manufacturer: syz [ 509.835123][ T5344] usb 3-1: SerialNumber: syz [ 509.908739][ T10] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input28 [ 510.059360][T11791] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 510.095737][ T5344] usb 3-1: USB disconnect, device number 59 [ 510.498626][ T30] audit: type=1400 audit(1777916816.989:826): avc: denied { validate_trans } for pid=11794 comm="syz.4.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 510.534016][T11795] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1542'. [ 511.238108][ T24] usb 2-1: USB disconnect, device number 60 [ 511.238243][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 511.971944][T11818] netlink: 'syz.1.1549': attribute type 12 has an invalid length. [ 512.390348][T11823] net_ratelimit: 3 callbacks suppressed [ 512.390379][T11823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.721949][T11825] overlayfs: overlapping lowerdir path [ 512.821253][T11825] program syz.3.1550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.552018][T11850] can0: slcan on ttyS3. [ 513.563413][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 513.664394][T11851] can0 (unregistered): slcan off ttyS3. [ 513.758095][ T10] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 513.794975][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 513.806838][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.848547][ T10] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 514.343118][ T5716] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 514.578478][ T30] audit: type=1400 audit(1777916821.069:827): avc: denied { write } for pid=11853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.605315][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 514.668338][ T5716] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 514.695054][T11881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.993170][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 515.021251][ T5716] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 515.036867][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.073848][ T5716] usb 4-1: config 0 descriptor?? [ 515.086237][ T5344] usb 5-1: USB disconnect, device number 55 [ 515.291525][ T30] audit: type=1400 audit(1777916821.779:828): avc: denied { write } for pid=11892 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.693309][ T803] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 515.805265][ T5344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 515.843170][ T803] usb 3-1: device descriptor read/64, error -71 [ 515.857274][ T30] audit: type=1400 audit(1777916822.349:829): avc: denied { write } for pid=11897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.953873][ T5344] usb 6-1: device descriptor read/64, error -71 [ 515.964784][ T30] audit: type=1400 audit(1777916822.439:830): avc: denied { write } for pid=11915 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.998504][ T5716] corsair-cpro 0003:1B1C:0C10.0020: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 516.103896][ T803] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 516.129942][ T5716] corsair-cpro 0003:1B1C:0C10.0020: probe with driver corsair-cpro failed with error -71 [ 516.213135][ T5344] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 516.233261][ T803] usb 3-1: device descriptor read/64, error -71 [ 516.332224][ T5716] usb 4-1: USB disconnect, device number 60 [ 516.346360][ T803] usb usb3-port1: attempt power cycle [ 516.353512][ T5344] usb 6-1: device descriptor read/64, error -71 [ 516.473723][ T5344] usb usb6-port1: attempt power cycle [ 517.153512][ T803] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 517.184781][ T803] usb 3-1: device descriptor read/8, error -71 [ 517.334238][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 517.363138][ T5344] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 517.393979][ T5344] usb 6-1: device descriptor read/8, error -71 [ 517.443223][ T803] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 517.461870][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'. [ 517.479442][ T803] usb 3-1: device descriptor read/8, error -71 [ 517.495589][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 517.515403][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.533778][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.553782][ T24] usb 5-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 517.573483][ T24] usb 5-1: config 1 interface 1 has no altsetting 1 [ 517.585697][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.604103][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.604138][ T803] usb usb3-port1: unable to enumerate USB device [ 517.623660][ T24] usb 5-1: Product: syz [ 517.627839][ T24] usb 5-1: Manufacturer: syz [ 517.632426][ T24] usb 5-1: SerialNumber: syz [ 517.645685][ T5344] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 517.695555][ T5344] usb 6-1: device descriptor read/8, error -71 [ 517.826333][ T5344] usb usb6-port1: unable to enumerate USB device [ 517.968576][ T24] cdc_ncm 5-1:1.0: skipping garbage [ 517.989049][ T24] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 518.106214][ T24] cdc_ncm 5-1:1.0: bind() failure [ 518.127830][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 518.138722][ T24] cdc_ncm 5-1:1.1: bind() failure [ 518.151285][ T24] usb 5-1: USB disconnect, device number 56 [ 519.785330][ T30] audit: type=1400 audit(1777916826.269:831): avc: denied { read write } for pid=11958 comm="syz.4.1573" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 519.837867][ T30] audit: type=1400 audit(1777916826.269:832): avc: denied { open } for pid=11958 comm="syz.4.1573" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 520.019312][ T30] audit: type=1400 audit(1777916826.499:833): avc: denied { setattr } for pid=11958 comm="syz.4.1573" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 521.654659][T11978] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 521.689690][ T30] audit: type=1400 audit(1777916828.169:834): avc: denied { connect } for pid=11976 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 521.796129][T11983] syz.3.1583 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 521.849965][ T30] audit: type=1400 audit(1777916828.339:835): avc: denied { read } for pid=11976 comm="syz.3.1583" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 521.895695][ T30] audit: type=1400 audit(1777916828.389:836): avc: denied { bind } for pid=11976 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 521.896379][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1583'. [ 521.974039][T11983] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1583'. [ 522.692437][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 523.008148][ T5730] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 523.157664][ T5730] usb 3-1: device descriptor read/64, error -71 [ 523.342702][ T5628] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 523.406230][ T5730] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 523.527613][T12005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.545301][ T5730] usb 3-1: device descriptor read/64, error -71 [ 523.788467][ T5730] usb usb3-port1: attempt power cycle [ 523.952501][T12009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.972519][T12010] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 524.203866][ T5730] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 524.293703][ T5730] usb 3-1: device descriptor read/8, error -71 [ 524.362633][T12016] overlay: ./file0 is not a directory [ 524.637129][ T5730] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 524.645435][ T30] audit: type=1400 audit(1777916831.069:837): avc: denied { write } for pid=12026 comm="syz.4.1597" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 524.700231][ T5730] usb 3-1: device descriptor read/8, error -71 [ 524.705918][T12031] fuse: Unknown parameter '' [ 525.125238][ T5730] usb usb3-port1: unable to enumerate USB device [ 525.602556][T12050] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 525.677265][ T30] audit: type=1400 audit(1777916832.169:838): avc: denied { write } for pid=12032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.829425][ T30] audit: type=1400 audit(1777916832.319:839): avc: denied { write } for pid=12056 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.005964][T12062] syzkaller0: entered promiscuous mode [ 526.015571][T12062] syzkaller0: entered allmulticast mode [ 526.218981][ T30] audit: type=1400 audit(1777916832.709:840): avc: denied { write } for pid=12063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.414524][ T30] audit: type=1400 audit(1777916832.829:841): avc: denied { write } for pid=12076 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.645234][ T803] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 526.688420][T12090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.512836][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.523707][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.400689][T12105] tipc: Enabled bearer , priority 0 [ 528.439378][T12105] syzkaller0: entered promiscuous mode [ 