last executing test programs: 9m32.554299944s ago: executing program 4 (id=814): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10c0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 9m26.632321691s ago: executing program 4 (id=826): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00002e3000/0x3000)=nil, 0x3000}, 0x30}) 9m26.506175698s ago: executing program 4 (id=829): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c91e"], 0x16) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000004c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) connect(0xffffffffffffffff, &(0x7f0000002440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x80) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000002c0)='s\xefurce', 0x0, 0x0) userfaultfd(0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x1, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) 9m25.339282383s ago: executing program 4 (id=832): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000140), 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9m25.060898875s ago: executing program 4 (id=834): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x11) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r2 = fsopen(&(0x7f00000004c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='proto\x00', &(0x7f0000000340)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='mountproto\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000400)=""/100, 0x64, 0x0, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0xfffffffffffffefd, 0x140102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000b425246cb8000000000000020004004400000008000d000500000040f12cceb4bd7205d1623f95f12b4b70c5a120ded746e5b3c0b47da831116e53682b59a210420a202135ff4d9e6ad2bba19ccacb02e5cc5a6c07d02cfe73eb78b5fac7d24ed659906c0881618af927389c6b2b946fbae6e789f3f97957527d"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0x4aa, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x10000, &(0x7f0000000600)) 9m24.661872575s ago: executing program 4 (id=836): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) 9m23.702989155s ago: executing program 32 (id=836): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) 6m5.260453383s ago: executing program 0 (id=1539): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 6m3.369115355s ago: executing program 0 (id=1546): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x3, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendmsg$inet6(r0, &(0x7f0000002ec0)={&(0x7f00000000c0)={0xa, 0x4e20, 0xcc, @mcast2, 0x9}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000000dc0)="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", 0x57d}], 0x1}, 0x1) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x17) 6m3.218046322s ago: executing program 0 (id=1548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x1d, 0x0, 0xfffffff9, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = semget$private(0x0, 0x4000000009, 0x77c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semctl$IPC_RMID(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r0, r1, 0x7, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r2}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x119) inotify_init1(0x0) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x10041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) waitid(0x3, 0x0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r4, 0x4) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000000000109022400010000e80b0904001001030002000921000000012261f591d33ba71578d8cb26853fbf2503090581038936010a7070723b77e890502eff34d4be7695e7b349b636239a3cc6e265db34cbd75aa1b8bbc16146370e5ceb126dff8ecc31c53d270d9fdf0a9dcc4ddbc8a3ccae2409a6326e7ddabbdb00e8388f8d8553690727b7af8e4938dff94fa5301cc522f496b2dbfeb794ffdd48d6164b1756fbe6fc00655ee5d513a25d22b09da6217c18ead351f470c8b04df851bb0bcf79549aefc97c7feef8c0a09f2b3c1f2958a10a239492a3e3dbfb49f4ded360262b4321c8d1f16cb4117034f495031a5f"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 5m59.996402947s ago: executing program 0 (id=1559): openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000f, 0x11, 0xffffffffffffffff, 0x2000) fanotify_init(0x200, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x400c080) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x10121) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) 5m58.64517002s ago: executing program 0 (id=1562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3b) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x381d82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000200)=0x8fbd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000300)="66bad104ed640f078f4978d6c0c4e3e96b8b006000009fc744240000600000c744240206000080c7442406000000000f011424430f07640f01c4430f017600b805000000b9000000000f01d966430f3a142638", 0x53}], 0x1, 0xdcd3161ed1e24ada, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0x3}]}) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000fcffffff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "6345f9213ece0ee206c23ec47bb07ab0c2099652ba28ae67232796d91851e2c3", "4b4f8f509391e82013ddcf77d57837df12ff039abd071c93f601003a6700", "224a8586b6970ebac98c75ad14033da358efadc7cef56b5d928faa2bbf11a9eb", "0cf6371fb1de78000000000000ae44556bd72cb1925e3100", "a7eeb086e6e9cf56450eb0956414ec395064ff5c5c00f4fcdfcbbf5ac2971686", "68286a8b6e810336a82dc433", 0x9, 0x9, 0x5, 0x2, 0xe7}}) r7 = fsmount(r4, 0x0, 0x0) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r8, 0x1) sendmmsg$sock(r8, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="d9", 0x33b40}], 0x1}}], 0x1, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f0000000080)=""/35) setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001040000000000000800000018150000", @ANYRES8=r1, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000006bc5030062f000000103080006000000652620000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183000000200000000000000000000000d990600ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000efe800007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 5m54.8940401s ago: executing program 0 (id=1566): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12) (async) read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12) sendfile(r1, r0, 0x0, 0xffdf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x3000, 0x2c000830, &(0x7f0000ffd000/0x3000)=nil) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x5, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x4, 0x7, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000380)={0x2, 0x3, 0x94, &(0x7f00000002c0)=""/148}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r14, {0xffff}, {0x0, 0xfff1}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) 5m39.658531206s ago: executing program 33 (id=1566): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12) (async) read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12) sendfile(r1, r0, 0x0, 0xffdf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) shmget$private(0x0, 0x3000, 0x2c000830, &(0x7f0000ffd000/0x3000)=nil) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff41, 0x3, 0x2, 0x8, 0x3, 0x9, 0xffffffc0, 0xf0000000, 0x688, 0xffff, 0x0, 0x2, 0x80000001, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x4, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x10001, 0x80, 0xffff, 0x1, 0xb, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x0, 0x1, 0x9, 0x5, 0x403, 0x9, 0x3f32f5d7, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x101, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xeca, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x5, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x7, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x8006, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x8005, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x804, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x121, 0x7fff, 0x3, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x2, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x1, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x4, 0x7, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000000380)={0x2, 0x3, 0x94, &(0x7f00000002c0)=""/148}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r14, {0xffff}, {0x0, 0xfff1}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3], 0x15) 2m6.004064257s ago: executing program 6 (id=2301): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2f}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6704, 0x40, 0x1000002, 0xa2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5cc7, 0x8000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x808c, 0x40040000, 0x3bb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x2f0, 0x0, r7}}], 0x1, 0x0, 0x0) 1m57.645407395s ago: executing program 6 (id=2323): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x525042, 0x0) r2 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x16}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x94}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_STATUS={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x9, 0xca, &(0x7f0000000780)=""/202, 0x41100, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xfffffffc, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x90a}, 0x10}, 0x94) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000200)=0x4) mmap(&(0x7f0000323000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x30, r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x20040004) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000340)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000580)="64bf2db43acf81555b633b3d0fdd189cea76f71ecc2ddd09625da3a611d69684259e207c130716f7c979189bb578f7409824bc5168f34e0b913938f7050d36e0715f2baca6c7b58842eb20671587e94e03a08996275e94519103204a3bfb5a20e8491a3d3c83668c21", 0x69}, {&(0x7f0000000880)="4200000080000000008806de1fc32dd171dda8e4", 0x14}, {&(0x7f00000006c0)="70294408c6117bc47c49a396d6aa4d0bc4c14b66079c0025267b8e92514786d44a5d26db4301fea6e447016f38e95fdcefe56ca688a3f0fdaf2cc39dab301487ce5b4429972b187f712e963800f542a4e6535529d8927c33f9d8cda5ce4b842233bf4a2fa5ae1a24fd878528a7517b22f5185a0c686b7c53922b1d1be0aee54e3f0e0db175b5634a5c", 0x89}, {&(0x7f0000000b00)="21e353d844267fbba9708922439261ea06474207bfab9445d5fb3eb8f4d91ff32f40e1a9a4c6066c58b9b0adb9020e4f6c2ee9669f9da27c8a2cc6240af727b1d4ab5709102b5425e65630629b4c98bc66f1ca707857a8b998822e8560e81b0aebba23ff6020d3627ba6c1d66ce0c41d65567664528522c26ead173a24f8e01733fc0662dde8227026ed08fac2104aabade814293162948e727b782e8e3fa0d5fc052416c06df072d9", 0xa9}, {&(0x7f0000000bc0)="a723d72dd288d2da31b0f38bce12a355d754753870ed53bbfc48e5792d9b9d52ce35ca7c788e6b65542fcf2ffa54066430eca33b00793fbc159a3e2578459b128d0b4c3cb45f018ad5fd3e18626ca6a20d3bdac60e16a97238d69bce960aa713bb5c3e6b42c210e433dd058c47f9d798100215d08c109453d3567a1fb4820afa6d407d38419e8187b673e62ee08958603aeb6e2c0797d06ff0a39ed323e387a702abde4b08e53f53617c7e40be724419105c150220261f7eaa48d9fd14fcbd6c943d00b7f561b241cc8dfdddc5d94967e8437649420376f378599b198ce8c5b3f09cef21b057b858cad0", 0xea}], 0x5}, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 1m56.129603957s ago: executing program 6 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='z', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) keyctl$dh_compute(0x2e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, &(0x7f0000000540)={'sit0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x66ad, 0xc000, 0x1, 0x800000bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x17, 0x0, 0x0) 1m55.388404019s ago: executing program 6 (id=2332): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x100000000000000) 1m51.133684357s ago: executing program 6 (id=2352): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f00000002c0)=',+$\x00', 0x800, &(0x7f0000000380)={@align=0xffffffffffffff00, {0x8, 0xf5b1, 0x7, 0x5}}, 0x3, &(0x7f00000003c0), &(0x7f0000000440)=0x8}, {[0x400, 0x8, 0x0, 0x8]}, 0x1b0, 0xb4, &(0x7f0000000480)=""/180}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, r0, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, 0x41, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, 0x41, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) (async) r5 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r8, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000805deeff78c480e777b66918"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x10, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1m47.760766906s ago: executing program 6 (id=2361): r0 = socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2, @rand_addr, 0xed9f}, 0x1c) creat(0x0, 0xa) pipe(0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200"/28], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1m32.478712554s ago: executing program 34 (id=2361): r0 = socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r3, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2, @rand_addr, 0xed9f}, 0x1c) creat(0x0, 0xa) pipe(0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200"/28], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 10.853126364s ago: executing program 5 (id=2642): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed040003010902220001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x899, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0xd4}}, 0x44) r4 = socket(0xb, 0x800, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="666f6f23646e736572726f723d3100a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='n', 0x1) mount$afs(&(0x7f0000000080)=ANY=[@ANYBLOB="2373797a302eb451cee7757000"], &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0), 0x20, &(0x7f00000004c0)=ANY=[@ANYBLOB='flock=local,flock=write,flock=strict,obj_user=veth1_macvtap\x00,measure,uid<', @ANYRESDEC, @ANYBLOB="38f147a9b38af9752fe4cf847d"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00'}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYBLOB="08000800266e354314000200fe8000000000000000000000000000aa"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) 10.673678159s ago: executing program 3 (id=2643): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xfffffffdffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000190c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000019240)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000019200)={&(0x7f0000019100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000fddbdf030000000000000000", @ANYRES32=0x0, @ANYBLOB="080022012f020000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r9, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000019180)="c4e3cd492c49030f01f8440f01c2420f30c441cde11500000000f0fe0136660f640048b8a17f4ca4000000000f23c80f21f835000040000f23f836660fc7302626360f01ca", 0x45}], 0x1, 0x4, 0x0, 0x0) 10.012047271s ago: executing program 3 (id=2646): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$rds(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001340), 0x0, &(0x7f0000001640)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001380)=""/26, 0x1a}, &(0x7f00000013c0), 0x1a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8}, &(0x7f0000001480)=0x411, &(0x7f00000014c0)=0x4, 0x0, 0x3, 0x2e61, 0x3, 0x21, 0xd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x777d, 0x8b}, &(0x7f0000001500)=0x2, &(0x7f0000001540)=0xfff, 0x100, 0x8, 0x34, 0xcb, 0x80, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001580)=""/111, 0x6f}, &(0x7f0000001600), 0x4e}}], 0x110, 0x900}, 0x8841) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x1, 0x2, 0x1010002}) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, 0x0) 8.868200609s ago: executing program 3 (id=2648): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10c0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 7.812045708s ago: executing program 7 (id=2650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0xbf30ccbe47c3e0ec, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file3\x00'}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0x50000, 0x1000, &(0x7f000041e000/0x1000)=nil}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$TIOCCONS(r7, 0x541d) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf5, 0x2) 7.60103106s ago: executing program 5 (id=2651): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28e6ff2cf900010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="018beb", @ANYRES32=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB="2cde3087b63b47c99209b9e4b4448ba4b21121dbaf71e15fe24e3313da54a162fd9b07c5000008000000"]) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0xffffff7d) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x4, 0x9048010, 0x7, 0x909b, 0x3, 0x1, 0x0, 0x0, 0x2, 0x8}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r7, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) read$FUSE(r5, &(0x7f0000004540)={0x2020}, 0x2020) 6.47665262s ago: executing program 5 (id=2653): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000180)=0xd0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x247}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000300)={0xb8, 0x1, 0x7}) write(r9, 0x0, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, 0x0) epoll_pwait2(r10, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r10, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) 4.920473298s ago: executing program 1 (id=2661): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) 4.873264613s ago: executing program 7 (id=2662): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r2, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close(0x3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x35500, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000018a40a4000002493f12e"], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="f9c80c9e55b752f786baeb84255b24b769cea0d95ed6ffc960e1cb195bbaf8983bdc0002214ded01bc8559169a8c9c0915f9ddda59e30e7c9c4e6cb60387acbfab8a1595a12848c11daac3591c40f887bca823ff9ec5c36b3714028114db15e8944f36635e10d7aad2a3318e87b8b370878016880d46277cf88e75d1afaad21380e826b5e072faa9d59ca3cd71003b06b710ed96da6f54a83e44b6699ffd2fc5191bd3c87f11b0d5953594b84d4bb8d19f7f911f67d4f934678c03940fea499fbfd7d09c47a84384b0823bf5458a3ab14ad8"], 0x4) 4.728315787s ago: executing program 1 (id=2663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x5}}) 4.591046306s ago: executing program 7 (id=2664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0xfffffffffffffffd, {0x1, 0xff, 0x6}, 0xff}, 0x18) close(0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000000506857f2005000000000000000000030000030900030073797a30000000000900020073797a3100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000580)={0x2, @win={{0x9, 0x6, 0x3, 0x6}, 0x6, 0x7, &(0x7f0000000400)={{0x400, 0x7, 0x1ff, 0xad8815a}, &(0x7f00000003c0)={{0x2, 0xffff8411, 0x34a4000, 0x40}, &(0x7f0000000380)={{0x5, 0x0, 0x4, 0x10000}, &(0x7f0000000300)={{0xb, 0x100, 0x7, 0x6}}}}}, 0x1, &(0x7f0000000440)="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", 0x1}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fallocate(r5, 0x2, 0x2, 0x8fffd) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x98, 0x50020000, 0x0, 0x0, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x640100fe, 0xff000000, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240), 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x104a, 0x28900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000280)={{0x5, 0x5, 0x4, 0x0, 'syz0\x00', 0x3ff}, 0x1, 0x100, 0x40, 0x0, 0x0, 0x2c, 'syz0\x00', 0x0}) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000006c0), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008840) socket(0x22, 0xa, 0x3ff) open$dir(&(0x7f0000000740)='./file0\x00', 0x0, 0x8) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/pm_async', 0x20000, 0x39) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40400) syz_open_procfs(0x0, &(0x7f0000000780)='net/dev\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000001a40)={0x4, 0xb, 0x7, 0xc, 0x9, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) 4.537694259s ago: executing program 1 (id=2665): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000006, 0x0, 0x0, 0x1, 0x8001}) r1 = syz_io_uring_setup(0x2511, &(0x7f0000001840)={0x0, 0x38b3, 0x16a00, 0x2, 0xef}, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0)) syz_io_uring_setup(0x3a0a, &(0x7f00000018c0)={0x0, 0x295c, 0x400, 0x4, 0x80032c, 0x0, r1}, &(0x7f0000000100), &(0x7f0000001800), &(0x7f00000000c0)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a00)=ANY=[@ANYBLOB="020b0e080600000025bd7000fed9df25040003000400000005000000000000000f080000010000000100000000001000310e23347497f709295cadb895815b8d75c82d8f24b393ffb8e7798e662a968f4fd0c2fdeb3d23735e7ced34f2905e1dd0c148760e5e61fd24a1d1b9a37c227ce9d853f4d63ee0a751f46729e7e30ce682a95af2c9c913613db4f85b9f8ec7a63b372f63c82b4d331d332921af7f04ae979c00e21391ba23ca046db0e622e41c0d9ddb7c60f41e4040e2f52265"], 0x30}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x856}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001680)={{r0, &(0x7f00000001c0)='/dev/comedi4\x00', 0x800, &(0x7f0000000200)={@align=0x80, {0x3, 0x6, 0x9, 0x400}}, 0x7800, &(0x7f0000000240), &(0x7f00000002c0)=0x7}, 0x4, &(0x7f0000001600)=[{0x3, 0x101, &(0x7f0000000300)='.*\'\\[\x00', &(0x7f0000000340)="1599ee80b27862feea47c501131bcedfcde6d2415f127f9f2149dea1fd25cedd1a9011405b529b3fcbeda28172456346930087f5672dee7263d33889f10735d6d2f1ada87a16b46957fdc54040c93d14fdbd33111393edd5bef4a44d738a9b67fbee45320df728aa6cc24bbe3147a2d10565d4c989bf672bccf0256f748662", 0x7f, 0x38}, {0x1, 0xffffffc0, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="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", 0x1000, 0x22}, {0x3, 0x0, &(0x7f0000001400)='/dev/comedi4\x00', &(0x7f0000001440)="7d6a68af1249ffd718d8b2ced5448ce02595e467170862d1e5672edc105a23d41711219efebdd5f6e137890bae4e86903caebfc42e84401ad9a1c1d5fb32c0d640f180d00e15f981fff86c4cd03904331467aad8b6ac21ad5046b0", 0x5b, 0x60}, {0x3, 0xfffffff7, &(0x7f00000014c0)='(:%\x00', &(0x7f0000001500)="aa66c02373cf50af4a3705f446ccffc0fa90205144c30c073ba5651c67bdd4e52b56f3324bbeb69899cc9c1cea4043bd3f7924608f583a9e2bb4313f95114eba68f18bbb4ff4e49061291d6ecefd0c71c238e9c5c7d1f8f2bb6118145f46cd387f63af6ac42db714d92a01d3300b0f4a1ff0250fdc36f212ce55c434245c0163460fbb0ceb7c29c305404c2fb123b598bc3ce79ba0f959ff54e67f5843fe033dc7b161245c55309a375c5e93bb123f8fe7eb86f719c9a7a7d8853833f555ce52205f759a", 0xc4, 0x8}]}) syz_io_uring_submit(0x0, 0x0, r2, &(0x7f0000001780)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r4, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='./file0\x00', r0, 0x400}) 4.403215012s ago: executing program 5 (id=2666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0xa628, 0x100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x920, 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000940)={0x0, 0x1}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x82, 0x0, &(0x7f0000001080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = gettid() r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r7, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRES64=r6]) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) rt_sigtimedwait(&(0x7f0000000000)={[0xde7f]}, 0x0, 0x0, 0x8) syz_open_dev$usbfs(0x0, 0xf, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffe, 