528.450452][T12105] syzkaller0: entered allmulticast mode [ 528.545256][T12105] syzkaller0: mtu less than device minimum [ 528.561551][T12101] tipc: Resetting bearer [ 528.630600][T12101] tipc: Disabling bearer [ 528.818788][T12119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.130980][T12123] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 529.255256][T12125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.628830][ T803] usb 6-1: unable to get BOS descriptor or descriptor too short [ 529.653429][ T803] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 529.666312][ T803] usb 6-1: can't read configurations, error -71 [ 529.877039][T12129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.094496][T12136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.108512][T12139] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 530.473129][ T803] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 530.732316][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 531.067356][ T803] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.296432][ T803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.391979][ T803] usb 6-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 532.433662][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.467705][ T803] usb 6-1: Product: syz [ 532.480512][ T803] usb 6-1: Manufacturer: syz [ 532.492220][ T803] usb 6-1: SerialNumber: syz [ 532.713326][ T5344] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 532.724883][ T803] usb 6-1: 0:1 : does not exist [ 532.735789][ T803] usb 6-1: unit 5 not found! [ 532.762001][T12165] trusted_key: encrypted_key: insufficient parameters specified [ 532.883030][ T803] usb 6-1: USB disconnect, device number 7 [ 532.889217][ T5344] usb 3-1: Using ep0 maxpacket: 8 [ 532.917165][ T5344] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 532.956857][ T5344] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.439394][ T5344] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.451251][ T5344] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.461440][ T5344] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.504632][ T5344] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.544403][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.791513][ T5344] usb 3-1: GET_CAPABILITIES returned 0 [ 533.803154][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 533.803995][ T5344] usbtmc 3-1:16.0: can't read capabilities [ 533.876908][T12179] uprobe: syz.4.1632:12179 failed to unregister, leaking uprobe [ 533.954503][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 533.967268][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 533.991671][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.048545][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.077017][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.088153][ T24] usb 6-1: Product: syz [ 534.109622][ T24] usb 6-1: Manufacturer: syz [ 534.145394][ T24] usb 6-1: SerialNumber: syz [ 534.170591][ T24] usb 6-1: config 0 descriptor?? [ 534.197397][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 534.728952][T12201] binder: 12198:12201 ioctl c018620b 2000000001c0 returned -14 [ 534.938732][T12212] FAULT_INJECTION: forcing a failure. [ 534.938732][T12212] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 534.967510][T12212] CPU: 0 UID: 0 PID: 12212 Comm: syz.4.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.967538][T12212] Tainted: [L]=SOFTLOCKUP [ 534.967544][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.967554][T12212] Call Trace: [ 534.967560][T12212] [ 534.967566][T12212] dump_stack_lvl+0x100/0x190 [ 534.967592][T12212] should_fail_ex.cold+0x5/0xa [ 534.967624][T12212] _copy_to_user+0x32/0xd0 [ 534.967651][T12212] simple_read_from_buffer+0xcb/0x170 [ 534.967674][T12212] proc_fail_nth_read+0x1af/0x230 [ 534.967694][T12212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.967714][T12212] ? rw_verify_area+0xce/0x6d0 [ 534.967731][T12212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.967749][T12212] vfs_read+0x1e4/0xb30 [ 534.967771][T12212] ? __pfx_vfs_read+0x10/0x10 [ 534.967788][T12212] ? __fget_files+0x215/0x3d0 [ 534.967814][T12212] ? __fget_files+0x21f/0x3d0 [ 534.967841][T12212] ksys_read+0x12a/0x250 [ 534.967859][T12212] ? __pfx_ksys_read+0x10/0x10 [ 534.967884][T12212] do_syscall_64+0x10b/0xf80 [ 534.967904][T12212] ? clear_bhb_loop+0x40/0x90 [ 534.967925][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.967943][T12212] RIP: 0033:0x7f12b215d60e [ 534.967959][T12212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.967975][T12212] RSP: 002b:00007f12b03f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.967992][T12212] RAX: ffffffffffffffda RBX: 00007f12b03f66c0 RCX: 00007f12b215d60e [ 534.968003][T12212] RDX: 000000000000000f RSI: 00007f12b03f60a0 RDI: 0000000000000005 [ 534.968013][T12212] RBP: 00007f12b03f6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.968023][T12212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.968033][T12212] R13: 00007f12b2416038 R14: 00007f12b2415fa0 R15: 00007ffc96a48868 [ 534.968057][T12212] [ 535.246750][ T5344] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 535.454728][T12219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.890412][ T24] gspca_sonixj: i2c_w8 err -71 [ 535.974533][ T24] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 536.015559][ T24] usb 6-1: USB disconnect, device number 8 [ 536.837014][ T25] block nbd0: Possible stuck request ffff8880286c7000: control (read@0,1024B). Runtime 210 seconds [ 536.848530][ T25] block nbd0: Possible stuck request ffff8880286c71c0: control (read@1024,1024B). Runtime 210 seconds [ 536.861224][ T25] block nbd0: Possible stuck request ffff8880286c7380: control (read@2048,1024B). Runtime 210 seconds [ 536.872863][ T25] block nbd0: Possible stuck request ffff8880286c7540: control (read@3072,1024B). Runtime 210 seconds [ 537.272822][ T5628] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 538.129672][ T30] audit: type=1400 audit(1777916844.619:842): avc: denied { mount } for pid=12236 comm="syz.5.1652" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 538.163724][ T30] audit: type=1400 audit(1777916844.659:843): avc: denied { remount } for pid=12236 comm="syz.5.1652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 538.523129][ T803] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 538.623615][ T5612] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 538.663257][ T803] usb 4-1: device descriptor read/64, error -71 [ 538.784656][ T5612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.795972][ T5612] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.806657][ T5612] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.825944][ T5612] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.836618][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.889671][ T5612] usb 6-1: config 0 descriptor?? [ 538.923142][ T803] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 539.063156][ T803] usb 4-1: device descriptor read/64, error -71 [ 539.186106][ T803] usb usb4-port1: attempt power cycle [ 539.233719][T12157] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 539.269889][ T5716] usb 3-1: USB disconnect, device number 68 [ 539.533401][ T803] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 539.564860][ T803] usb 4-1: device descriptor read/8, error -71 [ 539.678948][T12288] cgroup: release_agent respecified [ 539.780082][T12290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.839610][ T803] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 539.868528][ T803] usb 4-1: device descriptor read/8, error -71 [ 539.986148][ T803] usb usb4-port1: unable to enumerate USB device [ 540.166317][ T30] audit: type=1400 audit(1777916846.659:844): avc: denied { unmount } for pid=11454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 540.195639][ T5612] usbhid 6-1:0.0: can't add hid device: -71 [ 540.231096][ T5612] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 540.332348][ T5612] usb 6-1: USB disconnect, device number 9 [ 541.055007][T12309] netlink: 'syz.5.1672': attribute type 4 has an invalid length. [ 541.101824][ T5628] Bluetooth: hci0: connection err: -111 [ 541.108550][ T803] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 541.283103][ T803] usb 5-1: Using ep0 maxpacket: 32 [ 541.323189][ T803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.366290][ T803] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.427933][ T803] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.482145][ T803] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 541.568057][ T803] usb 5-1: config 0 interface 0 has no altsetting 0 [ 541.578071][T12307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 541.584474][ T803] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 541.594567][T12307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 541.606022][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.616391][T12307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 541.628189][T12307] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 541.658529][ T803] usb 5-1: config 0 