0x0) read$msr(r10, &(0x7f0000032680)=""/102384, 0x18ff0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009040000000202010004"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) 4.229363447s ago: executing program 1 (id=2668): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x1, 't'}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x1, 't'}, 0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x4, 0x5ae, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @rand_addr=0x44010102}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.132769531s ago: executing program 7 (id=2670): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="60010000100005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000200808000000000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000"], 0x160}}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "001e5d00", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 3.447884439s ago: executing program 2 (id=2671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) socket(0x11, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4804}}], 0x2, 0x40000004) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r3], 0x1b0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000000000000000000000000000000000000000000012c67c9013b4590cba974262a5a05eff030000455b89a5f4b3092aac5af6e708b8895eaa41c9821ac2bdcad7927ce6cda5acffdd920f59af8a85e840457169124557c8ec591ff3a506bb"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.367265417s ago: executing program 2 (id=2672): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') pipe2(&(0x7f0000001080)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=fscache,cachetag=']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 3.307325037s ago: executing program 2 (id=2673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x20000) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRESDEC=r2, @ANYRES64=r3, @ANYRES8=r1], 0x58}}, 0xf6f2acafe391e0a8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000fbdbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="0800250003000000"], 0x24}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201}) prlimit64(r3, 0x6, &(0x7f00000001c0)={0x85d}, &(0x7f0000000240)) ioctl$TUNSETDEBUG(r9, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0xfffffffffffffffe) 3.294775173s ago: executing program 3 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a05000000000000000000020000000900020073797a31000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) syz_emit_ethernet(0xd3, &(0x7f0000000540)={@empty, @broadcast, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x5}}, {@llc={0x4, {@llc={0x7e, 0xfc, "b8", "1801e5c3740704f170389ea1e358c5d6c6769c5a1af3db78cc11a55503b94e202f8e2d317e1e0f699607712b67c1bf41b7f5830ad26320b6793609223cc8def7a6f3351791df06900d3107eb5fca8b0826a947f7b31b9f90f921de8bd4f3ccdd1c665ba4b271fb409a5962f8ea0f055c67cf0d31df3aaa77ca3ec3210158483086fd1475838c780e1c6f320d40db1b43690b485d341b608c00cb4a99afba1c81cde7af84eab2515aca9222914a867ca0d59e565b9689533660a0"}}}}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0xfffff582, 0x1}, 0x100, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x1d, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x75}, {@remote, 0xce20, 0x2, 0xcd}}, 0x44) r8 = socket$unix(0x1, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$unix(r8, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf2501"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) write$vga_arbiter(r3, 0x0, 0x41) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 3.161211532s ago: executing program 7 (id=2675): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open(&(0x7f0000000e80)='.\x00', 0x555502, 0x88) (fail_nth: 4) 2.979668846s ago: executing program 2 (id=2676): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000}) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') pipe2(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,cachetag']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 2.786407692s ago: executing program 2 (id=2677): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$rds(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001340), 0x0, &(0x7f0000001640)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001380)=""/26, 0x1a}, &(0x7f00000013c0), 0x1a}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x4}, 0x0, &(0x7f0000001440)=0x9, 0x5, 0x4, 0x9, 0x2, 0x50, 0x55}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x8}, &(0x7f0000001480)=0x411, &(0x7f00000014c0)=0x4, 0x0, 0x3, 0x2e61, 0x3, 0x21, 0xd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x777d, 0x8b}, &(0x7f0000001500)=0x2, &(0x7f0000001540)=0xfff, 0x100, 0x8, 0x34, 0xcb, 0x80, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001580)=""/111, 0x6f}, &(0x7f0000001600), 0x4e}}], 0x168, 0x900}, 0x8841) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x1, 0x2, 0x1010002}) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, 0x0) 2.225141583s ago: executing program 7 (id=2678): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) sysfs$1(0x1, &(0x7f0000000080)='/dev/ttyprintk\x00') write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x0, 0xfffffffffffffff9, 0x206}}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan0\x00'}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00'], 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffc, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x77, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x4, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x8000000, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x7, 0x9, 0x2, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd96, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x200) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.346612291s ago: executing program 5 (id=2679): socket(0x200000000000011, 0x2, 0xd) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x100000000000000) 1.235374585s ago: executing program 2 (id=2680): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10c0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x0, 0x5002) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 1.065293785s ago: executing program 3 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYRESDEC], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 674.772111ms ago: executing program 3 (id=2682): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3ff}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) pread64$ublk_bdev(r0, &(0x7f0000000340)=""/175, 0xaf, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000406050000000000000000000aff7f000500010007000000f0175b79294e351e225740a344d4b54ee8db92a66430c29877212c29be0e292e1303730cc4b485f82ec39cd3537d5ff7e770d907ed18296d4ae988c1e36832917b737a4f65575e39409fd49099958a42c8ca51d76c4360d025b13d4c176e1f2ac60d9bd7121ed52417d249d1dc80a364891e1a6d322a573af107faf9a1ec85a9a6e3236feb127750070429b692358d7a332fe4b1cc82d885cddefaffc5410a7bd9c3544d158d166fbb996ec376e3306e"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) 343.254377ms ago: executing program 5 (id=2683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYRES32=0x0, @ANYBLOB="00000006"], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_rm_watch(0xffffffffffffffff, 0x0) 235.126278ms ago: executing program 1 (id=2684): r0 = memfd_create(&(0x7f0000001680)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0\x15>X\xb7\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xaa\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfah\xae\xdaY\xa5\xaew\xdb\xf9\xcc>\xa4e\x0f\xcf\xfe\xd95\xfeu\x89\xb2^\xc2\xe9%TO\x86\xe5T\xce\xf4\xad\xfb5\xed<\x85\x8d\xf4\x1d\x87\xee\xc2R\xfd\x06\x95r\xf5%aP/|\xe7\xab\xafI(\xba\x12WB\xee\xa7\x81\xee\xd1\x1e~\x84\xc3\x17L]\xff8\x97\x84\xd8X31\xb3j\x1bp\x91\x04\x89bh\x14\xf7\xec\xcbp\b\xaa\x85\x00+\x12\x14\x0fn\x1b\x9b\xf4\xc0', 0x6) (async) r1 = socket$inet6(0xa, 0x3, 0x3) (async, rerun: 64) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) unshare(0x400) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) (async, rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) (rerun: 64) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$inet_mreqsrc(r7, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) (async) lseek(r0, 0x0, 0x4) 0s ago: executing program 1 (id=2685): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') pipe2(&(0x7f0000001080)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYBLOB=',cache=fscache,cachetag=']) kernel console output (not intermixed with test programs): as 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 677.353050][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.397331][ T9] usb 2-1: config 0 descriptor?? [ 677.406866][ T1210] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 677.464499][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.503195][ T1210] usb 6-1: Product: syz [ 677.527722][ T1210] usb 6-1: Manufacturer: syz [ 677.554750][ T1210] usb 6-1: SerialNumber: syz [ 677.575488][T14602] fuse: fd is not a fuse device [ 677.756445][T13498] Bluetooth: hci1: Invalid handle: 0x1ec9 > 0x0eff [ 677.875862][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input24 [ 678.048685][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 678.074861][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 678.074884][ T30] audit: type=1400 audit(1787107322.217:1713): avc: denied { watch watch_reads } for pid=14610 comm="syz.3.1959" path="/372" dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 679.068078][ T1210] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:a9:a8:72:29:25 [ 679.215209][T14585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.300282][ T1210] rtl8150 6-1:1.0: eth5: rtl8150 is detected [ 679.401218][ T1210] usb 6-1: USB disconnect, device number 29 [ 680.180293][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.201331][ T9] usb 2-1: USB disconnect, device number 60 [ 680.402078][T13498] Bluetooth: hci1: Invalid handle: 0x1ec9 > 0x0eff [ 680.437970][ T5609] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 680.439983][T14629] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1965'. [ 682.236656][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 682.541170][ T30] audit: type=1400 audit(1787107326.687:1714): avc: denied { bind } for pid=14650 comm="syz.3.