descriptor?? [ 541.665715][T12307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 541.778599][T12307] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 541.835816][T12307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 541.861286][T12307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 541.883868][ T30] audit: type=1400 audit(1777916848.369:845): avc: denied { write } for pid=12312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.132627][ T30] audit: type=1400 audit(1777916848.619:846): avc: denied { write } for pid=12328 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.227761][T12307] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 542.271390][T12307] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 542.327182][ T803] usbhid 5-1:0.0: can't add hid device: -71 [ 542.336417][ T803] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 542.352607][ T803] usb 5-1: USB disconnect, device number 57 [ 543.218256][ T30] audit: type=1400 audit(1777916849.709:847): avc: denied { write } for pid=12331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.633238][ T803] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 543.914307][ T803] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 544.178061][ T803] usb 2-1: config 5 has no interface number 0 [ 544.214265][ T803] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 544.245511][ T30] audit: type=1400 audit(1777916850.729:848): avc: denied { write } for pid=12366 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.340387][ T803] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 544.390913][ T803] usb 2-1: config 5 interface 123 has no altsetting 0 [ 544.417907][T12373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.446576][ T803] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 544.483640][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 544.774795][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 544.774997][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.794610][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 544.797454][ T803] usb 2-1: Product: syz [ 544.810374][ T24] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 544.817145][ T803] usb 2-1: Manufacturer: syz [ 544.856218][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 544.887447][ T803] usb 2-1: SerialNumber: syz [ 544.889834][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.926210][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 544.976528][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.999452][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.051621][ T24] usbtmc 6-1:16.0: bulk endpoints not found [ 545.192684][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.227186][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.289615][ T803] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 545.350369][ T803] usb 2-1: USB disconnect, device number 62 [ 545.371241][ T30] audit: type=1400 audit(1777916851.859:849): avc: denied { write } for pid=12376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.527266][ T30] audit: type=1400 audit(1777916852.019:850): avc: denied { write } for pid=12406 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.953191][ T803] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 546.045496][ T30] audit: type=1400 audit(1777916852.539:851): avc: denied { write } for pid=12415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.403358][ T803] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 546.413088][ T803] usb 5-1: config 0 has no interface number 0 [ 546.426289][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 546.449305][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 546.461347][ T803] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 546.472986][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 546.484076][ T803] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 546.494980][ T803] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.507975][ T803] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.517086][ T803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.530227][ T30] audit: type=1400 audit(1777916853.019:852): avc: denied { write } for pid=12439 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.563519][ T803] usb 5-1: config 0 descriptor?? [ 546.589499][T12413] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.598898][T12413] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.641337][ T803] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 546.843786][T12413] ldusb 5-1:0.55: Write buffer overflow, 159 bytes dropped [ 546.892923][ T24] usb 5-1: USB disconnect, device number 58 [ 546.926470][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 547.353683][ T803] usb 6-1: USB disconnect, device number 10 [ 547.598049][ T30] audit: type=1400 audit(1777916854.079:853): avc: denied { write } for pid=12443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.056294][T12472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.388165][T12481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.509717][ T30] audit: type=1400 audit(1777916854.999:854): avc: denied { write } for pid=12482 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.655814][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 548.711843][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1711'. [ 550.227119][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.747025][T12533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.109239][T12539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 551.278253][ T30] audit: type=1400 audit(1777916857.759:855): avc: denied { write } for pid=12497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.342181][ T30] audit: type=1400 audit(1777916858.829:856): avc: denied { write } for pid=12560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.815273][T12588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.519803][T12598] team0: entered allmulticast mode [ 553.532455][T12598] team_slave_0: entered allmulticast mode [ 553.563470][T12598] team_slave_1: entered allmulticast mode [ 553.593250][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 553.611835][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.773547][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 553.804945][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 553.835881][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.887157][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 553.906444][ T10] pvrusb2: ********** [ 553.919715][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 553.969488][ T10] pvrusb2: Important functionality might not be entirely working. [ 554.015597][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 554.073497][ T10] pvrusb2: ********** [ 554.126620][ T2357] pvrusb2: Invalid write control endpoint [ 554.386825][ T30] audit: type=1400 audit(1777916860.859:857): avc: denied { wake_alarm } for pid=12591 comm="syz.5.1737" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.471846][ T24] usb 6-1: USB disconnect, device number 11 [ 554.486269][ T2357] pvrusb2: Invalid write control endpoint [ 554.523839][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 554.548927][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 554.572209][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 554.612064][ T2357] pvrusb2: Device being rendered inoperable [ 554.659331][ T2357] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 554.704680][ T2357] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 554.829184][ T2357] pvrusb2: Attached sub-driver cx25840 [ 554.875876][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 554.920143][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 555.623179][T11545] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 555.738506][T12627] input: syz1 as /devices/virtual/input/input30 [ 555.803184][T11545] usb 5-1: Using ep0 maxpacket: 32 [ 555.824494][T11545] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 555.838012][T11545] usb 5-1: config 0 has no interface number 0 [ 555.859211][T12628] input: syz1 as /devices/virtual/input/input31 [ 555.880879][T11545] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.906312][T12628] input: failed to attach handler leds to device input31, error: -6 [ 556.076227][T11545] usb 5-1: config 0 interface 85 has no altsetting 0 [ 556.138827][ T30] audit: type=1400 audit(1777916862.629:858): avc: denied { map_create } for pid=12634 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.196080][T11545] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 556.225533][T11545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.297300][T11545] usb 5-1: Product: syz [ 556.310124][ T30] audit: type=1400 audit(1777916862.629:859): avc: denied { map_read map_write } for pid=12634 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 556.345310][T11545] usb 5-1: Manufacturer: syz [ 556.360189][T12637] tmpfs: Bad value for 'mpol' [ 557.312980][T11545] usb 5-1: SerialNumber: syz [ 557.321814][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.330146][T11545] usb 5-1: config 0 descriptor?? [ 559.357345][ C0] sched: DL replenish lagged too much [ 559.478392][T11545] appletouch 5-1:0.85: Failed to read mode from device. [ 559.485911][T11545] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 559.505282][T11545] usb 5-1: USB disconnect, device number 59 [ 560.664990][ T30] audit: type=1400 audit(1777916862.669:860): avc: denied { read } for pid=4962 comm="acpid" name="event5" dev="devtmpfs" ino=3724 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.014238][ T30] audit: type=1400 audit(1777916862.669:861): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3724 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 566.279208][ T30] audit: type=1400 audit(1777916862.669:862): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=3724 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 567.258836][ T30] audit: type=1400 audit(1777916862.669:863): avc: denied { ioctl } for pid=12621 comm="syz.4.1745" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 567.284421][ T30] audit: type=1400 audit(1777916862.669:864): avc: denied { prog_load } for pid=12634 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.303497][ T30] audit: type=1400 audit(1777916862.669:865): avc: denied { bpf } for pid=12634 comm="syz.2.1747" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.283793][ T4977] udevd[4977]: worker [7595] /devices/virtual/block/nbd0 timeout; kill it [ 569.293808][ T4977] udevd[4977]: seq 14619 '/devices/virtual/block/nbd0' killed [ 570.457433][ T25] block nbd0: Possible stuck request ffff8880286c7000: control (read@0,1024B). Runtime 240 seconds [ 571.502376][ T25] block nbd0: Possible stuck request ffff8880286c71c0: control (read@1024,1024B). Runtime 240 seconds [ 571.514026][ T25] block nbd0: Possible stuck request ffff8880286c7380: control (read@2048,1024B). Runtime 240 seconds [ 571.525730][ T25] block nbd0: Possible stuck request ffff8880286c7540: control (read@3072,1024B). Runtime 240 seconds [ 571.550769][ T30] audit: type=1400 audit(1777916862.669:866): avc: denied { perfmon } for pid=12634 comm="syz.2.1747" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.524563][ T30] audit: type=1400 audit(1777916862.679:867): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 572.548778][ T30] audit: type=1400 audit(1777916862.679:868): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.524441][ T30] audit: type=1400 audit(1777916862.679:869): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.550053][ T30] audit: type=1400 audit(1777916862.679:870): avc: denied { prog_run } for pid=12634 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.715976][ T30] audit: type=1400 audit(1777916862.699:871): avc: denied { write } for pid=12634 comm="syz.2.1747" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 578.104617][ T30] audit: type=1400 audit(1777916862.699:872): avc: denied { read } for pid=12634 comm="syz.2.1747" name="cec2" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 578.200970][ T30] audit: type=1400 audit(1777916862.699:873): avc: denied { open } for pid=12634 comm="syz.2.1747" path="/dev/cec2" dev="devtmpfs" ino=963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 581.065082][ T30] audit: type=1400 audit(1777916862.699:874): avc: denied { allowed } for pid=12634 comm="syz.2.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 582.959659][ T30] audit: type=1400 audit(1777916862.699:875): avc: denied { create } for pid=12634 comm="syz.2.1747" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 583.013819][ T30] audit: type=1400 audit(1777916862.699:876): avc: denied { map } for pid=12634 comm="syz.2.1747" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 583.087556][ T30] audit: type=1400 audit(1777916862.699:877): avc: denied { read write } for pid=12634 comm="syz.2.1747" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 586.063811][ T30] audit: type=1400 audit(1777916862.709:878): avc: denied { read write } for pid=12634 comm="syz.2.1747" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.264935][ T30] audit: type=1400 audit(1777916862.709:879): avc: denied { open } for pid=12634 comm="syz.2.1747" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 586.505018][ T30] audit: type=1400 audit(1777916862.709:880): avc: denied { ioctl } for pid=12634 comm="syz.2.1747" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 587.403290][ T30] audit: type=1400 audit(1777916862.749:881): avc: denied { read } for pid=12636 comm="syz.3.1749" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 587.512464][ T30] audit: type=1400 audit(1777916862.749:882): avc: denied { open } for pid=12636 comm="syz.3.1749" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 589.613471][ T30] audit: type=1400 audit(1777916862.849:883): avc: denied { mounton } for pid=12636 comm="syz.3.1749" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 590.761768][ T30] audit: type=1400 audit(1777916862.869:884): avc: denied { name_bind } for pid=12636 comm="syz.3.1749" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 594.724799][ T30] audit: type=1400 audit(1777916862.879:885): avc: denied { node_bind } for pid=12636 comm="syz.3.1749" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 595.024634][ T30] audit: type=1400 audit(1777916889.609:886): avc: denied { execmem } for pid=12644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 601.904183][ T30] audit: type=1400 audit(1777916908.379:887): avc: denied { create } for pid=12650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 601.995039][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 602.014492][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 602.029332][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 602.037129][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 602.045324][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 602.084665][ T30] audit: type=1400 audit(1777916908.389:888): avc: denied { read } for pid=12650 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 602.124802][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 602.131887][ T30] audit: type=1400 audit(1777916908.389:889): avc: denied { open } for pid=12650 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 602.139539][T12652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 602.184569][T12652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 602.192276][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 602.200965][ T25] block nbd0: Possible stuck request ffff8880286c7000: control (read@0,1024B). Runtime 270 seconds [ 602.201996][T12657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 602.216662][ T25] block nbd0: Possible stuck request ffff8880286c71c0: control (read@1024,1024B). Runtime 270 seconds [ 602.221487][ T30] audit: type=1400 audit(1777916908.459:890): avc: denied { ioctl } for pid=12650 comm="syz-executor" path="socket:[38692]" dev="sockfs" ino=38692 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 602.232410][T12652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 602.263875][ T25] block nbd0: Possible stuck request ffff8880286c7380: control (read@2048,1024B). Runtime 270 seconds [ 602.276410][T12659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 602.276846][ T25] block nbd0: Possible stuck request ffff8880286c7540: control (read@3072,1024B). Runtime 270 seconds [ 602.295284][T12659] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 602.309385][T12652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 602.309996][T12660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 602.317437][T12652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.334040][T12660] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 602.355162][T12660] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 602.366239][ T30] audit: type=1400 audit(1777916908.829:891): avc: denied { read } for pid=12650 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 602.399921][T12660] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 602.414599][ T5611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 602.428702][ T5611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 602.435783][T12660] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.449042][T12660] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 602.460799][T12660] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 602.469773][T12660] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 602.610319][ T30] audit: type=1400 audit(1777916908.829:892): avc: denied { open } for pid=12650 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 602.644302][ T30] audit: type=1400 audit(1777916908.889:893): avc: denied { mounton } for pid=12650 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 602.668150][ T30] audit: type=1400 audit(1777916908.969:894): avc: denied { module_request } for pid=12650 comm="syz-executor" kmod="netdev-nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 602.796395][ T30] audit: type=1400 audit(1777916909.029:895): avc: denied { sys_module } for pid=12650 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 