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 682.615327][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'. [ 682.633427][T14651] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 682.642749][T14651] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 682.651451][T14651] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 682.757360][ T30] audit: type=1400 audit(1787107326.717:1715): avc: denied { name_bind } for pid=14650 comm="syz.3.1973" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 682.872033][ T30] audit: type=1400 audit(1787107326.717:1716): avc: denied { node_bind } for pid=14650 comm="syz.3.1973" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 682.961795][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 683.202309][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 683.213486][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.225364][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.237019][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 684.198544][ T1210] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 684.248235][ T9] usb 6-1: Manufacturer: syz [ 684.355435][ T9] usb 6-1: config 0 descriptor?? [ 684.402654][ T1210] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 684.530045][ T1210] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 684.586146][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.633704][T14675] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1978'. [ 684.647141][ T1210] usb 7-1: config 0 has no interface number 0 [ 684.676332][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.688499][T14675] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.1978'. [ 684.720882][ T1210] usb 7-1: Product: syz [ 684.740341][ T1210] usb 7-1: Manufacturer: syz [ 684.767772][ T1210] usb 7-1: SerialNumber: syz [ 684.815076][ T1210] usb 7-1: config 0 descriptor?? [ 684.874696][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 684.926664][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 684.972265][T13498] Bluetooth: hci0: command 0x0c1a tx timeout [ 684.978634][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 685.026278][ T9] usb 6-1: USB disconnect, device number 30 [ 685.140768][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 685.294556][T14658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=14658 comm=syz.6.1975 [ 685.352825][ T1210] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 685.386903][ T1210] uvcvideo 7-1:0.64: No valid video chain found. [ 685.414088][ T9] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 685.448152][ T1210] usb 7-1: USB disconnect, device number 20 [ 685.593125][ T9] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 685.632213][ T9] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 685.656782][ T9] usb 6-1: config 0 has no interface number 0 [ 685.685845][ T9] usb 6-1: config 0 interface 41 has no altsetting 0 [ 685.711479][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 685.729274][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.745889][ T9] usb 6-1: Product: syz [ 685.763811][ T9] usb 6-1: Manufacturer: syz [ 685.778585][ T9] usb 6-1: SerialNumber: syz [ 685.803416][ T9] usb 6-1: config 0 descriptor?? [ 687.354838][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 687.849662][T14747] overlayfs: failed to clone upperpath [ 688.121147][T14751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2000'. [ 688.221551][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 688.298841][ T9] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 688.357318][ T9] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 688.416547][ T9] usb 6-1: USB disconnect, device number 31 [ 688.515454][ T5609] Bluetooth: hci5: Invalid handle: 0x1ec9 > 0x0eff [ 688.534427][T14759] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2003'. [ 688.725446][ T30] audit: type=1400 audit(1787107332.867:1717): avc: denied { write } for pid=14763 comm="syz.6.2005" name="usbmon1" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 690.045266][ T30] audit: type=1400 audit(1787107334.197:1718): avc: denied { lock } for pid=14770 comm="syz.2.2009" path="socket:[54625]" dev="sockfs" ino=54625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 690.661516][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2014'. [ 691.255866][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 691.285997][ T30] audit: type=1400 audit(1787107335.437:1719): avc: denied { connect } for pid=14798 comm="syz.1.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 691.460438][ T30] audit: type=1400 audit(1787107335.607:1720): avc: denied { setattr } for pid=14803 comm="syz.1.2020" name="" dev="pipefs" ino=54786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 691.498026][ T1210] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 691.622368][ T30] audit: type=1400 audit(1787107335.777:1721): avc: denied { create } for pid=14808 comm="syz.6.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 691.663101][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 691.688810][ T1210] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 691.704230][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2022'. [ 691.753086][ T1210] usb 6-1: config 5 has an invalid interface number: 51 but max is 0 [ 691.774088][ T1210] usb 6-1: config 5 has no interface number 0 [ 691.795862][ T1210] usb 6-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 691.860736][ T1210] usb 6-1: config 5 interface 51 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 691.892700][ T1210] usb 6-1: config 5 interface 51 has no altsetting 0 [ 691.902250][ T1210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.910702][ T1210] usb 6-1: Product: syz [ 691.915769][ T1210] usb 6-1: Manufacturer: syz [ 691.920582][ T1210] usb 6-1: SerialNumber: syz [ 692.234167][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 694.121468][ T1210] powermate 6-1:5.51: probe with driver powermate failed with error -5 [ 694.292126][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 694.316541][ T9] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 695.167033][ T1210] usb 6-1: USB disconnect, device number 32 [ 695.466546][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 695.503566][ T30] audit: type=1400 audit(1787107339.647:1722): avc: denied { ioctl } for pid=14836 comm="syz.6.2031" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 695.658477][ T9] usb 2-1: can't read configurations, error -71 [ 696.909802][T14857] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 698.532765][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 698.715392][T14868] fuse: fd is not a fuse device [ 698.732173][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 698.922328][ T10] usb 7-1: device descriptor read/64, error -71 [ 698.929233][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 699.112622][ T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 699.158043][ T9] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 699.194057][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 699.206569][ T9] usb 2-1: Product: syz [ 699.226889][ T9] usb 2-1: Manufacturer: syz [ 699.249954][ T9] usb 2-1: SerialNumber: syz [ 699.281084][ T9] usb 2-1: config 0 descriptor?? [ 699.314069][ T9] ch341 2-1:0.0: ch341-uart converter detected [ 699.361824][ T10] usb 7-1: device descriptor read/64, error -71 [ 700.322549][ T10] usb usb7-port1: attempt power cycle [ 700.711937][ T5697] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 700.891837][ T5697] usb 6-1: Using ep0 maxpacket: 16 [ 700.916844][ T5697] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 700.968088][ T5697] usb 6-1: config 5 has an invalid interface number: 51 but max is 0 [ 701.001982][ T5697] usb 6-1: config 5 has no interface number 0 [ 701.031396][ T5697] usb 6-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 701.086150][ T5697] usb 6-1: config 5 interface 51 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 701.128890][ T9] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 701.158778][ T5697] usb 6-1: config 5 interface 51 has no altsetting 0 [ 701.227555][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.276230][ T5697] usb 6-1: Product: syz [ 701.453457][ T5697] usb 6-1: Manufacturer: syz [ 701.487380][ T5697] usb 6-1: SerialNumber: syz [ 703.608567][ T5697] powermate 6-1:5.51: probe with driver powermate failed with error -5 [ 703.684313][ T5697] usb 6-1: USB disconnect, device number 33 [ 704.291330][ T5697] usb 2-1: USB disconnect, device number 63 [ 704.375110][ T5697] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 704.455393][ T5697] ch341 2-1:0.0: device disconnected [ 704.648061][T14912] fuse: fd is not a fuse device [ 707.208990][ T30] audit: type=1400 audit(1787107351.357:1723): avc: denied { setopt } for pid=14927 comm="syz.3.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 708.465470][T14954] fuse: fd is not a fuse device [ 709.045489][ T5697] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 709.252457][ T5697] usb 6-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 709.309331][ T5697] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 709.365601][ T5697] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 709.426100][ T5697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.491184][T14961] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 709.540927][T14961] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 709.604005][ T5697] io_edgeport 6-1:1.0: Edgeport 4 port adapter converter detected [ 709.659180][ T5697] usb 6-1: detected [ 709.905046][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2076'. [ 710.103018][ T5697] usb 6-1: error in getting manufacturer descriptor: -71 [ 710.152099][ T5697] usb 6-1: error in getting boot descriptor: -71 [ 710.210390][ T5697] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 4 ports, email greg@kroah.com this information. [ 711.210296][ T5697] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 711.272855][ T5697] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw [ 711.422475][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 711.597690][ T10] usb 7-1: Invalid ep0 maxpacket: 9 [ 711.752011][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 711.952512][ T10] usb 7-1: Invalid ep0 maxpacket: 9 [ 711.997158][ T10] usb usb7-port1: attempt power cycle [ 712.242356][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 712.371771][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 712.422957][ T10] usb 7-1: Invalid ep0 maxpacket: 9 [ 712.443996][ T9] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 712.486657][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.536717][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 712.548229][T14993] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 712.573727][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.582284][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 712.610726][ T9] usb 2-1: Product: syz [ 712.631503][ T9] usb 2-1: Manufacturer: syz [ 712.643040][ T10] usb 7-1: Invalid ep0 maxpacket: 9 [ 712.662464][ T9] usb 2-1: SerialNumber: syz [ 712.674090][ T10] usb usb7-port1: unable to enumerate USB device [ 712.701940][ T9] usb 2-1: config 0 descriptor?? [ 712.729576][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 712.776925][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 712.827554][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 712.884045][ T9] usb 2-1: media controller created [ 712.942956][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.025468][T14995] 9pnet: Found fid 0 not clunked [ 713.346371][ T9] DVB: Unable to find symbol tda10046_attach() [ 713.391085][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 713.480729][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 713.576464][ T9] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 713.635536][ T9] usb 2-1: USB disconnect, device number 64 [ 714.417566][ T9] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 714.605439][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 714.650334][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 714.815750][ T9] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 714.848419][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 27, changing to 4 [ 715.857531][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.933432][ T9] usb 2-1: Product: syz [ 715.948932][ T9] usb 2-1: Manufacturer: syz [ 715.966196][ T9] usb 2-1: SerialNumber: syz [ 716.289761][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.347297][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.548861][ T9] usb 2-1: USB disconnect, device number 65 [ 716.631796][T15042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 717.305737][T15051] zero sized request [ 717.471903][T15060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15060 comm=syz.5.2095 [ 717.582006][T15066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15066 comm=syz.1.2101 [ 717.663968][T15067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15067 comm=syz.1.2101 [ 717.914477][ T30] audit: type=1400 audit(1787107362.057:1724): avc: denied { map } for pid=15075 comm="syz.3.2104" path="socket:[55870]" dev="sockfs" ino=55870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 718.221854][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 718.772077][ T30] audit: type=1400 audit(1787107362.787:1725): avc: denied { create } for pid=15075 comm="syz.3.