603.138784][T12661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.166654][T12661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.174609][T12661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.185690][T12661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.196247][T12661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 604.157575][ T30] audit: type=1400 audit(1777916910.649:896): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 604.392328][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.399689][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.407246][T12654] bridge_slave_0: entered allmulticast mode [ 604.414730][T12654] bridge_slave_0: entered promiscuous mode [ 604.435079][T12660] Bluetooth: hci7: command tx timeout [ 604.435083][T12661] Bluetooth: hci6: command tx timeout [ 604.449013][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.457453][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.465086][T12654] bridge_slave_1: entered allmulticast mode [ 604.472349][T12654] bridge_slave_1: entered promiscuous mode [ 604.505292][ T3335] bridge_slave_1: left allmulticast mode [ 604.512026][ T3335] bridge_slave_1: left promiscuous mode [ 604.518110][T12660] Bluetooth: hci8: command tx timeout [ 604.523901][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.533097][ T3335] bridge_slave_0: left allmulticast mode [ 604.538809][ T3335] bridge_slave_0: left promiscuous mode [ 604.544691][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.594068][T12660] Bluetooth: hci9: command tx timeout [ 604.726901][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.736472][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.745570][ T3335] bond0 (unregistering): Released all slaves [ 604.858381][T12654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.870370][T12654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.041716][ T3335] IPVS: stopping master sync thread 6335 ... [ 605.098861][T12654] team0: Port device team_slave_0 added [ 605.177372][T12650] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.200924][T12650] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.217538][T12650] bridge_slave_0: entered allmulticast mode [ 605.237496][T12660] Bluetooth: hci1: command tx timeout [ 605.248440][T12650] bridge_slave_0: entered promiscuous mode [ 605.266058][T12650] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.274124][T12650] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.290247][T12650] bridge_slave_1: entered allmulticast mode [ 605.306514][T12650] bridge_slave_1: entered promiscuous mode [ 605.323987][T12656] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.331319][T12656] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.348749][T12656] bridge_slave_0: entered allmulticast mode [ 605.362480][T12656] bridge_slave_0: entered promiscuous mode [ 605.400902][T12654] team0: Port device team_slave_1 added [ 605.448227][T12656] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.456653][T12656] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.464960][T12656] bridge_slave_1: entered allmulticast mode [ 605.471582][T12656] bridge_slave_1: entered promiscuous mode [ 605.532787][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 605.554104][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.561230][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.569260][T12653] bridge_slave_0: entered allmulticast mode [ 605.576366][T12653] bridge_slave_0: entered promiscuous mode [ 605.592194][T12650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.610888][T12656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.620920][T12654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.628145][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.654280][T12654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.665285][T12653] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.672379][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.680224][T12653] bridge_slave_1: entered allmulticast mode [ 605.687852][T12653] bridge_slave_1: entered promiscuous mode [ 605.694739][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.701789][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.709713][T12673] bridge_slave_0: entered allmulticast mode [ 605.716531][T12673] bridge_slave_0: entered promiscuous mode [ 605.725151][T12650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.741856][T12656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.751399][T12654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.758711][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.785250][T12654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.822200][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.829421][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.837088][T12673] bridge_slave_1: entered allmulticast mode [ 605.844179][T12673] bridge_slave_1: entered promiscuous mode [ 605.898440][T12650] team0: Port device team_slave_0 added [ 605.915398][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.927389][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.940597][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.951199][T12650] team0: Port device team_slave_1 added [ 605.958329][T12656] team0: Port device team_slave_0 added [ 605.965782][T12656] team0: Port device team_slave_1 added [ 606.004361][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.095850][T12654] hsr_slave_0: entered promiscuous mode [ 606.102031][T12654] hsr_slave_1: entered promiscuous mode [ 606.108677][T12654] debugfs: 'hsr0' already exists in 'hsr' [ 606.114921][T12654] Cannot create hsr debugfs directory [ 606.120865][T12656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.128182][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.154357][T12656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.166683][T12653] team0: Port device team_slave_0 added [ 606.173882][T12673] team0: Port device team_slave_0 added [ 606.185539][ T3335] hsr_slave_0: left promiscuous mode [ 606.191137][ T3335] hsr_slave_1: left promiscuous mode [ 606.197395][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.205301][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.324859][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 606.337088][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 606.426978][T12650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.434375][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.460383][T12650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.477008][T12650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.484291][T12650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.510424][T12650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.521157][T12660] Bluetooth: hci7: command tx timeout [ 606.521571][T12661] Bluetooth: hci6: command tx timeout [ 606.540364][T12656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.547368][T12656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.573378][T12656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.585356][T12653] team0: Port device team_slave_1 added [ 606.591894][T12673] team0: Port device team_slave_1 added [ 606.597630][T12661] Bluetooth: hci8: command tx timeout [ 606.673299][T12661] Bluetooth: hci9: command tx timeout [ 606.682065][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.699811][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.736112][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.811748][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.827454][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.860794][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.906998][T12650] hsr_slave_0: entered promiscuous mode [ 606.918528][T12650] hsr_slave_1: entered promiscuous mode [ 606.925785][T12650] debugfs: 'hsr0' already exists in 'hsr' [ 606.926136][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 606.926146][ T30] audit: type=1400 audit(1777916913.419:914): avc: denied { write } for pid=12755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.931528][T12650] Cannot create hsr debugfs directory [ 606.968846][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.976856][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.005682][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.060780][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.062631][ T30] audit: type=1400 audit(1777916913.549:915): avc: denied { write } for pid=12766 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.068905][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.130097][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.167613][T12656] hsr_slave_0: entered promiscuous mode [ 607.174048][T12656] hsr_slave_1: entered promiscuous mode [ 607.179907][T12656] debugfs: 'hsr0' already exists in 'hsr' [ 607.185708][T12656] Cannot create hsr debugfs directory [ 607.200978][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 607.219355][T12673] hsr_slave_0: entered promiscuous mode [ 607.226190][T12673] hsr_slave_1: entered promiscuous mode [ 607.232152][T12673] debugfs: 'hsr0' already exists in 'hsr' [ 607.238048][T12673] Cannot create hsr debugfs directory [ 607.269926][ T3335] IPVS: stop unused estimator thread 0... [ 607.313464][T12661] Bluetooth: hci1: command tx timeout [ 607.386965][T12653] hsr_slave_0: entered promiscuous mode [ 607.392980][T12653] hsr_slave_1: entered promiscuous mode [ 607.399439][T12653] debugfs: 'hsr0' already exists in 'hsr' [ 607.405610][T12653] Cannot create hsr debugfs directory [ 607.591594][ T3335] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.745131][ T3335] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.781615][ T30] audit: type=1400 audit(1777916914.269:916): avc: denied { write } for pid=12769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.861436][ T3335] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.891248][ T30] audit: type=1400 audit(1777916914.379:917): avc: denied { write } for pid=12780 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.925140][T12654] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 607.925718][ T30] audit: type=1400 audit(1777916914.409:918): avc: denied { create } for pid=12654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.958587][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.984784][T12654] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 607.996049][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.999685][ T30] audit: type=1400 audit(1777916914.419:919): avc: denied { write } for pid=12654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 608.010764][T12654] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 608.031033][ T30] audit: type=1400 audit(1777916914.419:920): avc: denied { read } for pid=12654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 608.055353][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.074434][ T3335] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.088646][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 608.097455][T12654] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 608.107007][T12654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.236835][T12650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 608.252549][T12650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.312700][T12650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 608.335952][T12650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.344450][T12650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 608.356308][T12650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.414493][T12650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 608.429022][T12650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.462881][ T30] audit: type=1400 audit(1777916914.949:921): avc: denied { write } for pid=12789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.548267][T12656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 608.568216][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.578682][T12656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 608.589384][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.592107][ T30] audit: type=1400 audit(1777916915.079:922): avc: denied { write } for pid=12806 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 608.619323][T12661] Bluetooth: hci7: command tx timeout [ 608.619347][T12660] Bluetooth: hci6: command tx timeout [ 608.673777][T12660] Bluetooth: hci8: command tx timeout [ 608.721239][T12656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 608.739041][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.749295][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 608.756033][T12660] Bluetooth: hci9: command tx timeout [ 608.791567][T12656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 608.800365][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.811118][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.951646][T12654] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.058088][ T3248] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.065243][ T3248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.088121][ T30] audit: type=1400 audit(1777916915.579:923): avc: denied { write } for pid=12812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.110832][ T3248] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.118251][ T3248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.263782][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.403959][T12660] Bluetooth: hci1: command tx timeout [ 609.496239][T12650] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.580026][T12656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.627803][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.634960][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.712740][ T3335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.781290][ T3248] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.788429][ T3248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.816391][T12673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.837855][T12673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.847441][T12673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.862468][T12673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.910188][ T3335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.941312][T12656] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.949272][T12673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.970315][T12673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.981369][T12673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.000031][T12673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.067425][ T3335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.176607][ T3335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.216732][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.223829][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.246996][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.254144][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.436666][T12653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 610.447804][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.481398][T12653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 610.495870][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.567568][T12654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.580147][T12653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 610.604750][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.657248][T12653] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 610.670366][T12653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.678302][T12660] Bluetooth: hci6: command tx timeout [ 610.683545][T12661] Bluetooth: hci7: command tx timeout [ 610.753181][T12661] Bluetooth: hci8: command tx timeout [ 610.833411][T12661] Bluetooth: hci9: command tx timeout [ 610.849224][ T3335] bridge_slave_1: left allmulticast mode [ 610.855509][ T3335] bridge_slave_1: left promiscuous mode [ 610.862767][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.877713][ T3335] bridge_slave_0: left allmulticast mode [ 610.886824][ T3335] bridge_slave_0: left promiscuous mode [ 610.892557][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.922599][ T3335] bridge_slave_1: left allmulticast mode [ 610.931465][ T3335] bridge_slave_1: left promiscuous mode [ 610.940568][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.950452][ T3335] bridge_slave_0: left allmulticast mode [ 610.956560][ T3335] bridge_slave_0: left promiscuous mode [ 610.962251][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.157385][ T3335] bridge_slave_1: left allmulticast mode [ 611.173666][ T3335] bridge_slave_1: left promiscuous mode [ 611.179295][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.188121][ T3335] bridge_slave_0: left allmulticast mode [ 611.193807][ T3335] bridge_slave_0: left promiscuous mode [ 611.199413][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.380426][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.390593][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.400230][ T3335] bond0 (unregistering): Released all slaves [ 611.478750][T12661] Bluetooth: hci1: command tx timeout [ 611.656648][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.666598][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.676095][ T3335] bond0 (unregistering): Released all slaves [ 611.760191][ T3335] bond1 (unregistering): (slave geneve2): Releasing active interface [ 611.926637][ T3335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.940105][ T3335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.949512][ T3335] bond0 (unregistering): Released all slaves [ 611.958924][ T3335] bond1 (unregistering): Released all slaves [ 611.972008][ T3335] bond2 (unregistering): Released all slaves [ 612.318890][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.349145][ T3335] IPVS: stopping master sync thread 6255 ... [ 612.408621][T12654] veth0_vlan: entered promiscuous mode [ 612.429444][T12673] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.438145][ T3335] IPVS: stopping master sync thread 6219 ... [ 612.504097][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.511241][ T8505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.596331][T12654] veth1_vlan: entered promiscuous mode [ 