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 719.555651][ T1210] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 719.571840][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 719.589538][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 719.621118][ T10] usb 2-1: config 5 has an invalid interface number: 51 but max is 0 [ 719.647965][ T10] usb 2-1: config 5 has no interface number 0 [ 719.668661][ T10] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 719.716123][ T10] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 719.735235][ T1210] usb 7-1: Using ep0 maxpacket: 32 [ 719.760969][ T10] usb 2-1: config 5 interface 51 has no altsetting 0 [ 719.771046][ T1210] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 719.794233][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.814057][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.833591][ T10] usb 2-1: Product: syz [ 719.853940][T15094] x_tables: duplicate underflow at hook 1 [ 719.861016][ T10] usb 2-1: Manufacturer: syz [ 719.872428][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.894381][ T10] usb 2-1: SerialNumber: syz [ 719.923249][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.974541][ T1210] usb 7-1: config 0 descriptor?? [ 721.804096][T15103] netlink: 'syz.2.2111': attribute type 12 has an invalid length. [ 721.870914][T15103] netlink: 'syz.2.2111': attribute type 29 has an invalid length. [ 721.917188][T15103] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2111'. [ 721.967515][T15103] netlink: 'syz.2.2111': attribute type 3 has an invalid length. [ 722.981639][T15103] netlink: 'syz.2.2111': attribute type 2 has an invalid length. [ 723.189889][T15103] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2111'. [ 723.223220][ T1210] usbhid 7-1:0.0: can't add hid device: -71 [ 723.260567][ T1210] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 723.343901][T15110] fuse: Unknown parameter 'uid' [ 723.379602][ T10] powermate 2-1:5.51: probe with driver powermate failed with error -5 [ 723.397517][ T1210] usb 7-1: USB disconnect, device number 28 [ 724.586268][ T10] usb 2-1: USB disconnect, device number 66 [ 724.618993][T15110] binder: BINDER_SET_CONTEXT_MGR already set [ 724.728689][ T30] audit: type=1400 audit(1787107368.877:1726): avc: denied { getopt } for pid=15113 comm="syz.1.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 724.757359][T15110] binder: 15109:15110 ioctl 4018620d 200000004a80 returned -16 [ 724.765400][T15117] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 725.114222][T15121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2118'. [ 725.645803][ T30] audit: type=1400 audit(1787107369.277:1727): avc: denied { name_bind } for pid=15119 comm="syz.6.2118" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 725.954416][ T30] audit: type=1400 audit(1787107369.277:1728): avc: denied { map } for pid=15119 comm="syz.6.2118" path="socket:[56063]" dev="sockfs" ino=56063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 726.382611][ T30] audit: type=1400 audit(1787107370.537:1729): avc: denied { ioctl } for pid=15135 comm="syz.2.2121" path="socket:[60112]" dev="sockfs" ino=60112 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 727.154836][T15144] 9p: Bad value for 'cachetag' [ 727.520026][ T30] audit: type=1400 audit(1787107371.667:1730): avc: denied { ioctl } for pid=15149 comm="syz.6.2127" path="socket:[60163]" dev="sockfs" ino=60163 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 728.562274][T13913] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 728.662410][ T1210] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 728.742078][T13913] usb 2-1: Using ep0 maxpacket: 16 [ 728.763070][T13913] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 728.789696][T13913] usb 2-1: config 5 has an invalid interface number: 51 but max is 0 [ 728.812156][ T1210] usb 7-1: device descriptor read/64, error -71 [ 728.826064][T13913] usb 2-1: config 5 has no interface number 0 [ 728.849333][T13913] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 728.887740][T13913] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 728.925082][T13913] usb 2-1: config 5 interface 51 has no altsetting 0 [ 728.952385][T13913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.972540][T13913] usb 2-1: Product: syz [ 728.989081][T13913] usb 2-1: Manufacturer: syz [ 729.006490][T13913] usb 2-1: SerialNumber: syz [ 729.073095][ T1210] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 729.211842][ T1210] usb 7-1: device descriptor read/64, error -71 [ 729.221322][ T30] audit: type=1400 audit(1787107373.367:1731): avc: denied { setopt } for pid=15180 comm="syz.3.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 729.361974][ T1210] usb usb7-port1: attempt power cycle [ 730.916907][T13913] powermate 2-1:5.51: probe with driver powermate failed with error -5 [ 730.934414][ T1210] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 731.107558][T13913] usb 2-1: USB disconnect, device number 67 [ 731.120850][ T1210] usb 7-1: device descriptor read/8, error -71 [ 732.171965][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 732.181201][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 732.231618][ T30] audit: type=1400 audit(1787107376.377:1732): avc: denied { accept } for pid=15184 comm="syz.3.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 732.620974][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 732.712800][ T30] audit: type=1400 audit(1787107376.857:1733): avc: denied { write } for pid=15200 comm="syz.3.2142" path="socket:[60289]" dev="sockfs" ino=60289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 732.932007][ T1210] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 732.972874][ T1210] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 733.029179][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.096482][ T1210] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 733.159750][ T1210] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.222611][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.266184][ T1210] usb 7-1: config 0 descriptor?? [ 733.353916][T13913] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 733.514574][ T1210] usb 7-1: USB disconnect, device number 32 [ 733.543254][T13913] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 733.594217][T13913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.612848][T13913] usb 2-1: Product: syz [ 733.630672][T13913] usb 2-1: Manufacturer: syz [ 733.647321][T13913] usb 2-1: SerialNumber: syz [ 733.673612][T13913] usb 2-1: config 0 descriptor?? [ 734.097650][T15221] 9p: Bad value for 'cachetag' [ 734.283560][T13498] Bluetooth: hci2: Invalid handle: 0x1ec9 > 0x0eff [ 734.308827][T15228] kAFS: unable to lookup cell '' [ 734.382827][ T5608] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 734.383018][T15228] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2149'. [ 734.510620][ T30] audit: type=1400 audit(1787107378.657:1734): avc: denied { map } for pid=15214 comm="syz.1.2144" path="/78/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 734.542542][ T1210] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 734.763439][ T1210] usb 7-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 734.776678][T13913] usb 2-1: f81604_read: reg: 100f failed: -EPIPE [ 734.806378][ T1210] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 734.840475][T13913] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 734.861312][ T1210] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 734.881516][T13913] usb 2-1: USB disconnect, device number 68 [ 734.914867][ T5260] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 734.941792][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.963533][ T5260] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 734.986892][T15227] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.018105][T15227] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 735.039279][T13913] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 735.048662][ T30] audit: type=1400 audit(1787107379.187:1735): avc: denied { search } for pid=5260 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.109547][ T1210] io_edgeport 7-1:1.0: Edgeport 4 port adapter converter detected [ 735.167912][ T1210] usb 7-1: detected [ 735.186974][T15237] cgroup: Invalid name [ 735.194441][T13913] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 735.205135][ T30] audit: type=1400 audit(1787107379.187:1736): avc: denied { search } for pid=5260 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.351503][ T1210] io_edgeport 7-1:1.0: short epic descriptor received: 0 [ 735.394574][ T30] audit: type=1400 audit(1787107379.187:1737): avc: denied { search } for pid=5260 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.539679][ T30] audit: type=1400 audit(1787107379.337:1738): avc: denied { mounton } for pid=15236 comm="syz.3.2152" path="/bus" dev="ramfs" ino=60464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 735.602823][ T1210] usb 7-1: error in getting manufacturer descriptor: -71 [ 735.643411][ T1210] usb 7-1: error in getting boot descriptor: -71 [ 735.667540][ T1210] usb 7-1: Device Reported 0 serial ports vs. core thinking we have 4 ports, email greg@kroah.com this information. [ 735.704933][T15249] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 735.723250][ T30] audit: type=1400 audit(1787107379.647:1739): avc: denied { read } for pid=15246 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.774102][T15240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2153'. [ 735.850263][ T30] audit: type=1400 audit(1787107379.647:1740): avc: denied { read open } for pid=15246 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.039733][ T30] audit: type=1400 audit(1787107379.647:1741): avc: denied { getattr } for pid=15246 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.298971][T15264] 9p: Bad value for 'rfdno' [ 736.367088][T15237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 736.539779][T15237] overlayfs: failed to set xattr on upper [ 736.618992][T15237] overlayfs: ...falling back to redirect_dir=nofollow. [ 736.678197][T15237] overlayfs: ...falling back to metacopy=off. [ 736.725833][T15237] overlayfs: ...falling back to index=off. [ 736.764403][T15237] overlayfs: ...falling back to uuid=null. [ 736.785345][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2162'. [ 736.809870][T15237] overlayfs: failed to clone lowerpath [ 736.842572][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2162'. [ 738.964040][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 738.964061][ T30] audit: type=1400 audit(1787107383.117:1748): avc: denied { write } for pid=15278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.034587][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2172'. [ 740.342496][ T30] audit: type=1400 audit(1787107384.497:1749): avc: denied { write } for pid=15316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.992849][T13913] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 741.194874][T13913] usb 2-1: Using ep0 maxpacket: 16 [ 741.237577][T13913] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 741.276898][T15341] xt_hashlimit: max too large, truncated to 1048576 [ 741.283812][T15341] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 741.305155][T13913] usb 2-1: config 5 has an invalid interface number: 51 but max is 0 [ 741.328405][T15340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2180'. [ 741.352115][T13913] usb 2-1: config 5 has no interface number 0 [ 741.359350][T13913] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 741.396447][T15340] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 741.407092][T13913] usb 2-1: config 5 interface 51 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 741.433696][T13913] usb 2-1: config 5 interface 51 has no altsetting 0 [ 741.448935][T15340] bond1 (unregistering): Released all slaves [ 741.462495][T13913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.484417][T13913] usb 2-1: Product: syz [ 741.496486][T13913] usb 2-1: Manufacturer: syz [ 741.517052][T13913] usb 2-1: SerialNumber: syz [ 741.756208][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.590489][T15350] lo speed is unknown, defaulting to 1000 [ 744.771385][T13913] powermate 2-1:5.51: probe with driver powermate failed with error -5 [ 744.851136][T13913] usb 2-1: USB disconnect, device number 69 [ 745.481492][ T30] audit: type=1400 audit(1787107389.627:1750): avc: denied { bind } for pid=15365 comm="syz.6.