612.619206][T12653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.648204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.655359][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.776555][T12650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.820273][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.894543][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 612.894559][ T30] audit: type=1400 audit(1777916919.389:931): avc: denied { write } for pid=12907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.957664][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.964801][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.032411][T12654] veth0_macvtap: entered promiscuous mode [ 613.067025][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.074159][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.109476][ T30] audit: type=1400 audit(1777916919.599:932): avc: denied { write } for pid=12932 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.146899][T12654] veth1_macvtap: entered promiscuous mode [ 613.174421][T12656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.211422][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 613.329547][T12654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.452640][T12654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.528316][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.550826][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.589005][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.611250][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.674223][T12650] veth0_vlan: entered promiscuous mode [ 613.760994][T12650] veth1_vlan: entered promiscuous mode [ 613.902311][ T3335] hsr_slave_0: left promiscuous mode [ 613.918202][ T3335] hsr_slave_1: left promiscuous mode [ 613.931838][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.946324][ T30] audit: type=1400 audit(1777916920.429:933): avc: denied { write } for pid=12946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.953110][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.005026][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.012682][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.025970][ T3335] hsr_slave_0: left promiscuous mode [ 614.031841][ T3335] hsr_slave_1: left promiscuous mode [ 614.038732][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.048357][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.059778][ T3335] hsr_slave_0: left promiscuous mode [ 614.060835][ T30] audit: type=1400 audit(1777916920.549:934): avc: denied { write } for pid=12967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.088689][ T3335] hsr_slave_1: left promiscuous mode [ 614.098602][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.106352][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.120745][ T3335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.133280][ T3335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.149849][ T3335] veth1_macvtap: left promiscuous mode [ 614.156374][ T3335] veth0_macvtap: left promiscuous mode [ 614.161854][ T3335] veth1_vlan: left promiscuous mode [ 614.168039][ T3335] veth0_vlan: left promiscuous mode [ 614.176327][ T3335] veth1_vlan: left promiscuous mode [ 614.181567][ T3335] veth0_vlan: left promiscuous mode [ 614.348045][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 614.360321][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 614.565187][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 614.579713][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 614.746260][ T3335] team0 (unregistering): Port device team_slave_1 removed [ 614.768383][ T3335] team0 (unregistering): Port device team_slave_0 removed [ 614.864435][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 614.881829][T12656] veth0_vlan: entered promiscuous mode [ 614.921624][ T8502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.937964][T12656] veth1_vlan: entered promiscuous mode [ 614.946054][ T8502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.032814][T12673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.042302][T12650] veth0_macvtap: entered promiscuous mode [ 615.062057][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.079034][T12650] veth1_macvtap: entered promiscuous mode [ 615.088159][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.157812][ T30] audit: type=1400 audit(1777916921.639:935): avc: denied { mounton } for pid=12654 comm="syz-executor" path="/root/syzkaller.QpdISm/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 615.165163][T12656] veth0_macvtap: entered promiscuous mode [ 615.256417][ T30] audit: type=1400 audit(1777916921.639:936): avc: denied { mount } for pid=12654 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 615.322473][ T30] audit: type=1400 audit(1777916921.649:937): avc: denied { mounton } for pid=12654 comm="syz-executor" path="/root/syzkaller.QpdISm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 615.348447][T12656] veth1_macvtap: entered promiscuous mode [ 615.396621][T12650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.407300][ T30] audit: type=1400 audit(1777916921.679:938): avc: denied { mount } for pid=12654 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 615.486869][ T30] audit: type=1400 audit(1777916921.679:939): avc: denied { mounton } for pid=12654 comm="syz-executor" path="/root/syzkaller.QpdISm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 615.487503][T12673] veth0_vlan: entered promiscuous mode [ 615.533662][ T30] audit: type=1400 audit(1777916921.679:940): avc: denied { mounton } for pid=12654 comm="syz-executor" path="/root/syzkaller.QpdISm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 615.566816][T12650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.577106][ T31] INFO: task syz.0.1387:11195 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 615.593581][ T31] Tainted: G L syzkaller #0 [ 615.605823][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.630437][T12656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.645045][ T31] task:syz.0.1387 state:D stack:28392 pid:11195 tgid:11191 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 615.670047][T12656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.696307][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.706828][ T31] Call Trace: [ 615.719690][ T31] [ 615.732418][T12673] veth1_vlan: entered promiscuous mode [ 615.733377][ T31] __schedule+0x10e9/0x6820 [ 615.777754][ T31] ? __pfx___schedule+0x10/0x10 [ 615.797509][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.806492][ T31] ? find_held_lock+0x2b/0x80 [ 615.820347][ T31] ? schedule+0x2bf/0x390 [ 615.833012][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.848144][ T31] schedule+0xdd/0x390 [ 615.857882][ T31] schedule_preempt_disabled+0x13/0x30 [ 615.870609][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.879457][ T31] __mutex_lock+0xced/0x1b10 [ 615.879491][ T31] ? bdev_open+0xa2/0xe40 [ 615.879524][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 615.879547][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 615.879574][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 615.879600][ T31] ? file_init_path+0x48e/0x670 [ 615.879633][ T31] ? bdev_open+0xa2/0xe40 [ 615.879658][ T31] bdev_open+0xa2/0xe40 [ 615.879684][ T31] ? iput+0x3a/0x40 [ 615.879714][ T31] bdev_file_open_by_dev+0x179/0x210 [ 615.879743][ T31] setup_bdev_super+0x385/0x730 [ 615.879764][ T31] get_tree_bdev_flags+0x363/0x620 [ 615.879782][ T31] ? __pfx_udf_fill_super+0x10/0x10 [ 615.879805][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 615.879824][ T31] ? cap_capable+0x10b/0x440 [ 615.879845][ T31] ? bpf_lsm_capable+0x9/0x10 [ 615.879864][ T31] ? security_capable+0x80/0x260 [ 615.879884][ T31] vfs_get_tree+0x92/0x320 [ 615.879901][ T31] path_mount+0x7d0/0x23d0 [ 615.879932][ T31] ? __pfx_path_mount+0x10/0x10 [ 615.879955][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 615.879979][ T31] ? putname+0xb1/0x110 [ 615.880001][ T31] ? kmem_cache_free+0x127/0x6c0 [ 615.880034][ T31] ? __x64_sys_mount+0x293/0x310 [ 615.923597][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.942728][ T31] __x64_sys_mount+0x293/0x310 [ 616.012676][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 616.020914][ T31] ? kcov_ioctl+0x16a/0x720 [ 616.034316][ T31] ? rcu_is_watching+0x12/0xc0 [ 616.043158][ T31] do_syscall_64+0x10b/0xf80 [ 616.053058][ T31] ? clear_bhb_loop+0x40/0x90 [ 616.059208][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.065469][ T31] RIP: 0033:0x7f562eb9cdd9 [ 616.069911][ T31] RSP: 002b:00007f562cdd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.079290][ T31] RAX: ffffffffffffffda RBX: 00007f562ee16090 RCX: 00007f562eb9cdd9 [ 616.087514][ T31] RDX: 0000200000000300 RSI: 0000200000000000 RDI: 00002000000003c0 [ 616.095691][ T31] RBP: 00007f562ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 616.103934][ T31] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000000 [ 616.111929][ T31] R13: 00007f562ee16128 R14: 00007f562ee16090 R15: 00007ffd2b49dfc8 [ 616.121417][ T31] [ 616.128884][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 616.135470][ T31] [ 616.135470][ T31] Showing all locks held in the system: [ 616.144439][ T31] 2 locks held by kworker/u8:0/12: [ 616.157177][ T31] #0: ffff8880b843b2a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 616.176265][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: process_one_work+0x973/0x1980 [ 616.186036][ T31] 1 lock held by khungtaskd/31: [ 616.190892][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 616.214208][ T31] 4 locks held by kworker/u8:9/3335: [ 616.219821][ T31] #0: ffff88801c6c0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 616.231129][ T31] #1: ffffc9000eab7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 616.244721][ T31] #2: ffffffff905f29a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 616.254487][ T31] #3: ffff88807b5e1590 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x151/0x3f0 [ 616.264968][ T31] 2 locks held by getty/5843: [ 616.269859][ T31] #0: ffff8880382f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 616.290294][ T31] #1: ffffc900036c32e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 616.300640][ T31] 1 lock held by udevd/7595: [ 616.306383][ T31] #0: ffff8880285f1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 616.316725][ T31] 2 locks held by syz.0.1387/11195: [ 616.321918][ T31] #0: ffff88802b7600d8 (&type->s_umount_key#93/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 616.332493][ T31] #1: ffff8880285f1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 616.342007][ T31] 3 locks held by kworker/1:2/11323: [ 616.348440][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 616.362752][ T31] #1: ffffc9000308fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 616.375974][ T31] #2: ffff88802e6a1250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 616.386741][ T31] 3 locks held by kworker/0:0/11545: [ 616.392033][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 616.402867][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 616.412331][ T31] #2: ffff88807c3f8250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 616.423387][ T31] 1 lock held by syz-executor/12653: [ 616.428704][ T31] #0: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 616.440052][ T31] 1 lock held by dhcpcd/12997: [ 616.445016][ T31] #0: ffff888036b9e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 616.454911][ T31] 2 locks held by dhcpcd/12998: [ 616.459771][ T31] #0: ffff888054c52260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 616.471170][ T31] #1: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 616.481421][ T31] 1 lock held by dhcpcd/12999: [ 616.486928][ T31] #0: ffff888036b9c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 616.497103][ T31] 1 lock held by rm/13012: [ 616.501560][ T31] [ 616.603089][ T31] ============================================= [ 616.603089][ T31] [ 616.623730][ T31] NMI backtrace for cpu 0 [ 616.623746][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 616.623770][ T31] Tainted: [L]=SOFTLOCKUP [ 616.623776][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.623785][ T31] Call Trace: [ 616.623790][ T31] [ 616.623796][ T31] dump_stack_lvl+0x100/0x190 [ 616.623822][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 616.623846][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 616.623867][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 616.623894][ T31] sys_info+0x141/0x190 [ 616.623916][ T31] watchdog+0xcb1/0x1030 [ 616.623941][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 616.623960][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.623980][ T31] ? __kthread_parkme+0x18c/0x230 [ 616.623999][ T31] ? kthread+0x13a/0x450 [ 616.624017][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.624034][ T31] kthread+0x370/0x450 [ 616.624050][ T31] ? __pfx_kthread+0x10/0x10 [ 616.624070][ T31] ret_from_fork+0x72b/0xd50 [ 616.624095][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 616.624116][ T31] ? __switch_to+0x800/0x1100 [ 616.624141][ T31] ? __pfx_kthread+0x10/0x10 [ 616.624162][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.624197][ T31] [ 616.624204][ T31] Sending NMI from CPU 0 to CPUs 1: [ 616.758954][ C1] NMI backtrace for cpu 1 [ 616.758969][ C1] CPU: 1 UID: 0 PID: 5738 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.758989][ C1] Tainted: [L]=SOFTLOCKUP [ 616.758994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.759003][ C1] Workqueue: events drain_vmap_area_work [ 616.759022][ C1] RIP: 0010:check_preemption_disabled+0x2b/0xe0 [ 616.759042][ C1] Code: 54 55 53 48 83 ec 08 65 8b 1d 65 88 80 08 65 f7 05 56 88 80 08 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc <9c> 58 f6 c4 02 74 ea 65 4c 8b 25 1e 88 80 08 48 89 fd 41 f6 44 24 [ 616.759055][ C1] RSP: 0000:ffffc9000439f7b0 EFLAGS: 00000046 [ 616.759065][ C1] RAX: ffff88802aa94a00 RBX: 0000000000000001 RCX: 0000000000000001 [ 616.759073][ C1] RDX: 0000000000000000 RSI: ffffffff8e0114f3 RDI: ffffffff8c1c3600 [ 616.759082][ C1] RBP: ffffffff8e7e54e0 R08: 0000000000000000 R09: 0000000000000000 [ 616.759090][ C1] R10: 000000000584018f R11: 000000000000756b R12: 0000000000000002 [ 616.759098][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.759106][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 616.759120][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 616.759129][ C1] CR2: 00007f3d8dbca2b4 CR3: 00000000330bd000 CR4: 00000000003526f0 [ 616.759137][ C1] Call Trace: [ 616.759141][ C1] [ 616.759146][ C1] ? __kasan_check_byte+0x13/0x50 [ 616.759161][ C1] lock_acquire+0x16e/0x370 [ 616.759178][ C1] ? purge_vmap_node+0x210/0xb40 [ 616.759190][ C1] ? __purge_vmap_area_lazy+0x91b/0xc00 [ 616.759203][ C1] ? drain_vmap_area_work+0x27/0x40 [ 616.759215][ C1] ? process_one_work+0xa0e/0x1980 [ 616.759236][ C1] ? worker_thread+0x5ef/0xe50 [ 616.759253][ C1] __update_page_owner_free_handle.isra.0+0x4d/0x4d0 [ 616.759269][ C1] ? __update_page_owner_free_handle.isra.0+0x3c/0x4d0 [ 616.759286][ C1] __reset_page_owner+0x93/0x190 [ 616.759300][ C1] __free_frozen_pages+0x747/0x1040 [ 616.759319][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 616.759339][ C1] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 616.759358][ C1] __apply_to_page_range+0xb1d/0x1520 [ 616.759378][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 616.759398][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 616.759417][ C1] ? __pfx___might_resched+0x10/0x10 [ 616.759437][ C1] __kasan_release_vmalloc+0xd7/0xe0 [ 616.759456][ C1] purge_vmap_node+0x210/0xb40 [ 616.759470][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 616.759484][ C1] ? preempt_schedule_common+0x42/0xc0 [ 616.759499][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 616.759511][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 616.759527][ C1] __purge_vmap_area_lazy+0x91b/0xc00 [ 616.759542][ C1] drain_vmap_area_work+0x27/0x40 [ 616.759554][ C1] process_one_work+0xa0e/0x1980 [ 616.759575][ C1] ? __pfx_process_one_work+0x10/0x10 [ 616.759595][ C1] ? __pfx_drain_vmap_area_work+0x10/0x10 [ 616.759610][ C1] worker_thread+0x5ef/0xe50 [ 616.759630][ C1] ? kthread+0x13a/0x450 [ 616.759644][ C1] ? __pfx_worker_thread+0x10/0x10 [ 616.759660][ C1] kthread+0x370/0x450 [ 616.759674][ C1] ? __pfx_kthread+0x10/0x10 [ 616.759689][ C1] ret_from_fork+0x72b/0xd50 [ 616.759706][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 616.759722][ C1] ? __switch_to+0x800/0x1100 [ 616.759741][ C1] ? __pfx_kthread+0x10/0x10 [ 616.759757][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.759779][ C1] [ 617.144734][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 617.151612][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 617.162281][ T31] Tainted: [L]=SOFTLOCKUP [ 617.166596][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.176644][ T31] Call Trace: [ 617.179913][ T31] [ 617.182833][ T31] dump_stack_lvl+0x100/0x190 [ 617.187512][ T31] vpanic+0x552/0x970 [ 617.191488][ T31] ? __pfx_vpanic+0x10/0x10 [ 617.195988][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 617.202146][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 617.208307][ T31] panic+0xd1/0xe0 [ 617.212024][ T31] ? __pfx_panic+0x10/0x10 [ 617.216446][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 617.222603][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 617.228759][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 617.234913][ T31] ? watchdog.cold+0x1ec/0x234 [ 617.239672][ T31] ? watchdog+0xcc1/0x1030 [ 617.244089][ T31] watchdog.cold+0x1fd/0x234 [ 617.248678][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 617.254476][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.259149][ T31] ? __kthread_parkme+0x18c/0x230 [ 617.264156][ T31] ? kthread+0x13a/0x450 [ 617.268377][ T31] ? __pfx_watchdog+0x10/0x10 [ 617.273041][ T31] kthread+0x370/0x450 [ 617.277088][ T31] ? __pfx_kthread+0x10/0x10 [ 617.281658][ T31] ret_from_fork+0x72b/0xd50 [ 617.286236][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 617.291328][ T31] ? __switch_to+0x800/0x1100 [ 617.295988][ T31] ? __pfx_kthread+0x10/0x10 [ 617.300559][ T31] ret_from_fork_asm+0x1a/0x30 [ 617.305315][ T31] [ 617.308688][ T31] Kernel Offset: disabled [ 617.312985][ T31] Rebooting in 86400 seconds..