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 745.617481][ T30] audit: type=1400 audit(1787107389.677:1751): avc: denied { bind } for pid=15373 comm="syz.1.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 745.880166][T15379] netlink: 380 bytes leftover after parsing attributes in process `syz.1.2189'. [ 746.102756][T15385] comedi comedi3: pcl711: I/O base address not correctly aligned [ 746.176412][T15385] xt_hashlimit: size too large, truncated to 1048576 [ 747.086748][T15403] netlink: 'syz.6.2196': attribute type 1 has an invalid length. [ 747.316133][T15404] process '/newroot/430/file0' started with executable stack [ 749.584135][T13498] Bluetooth: hci6: command 0x0406 tx timeout [ 749.801038][ T30] audit: type=1400 audit(1787107393.947:1752): avc: denied { read } for pid=15408 comm="syz.6.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 750.081560][ T5608] Bluetooth: hci2: Invalid handle: 0x1ec9 > 0x0eff [ 750.094865][ T30] audit: type=1400 audit(1787107394.117:1753): avc: denied { shutdown } for pid=15408 comm="syz.6.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 750.130385][T15425] kAFS: unable to lookup cell '' [ 750.177181][T15425] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2204'. [ 750.190755][T13498] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 752.640102][ T30] audit: type=1400 audit(1787107396.787:1754): avc: denied { map } for pid=15426 comm="syz.1.2205" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.811904][ T30] audit: type=1400 audit(1787107396.787:1755): avc: denied { execute } for pid=15426 comm="syz.1.2205" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 753.323892][ T30] audit: type=1400 audit(1787107397.477:1756): avc: denied { write } for pid=15441 comm="syz.1.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 754.583365][ T5696] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 754.618890][T15454] overlayfs: missing 'lowerdir' [ 754.741841][ T5696] usb 2-1: device descriptor read/64, error -71 [ 754.917780][T15444] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2212'. [ 755.192652][ T5696] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 755.352232][ T5696] usb 2-1: device descriptor read/64, error -71 [ 755.483270][ T5696] usb usb2-port1: attempt power cycle [ 755.851980][ T5696] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 755.925092][ T5696] usb 2-1: device descriptor read/8, error -71 [ 756.193381][T13498] Bluetooth: hci1: Invalid handle: 0x1ec9 > 0x0eff [ 756.201918][ T5696] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 756.239447][T15483] kAFS: unable to lookup cell '' [ 756.262846][ T5696] usb 2-1: device descriptor read/8, error -71 [ 756.275889][ T5608] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 756.332240][T15483] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2217'. [ 756.472500][ T5696] usb usb2-port1: unable to enumerate USB device [ 761.115870][ T30] audit: type=1400 audit(1787107405.267:1757): avc: denied { create } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.276064][ T30] audit: type=1400 audit(1787107405.287:1758): avc: denied { connect } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.449828][ T30] audit: type=1400 audit(1787107405.287:1759): avc: denied { allowed } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 761.619257][ T30] audit: type=1400 audit(1787107405.287:1760): avc: denied { create } for pid=15519 comm="syz.3.2235" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 761.769405][ T30] audit: type=1400 audit(1787107405.287:1761): avc: denied { create } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.877189][ T30] audit: type=1400 audit(1787107405.297:1762): avc: denied { getopt } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 761.991567][ T30] audit: type=1400 audit(1787107405.297:1763): avc: denied { connect } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 762.098651][ T30] audit: type=1400 audit(1787107405.297:1764): avc: denied { execmem } for pid=15519 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 763.145308][ T30] audit: type=1400 audit(1787107405.507:1765): avc: denied { create } for pid=15524 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 763.330628][ T30] audit: type=1400 audit(1787107405.507:1766): avc: denied { write } for pid=15524 comm="syz.2.2237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 767.499044][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 767.499066][ T30] audit: type=1400 audit(1787107411.647:1810): avc: denied { create } for pid=15567 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 767.709763][ T30] audit: type=1400 audit(1787107411.677:1811): avc: denied { bind } for pid=15567 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 767.843934][ T30] audit: type=1400 audit(1787107411.687:1812): avc: denied { accept } for pid=15567 comm="syz.6.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 767.945484][ T30] audit: type=1400 audit(1787107411.687:1813): avc: denied { map } for pid=15567 comm="syz.6.2251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 768.073445][ T30] audit: type=1400 audit(1787107411.687:1814): avc: denied { read write } for pid=15567 comm="syz.6.2251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=61562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 768.200545][ T30] audit: type=1400 audit(1787107411.707:1815): avc: denied { map } for pid=15567 comm="syz.6.2251" path="socket:[61564]" dev="sockfs" ino=61564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 769.266072][ T30] audit: type=1400 audit(1787107411.917:1816): avc: denied { read } for pid=15573 comm="syz.6.2256" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 769.319876][T15579] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 769.507382][ T30] audit: type=1400 audit(1787107411.917:1817): avc: denied { open } for pid=15573 comm="syz.6.2256" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 769.626010][ T30] audit: type=1400 audit(1787107411.927:1818): avc: denied { ioctl } for pid=15573 comm="syz.6.2256" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 769.716254][ T30] audit: type=1400 audit(1787107412.027:1819): avc: denied { create } for pid=15563 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 770.177765][ T4965] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 770.225513][ T4965] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 770.256715][T13498] Bluetooth: hci0: command 0x0c1a tx timeout [ 770.263765][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 770.297015][ T4965] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 770.346445][ T4965] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 770.388777][ T4965] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 770.446773][ T4965] loop0: [ 770.513032][T15603] fuse: fd is not a fuse device [ 772.342596][ T1210] usb 7-1: Failed to load image "edgeport/down.fw" err -2 [ 772.377543][ T1210] usb 7-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 772.399780][ T5697] usb 6-1: Failed to load image "edgeport/down.fw" err -110 [ 772.472802][ T1210] usb 7-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 772.644630][ T5608] Bluetooth: hci1: Invalid handle: 0x1ec9 > 0x0eff [ 772.795799][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 772.795824][ T30] audit: type=1400 audit(1787107416.947:1843): avc: denied { create } for pid=15622 comm="syz.6.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 773.887505][ T30] audit: type=1400 audit(1787107416.977:1844): avc: denied { bind } for pid=15622 comm="syz.6.2271" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 774.427264][ T30] audit: type=1400 audit(1787107416.977:1845): avc: denied { name_bind } for pid=15622 comm="syz.6.2271" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 774.536382][ T30] audit: type=1400 audit(1787107416.977:1846): avc: denied { node_bind } for pid=15622 comm="syz.6.2271" saddr=172.20.20.170 src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 774.582917][T15642] 9p: Bad value for 'rfdno' [ 774.645404][ T30] audit: type=1400 audit(1787107416.987:1847): avc: denied { write } for pid=15622 comm="syz.6.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 774.667113][ T5602] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 774.770409][ T30] audit: type=1400 audit(1787107416.987:1848): avc: denied { nlmsg_write } for pid=15622 comm="syz.6.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 774.834401][T15646] ubi0: attaching mtd0 [ 774.850655][ T30] audit: type=1400 audit(1787107417.997:1849): avc: denied { setopt } for pid=15622 comm="syz.6.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 774.890937][T15646] ubi0: scanning is finished [ 774.910315][ T5602] usb 2-1: New USB device found, idVendor=1608, idProduct=0001, bcdDevice= 0.00 [ 774.923834][T15646] ubi0: empty MTD device detected [ 774.941160][ T5602] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 774.967178][ T30] audit: type=1400 audit(1787107418.517:1850): avc: denied { mount } for pid=15629 comm="syz.5.2273" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 774.996118][ T5602] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 775.037159][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.076214][ T30] audit: type=1400 audit(1787107418.557:1851): avc: denied { setopt } for pid=15632 comm="syz.2.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 775.107591][T15634] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 775.141025][T15634] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 775.185011][ T5602] io_edgeport 2-1:1.0: Edgeport 4 port adapter converter detected [ 775.198363][T15646] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 775.224089][ T5602] usb 2-1: detected [ 775.403510][ T30] audit: type=1400 audit(1787107419.557:1852): avc: denied { mmap_zero } for pid=15653 comm="syz.6.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 775.459944][ T5602] io_edgeport 2-1:1.0: short epic descriptor received: 18 [ 776.473575][ T5602] usb 2-1: error in getting manufacturer descriptor: -71 [ 776.508127][T15654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 776.621472][ T5602] usb 2-1: error in getting boot descriptor: -71 [ 776.659913][ T5602] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 4 ports, email greg@kroah.com this information. [ 776.864163][ T5602] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 777.882490][T15664] kvm: pic: level sensitive irq not supported [ 777.882752][T15664] kvm: pic: non byte read [ 778.012409][ T5602] usb 2-1: Falling back to sysfs fallback for: edgeport/down.fw [ 778.041388][ T30] audit: type=1400 audit(1787107422.187:1853): avc: denied { unmount } for pid=10431 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 778.120216][T15664] kvm: pic: level sensitive irq not supported [ 778.120325][T15664] kvm: pic: non byte read [ 778.384381][T15664] kvm: pic: level sensitive irq not supported [ 778.384448][T15664] kvm: pic: non byte read [ 778.570957][ T30] audit: type=1400 audit(1787107422.717:1854): avc: denied { module_request } for pid=15668 comm="syz.1.2285" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 779.063182][ T30] audit: type=1400 audit(1787107423.107:1855): avc: denied { write } for pid=15668 comm="syz.1.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 779.127142][T15669] syzkaller0: entered promiscuous mode [ 779.168164][T15669] syzkaller0: entered allmulticast mode [ 779.220403][ T30] audit: type=1400 audit(1787107423.207:1856): avc: denied { sys_module } for pid=15668 comm="syz.1.2285" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 779.438548][ T30] audit: type=1400 audit(1787107423.267:1857): avc: denied { name_connect } for pid=15682 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 779.565913][ T30] audit: type=1400 audit(1787107423.637:1858): avc: denied { ioctl } for pid=15688 comm="syz.6.2289" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=62040 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.619101][T15696] overlayfs: failed to clone lowerpath [ 779.670838][T15697] fuse: fd is not a fuse device [ 779.733721][ T30] audit: type=1400 audit(1787107423.757:1859): avc: denied { mount } for pid=15695 comm="syz.3.2291" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 779.772265][T15697] tmpfs: Unknown parameter 'G9ap' [ 779.804446][T15697] overlayfs: failed to clone lowerpath [ 779.840931][T15697] overlayfs: failed to resolve './file1': -2 [ 779.858193][ T30] audit: type=1400 audit(1787107423.877:1860): avc: denied { connect } for pid=15698 comm="syz.6.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 779.966741][ T30] audit: type=1400 audit(1787107423.917:1861): avc: denied { mount } for pid=15695 comm="syz.3.2291" name="/" dev="ramfs" ino=62059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 780.082081][ T30] audit: type=1400 audit(1787107423.927:1862): avc: denied { ioctl } for pid=15698 comm="syz.6.2292" path="socket:[62060]" dev="sockfs" ino=62060 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 781.219734][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2296'. [ 781.276269][T15713] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2296'. [ 781.773403][T13498] Bluetooth: hci6: command 0x0406 tx timeout [ 782.657284][T15715] xt_cgroup: xt_cgroup: no path or classid specified [ 783.756648][T15718] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 784.113273][T15721] netlink: 'syz.5.2300': attribute type 58 has an invalid length. [ 784.151841][T15721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2300'. [ 785.632535][T15726] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 787.316405][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 787.316416][ T30] audit: type=1400 audit(1787107431.467:1867): avc: denied { map } for pid=15728 comm="syz.2.2302" path="socket:[62161]" dev="sockfs" ino=62161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 787.407765][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 787.529843][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 787.627415][ T30] audit: type=1400 audit(1787107431.467:1868): avc: denied { read } for pid=15728 comm="syz.2.2302" path="socket:[62161]" dev="sockfs" ino=62161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 789.078064][ T30] audit: type=1400 audit(1787107431.557:1869): avc: denied { watch watch_reads } for pid=15727 comm="syz.3.2303" path="/459" dev="tmpfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 789.339209][T15741] vlan2: entered allmulticast mode [ 789.346909][T15741] veth0_to_bond: entered allmulticast mode [ 790.577519][ T30] audit: type=1400 audit(1787107431.987:1870): avc: denied { read } for pid=15740 comm="syz.5.2308" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 790.948364][ T30] audit: type=1400 audit(1787107431.987:1871): avc: denied { open } for pid=15740 comm="syz.5.2308" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 790.982140][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2312'. [ 791.021100][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2312'. [ 792.259807][ T30] audit: type=1400 audit(1787107433.407:1872): avc: denied { read } for pid=15740 comm="syz.5.2308" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 792.731031][ T30] audit: type=1400 audit(1787107433.407:1873): avc: denied { open } for pid=15740 comm="syz.5.2308" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 792.797079][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2317'. [ 792.889179][ T30] audit: type=1400 audit(1787107433.407:1874): avc: denied { ioctl } for pid=15740 comm="syz.5.2308" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 793.071230][ T30] audit: type=1400 audit(1787107433.487:1875): avc: denied { ioctl } for pid=15740 comm="syz.5.2308" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 793.318677][T15791] futex_wake_op: syz.1.2320 tries to shift op by 144; fix this program [ 793.364229][ T30] audit: type=1400 audit(1787107436.387:1876): avc: denied { setopt } for pid=15770 comm="syz.3.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 795.160257][ T30] audit: type=1400 audit(1787107436.787:1877): avc: denied { read } for pid=15775 comm="syz.1.2315" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 795.342678][ T30] audit: type=1400 audit(1787107436.787:1878): avc: denied { open } for pid=15775 comm="syz.1.2315" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 795.477238][ T5608] Bluetooth: hci1: Invalid handle: 0x1ec9 > 0x0eff [ 795.556430][ T30] audit: type=1400 audit(1787107436.787:1879): avc: denied { ioctl } for pid=15775 comm="syz.1.2315" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 796.787462][ T30] audit: type=1400 audit(1787107436.917:1880): avc: denied { create } for pid=15781 comm="syz.5.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.929296][ T30] audit: type=1400 audit(1787107436.927:1881): avc: denied { bind } for pid=15781 comm="syz.5.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 797.026018][T15816] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2314'. [ 797.093532][ T30] audit: type=1400 audit(1787107436.927:1882): avc: denied { listen } for pid=15781 comm="syz.5.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 797.814148][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 797.814160][ T30] audit: type=1400 audit(1787107441.967:1903): avc: denied { unmount } for pid=13322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 798.374138][ T5608] Bluetooth: hci3: Invalid handle: 0x1ec9 > 0x0eff [ 798.481044][T15831] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 798.715311][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2337'. [ 798.725980][T15844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 798.934362][T15844] netlink: 'syz.2.2336': attribute type 7 has an invalid length. [ 799.002806][T15844] netlink: 'syz.2.2336': attribute type 8 has an invalid length. [ 799.040138][T15851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2328'. [ 799.050780][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 799.084542][T15851] c: renamed from gre0 [ 799.109764][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2328'. [ 799.163676][T15851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2328'. [ 799.233534][T15855] 9p: Bad value for 'cachetag' [ 799.475483][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 800.678418][T15880] 9p: Bad value for 'rfdno' [ 800.699698][ T30] audit: type=1400 audit(1787107444.847:1904): avc: denied { execute } for pid=15876 comm="syz.2.2348" name="file2" dev="tmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 801.715784][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 802.072378][ T30] audit: type=1400 audit(1787107445.827:1905): avc: denied { create } for pid=15876 comm="syz.2.2348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 802.301445][ T30] audit: type=1400 audit(1787107445.827:1906): avc: denied { execute_no_trans } for pid=15876 comm="syz.2.2348" path="/430/file2" dev="tmpfs" ino=2342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 802.375030][T15901] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 802.419108][T15903] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 803.385037][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.431621][ T30] audit: type=1400 audit(1787107446.147:1907): avc: denied { sqpoll } for pid=15887 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 805.085646][ T30] audit: type=1400 audit(1787107446.477:1908): avc: denied { unlink } for pid=7608 comm="syz-executor" name="file0" dev="tmpfs" ino=2343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 806.400192][T15925] 9pnet: Found fid 0 not clunked [ 806.875048][ T30] audit: type=1400 audit(1787107451.027:1909): avc: denied { append } for pid=15933 comm="syz.6.2361" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 807.103598][ T30] audit: type=1400 audit(1787107451.077:1910): avc: denied { name_bind } for pid=15933 comm="syz.6.2361" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 807.273413][ T30] audit: type=1400 audit(1787107451.427:1911): avc: denied { write } for pid=15944 comm="syz.1.2365" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 810.035405][ T30] audit: type=1400 audit(1787107454.187:1912): avc: denied { create } for pid=15962 comm="syz.2.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 810.297272][ T30] audit: type=1400 audit(1787107454.437:1913): avc: denied { write } for pid=15959 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 810.349333][T15971] Option '?o냟W(d̛p^ï8 XKt..+jXpszgH{&}()eH/ k;RE<' to dns_resolver key: bad/missing value [ 810.475104][ T30] audit: type=1400 audit(1787107454.447:1914): avc: denied { create } for pid=15959 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 810.647573][ T30] audit: type=1400 audit(1787107454.517:1915): avc: denied { remount } for pid=15959 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 810.775502][ T30] audit: type=1400 audit(1787107454.847:1916): avc: denied { mount } for pid=15980 comm="syz.2.2375" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 811.060290][ T30] audit: type=1400 audit(1787107455.207:1917): avc: denied { write } for pid=15987 comm="syz.1.2377" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 811.136392][T15988] binder: BINDER_SET_CONTEXT_MGR already set [ 811.243266][ T30] audit: type=1400 audit(1787107455.257:1918): avc: denied { set_context_mgr } for pid=15987 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 811.270783][T15988] binder: 15987:15988 ioctl 4018620d 200000000000 returned -16 [ 812.199541][ T30] audit: type=1400 audit(1787107455.287:1919): avc: denied { map } for pid=15987 comm="syz.1.2377" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 812.248962][T15988] netlink: 'syz.1.2377': attribute type 13 has an invalid length. [ 812.261508][ T30] audit: type=1400 audit(1787107456.337:1920): avc: denied { ioctl } for pid=15987 comm="syz.1.2377" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 812.299772][T15993] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 812.308933][T15988] netlink: 'syz.1.2377': attribute type 17 has an invalid length. [ 812.317475][ T30] audit: type=1400 audit(1787107456.377:1921): avc: denied { write } for pid=15987 comm="syz.1.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 812.521377][T15988] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 813.101518][T16005] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 813.109698][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 813.120211][T16005] fuse: fd is not a fuse device [ 813.129261][T16005] fuse: fd is not a fuse device [ 813.892686][T16013] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 817.626522][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 817.690948][T16045] overlayfs: missing 'lowerdir' [ 817.738790][T16041] ipvlan2: entered allmulticast mode [ 817.786536][T16041] syz_tun: entered allmulticast mode [ 817.919733][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 817.919753][ T30] audit: type=1400 audit(1787107462.067:1925): avc: denied { create } for pid=16046 comm="syz.5.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 817.967255][ T5608] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 818.782139][ T30] audit: type=1400 audit(1787107462.937:1926): avc: denied { create } for pid=16061 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 818.812990][T16064] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 822.201026][ T30] audit: type=1400 audit(1787107466.347:1927): avc: denied { getopt } for pid=16081 comm="syz.2.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 822.608477][ T30] audit: type=1400 audit(1787107466.757:1928): avc: denied { read } for pid=16097 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 822.660322][T16096] No such timeout policy "n" [ 822.696171][T13498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 822.723919][T13498] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 822.743881][T13498] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 822.755250][T13498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 822.763018][T13498] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 822.850572][T16096] netlink: Failed to associated timeout policy 'n' [ 822.858573][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2415'. [ 822.874458][T13498] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 822.913555][ T30] audit: type=1400 audit(1787107466.797:1929): avc: denied { open } for pid=16097 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 822.966778][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 823.102241][ T30] audit: type=1400 audit(1787107466.927:1930): avc: denied { mounton } for pid=16097 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 823.479810][ T30] audit: type=1400 audit(1787107467.627:1931): avc: denied { write } for pid=16119 comm="syz.2.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 825.426245][T13498] Bluetooth: hci4: command tx timeout [ 825.718839][T16097] lo speed is unknown, defaulting to 1000 [ 827.452043][T13498] Bluetooth: hci4: command tx timeout [ 827.957162][T16142] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 828.246477][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.301308][T16097] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.354790][T16097] bridge_slave_0: entered allmulticast mode [ 828.393216][T16097] bridge_slave_0: entered promiscuous mode [ 828.450673][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.481760][ T30] audit: type=1400 audit(1787107472.617:1932): avc: denied { read } for pid=16149 comm="syz.1.2426" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 828.536845][T16097] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.565388][T16150] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=16150 comm=syz.1.2426 [ 828.597733][T16097] bridge_slave_1: entered allmulticast mode [ 828.614158][T16097] bridge_slave_1: entered promiscuous mode [ 828.646210][ T30] audit: type=1400 audit(1787107472.617:1933): avc: denied { open } for pid=16149 comm="syz.1.2426" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 828.810111][T16097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.836853][ T30] audit: type=1400 audit(1787107472.697:1934): avc: denied { ioctl } for pid=16149 comm="syz.1.2426" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 829.801579][T13498] Bluetooth: hci4: command tx timeout [ 829.825448][T16097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.844620][T16164] netlink: 'syz.1.2429': attribute type 10 has an invalid length. [ 830.794796][ T30] audit: type=1400 audit(1787107472.717:1935): avc: denied { setopt } for pid=16149 comm="syz.1.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 830.830024][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.840208][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.875376][ T30] audit: type=1400 audit(1787107472.797:1936): avc: denied { mounton } for pid=16149 comm="syz.1.2426" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 830.988929][ T30] audit: type=1400 audit(1787107472.797:1937): avc: denied { mount } for pid=16149 comm="syz.1.2426" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 831.021153][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.028546][T16164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.036196][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.043540][T16164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.079430][T16164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 831.204988][T16097] team0: Port device team_slave_0 added [ 831.245340][T16097] team0: Port device team_slave_1 added [ 832.124465][T13498] Bluetooth: hci4: command tx timeout [ 832.215169][T16097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.269960][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.393934][T16097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.457337][T16097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.497205][T16097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.558563][ T30] audit: type=1400 audit(1787107476.707:1938): avc: denied { connect } for pid=16175 comm="syz.1.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 832.716806][T16097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.806720][ T30] audit: type=1400 audit(1787107476.957:1939): avc: denied { wake_alarm } for pid=16175 comm="syz.1.2432" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 832.980355][T16097] hsr_slave_0: entered promiscuous mode [ 833.020953][T16097] hsr_slave_1: entered promiscuous mode [ 833.060089][T16097] debugfs: 'hsr0' already exists in 'hsr' [ 833.102301][T16097] Cannot create hsr debugfs directory [ 833.517538][ T30] audit: type=1400 audit(1787107477.667:1940): avc: denied { read } for pid=16182 comm="syz.2.2430" path="socket:[63822]" dev="sockfs" ino=63822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 833.674208][ T30] audit: type=1400 audit(1787107477.727:1941): avc: denied { getopt } for pid=16182 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 833.794084][ T1210] usb 7-1: Failed to load image "edgeport/boot.fw" err -110 [ 833.808820][ T5697] usb 6-1: Failed to load image "edgeport/boot.fw" err -2 [ 833.835490][ T30] audit: type=1400 audit(1787107477.727:1942): avc: denied { write } for pid=16182 comm="syz.2.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 833.894055][ T1210] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 833.908504][ T5697] usb 6-1: Edgeport 4 port adapter converter now attached to ttyUSB4 [ 834.000292][ T1210] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 834.016158][ T5697] usb 6-1: Edgeport 4 port adapter converter now attached to ttyUSB5 [ 835.115018][ T1210] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 835.129282][ T5697] usb 6-1: Edgeport 4 port adapter converter now attached to ttyUSB6 [ 835.259964][ T1210] usb 7-1: Edgeport 4 port adapter converter now attached to ttyUSB3 [ 835.271495][ T5697] usb 6-1: Edgeport 4 port adapter converter now attached to ttyUSB7 [ 835.407660][ T5697] usb 6-1: USB disconnect, device number 34 [ 835.459695][ T1210] usb 7-1: USB disconnect, device number 33 [ 835.517244][ T5697] edgeport_4 ttyUSB4: Edgeport 4 port adapter converter now disconnected from ttyUSB4 [ 835.570454][ T1210] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 835.796692][ T5697] edgeport_4 ttyUSB5: Edgeport 4 port adapter converter now disconnected from ttyUSB5 [ 835.837708][ T1210] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 837.132982][ T5697] edgeport_4 ttyUSB6: Edgeport 4 port adapter converter now disconnected from ttyUSB6 [ 837.175574][ T1210] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 837.342887][ T5697] edgeport_4 ttyUSB7: Edgeport 4 port adapter converter now disconnected from ttyUSB7 [ 837.394016][ T1210] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 837.450873][ T5697] io_edgeport 6-1:1.0: device disconnected [ 837.485111][ T1210] io_edgeport 7-1:1.0: device disconnected [ 837.514012][ T30] audit: type=1400 audit(1787107481.667:1943): avc: denied { mount } for pid=16200 comm="syz.2.2436" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 837.665539][T16204] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2436'. [ 838.852953][T16097] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 838.920985][ T5602] usb 2-1: Failed to load image "edgeport/down.fw" err -110 [ 838.976375][ T5602] usb 2-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 839.014667][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.035251][ T5602] usb 2-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 839.071159][T16097] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 839.140000][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 839.177397][T16097] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 839.219050][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.950355][ T143] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.027485][ T30] audit: type=1400 audit(1787107485.177:1944): avc: denied { shutdown } for pid=16220 comm="syz.5.2435" lport=52110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 841.093428][T16097] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 841.151208][T16097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.411200][ T143] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.461766][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2443'. [ 842.957619][ T143] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.099657][ T30] audit: type=1326 audit(1787107487.247:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16245 comm="syz.5.2447" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x0 [ 843.357584][T16256] xt_hashlimit: size too large, truncated to 1048576 [ 844.793124][ T1210] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 845.821913][ T143] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.847927][ T30] audit: type=1400 audit(1787107489.997:1946): avc: denied { mount } for pid=16260 comm="syz.1.2451" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 846.054468][ T30] audit: type=1400 audit(1787107489.997:1947): avc: denied { read } for pid=16260 comm="syz.1.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 846.200506][T16097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.359290][ T30] audit: type=1400 audit(1787107489.997:1948): avc: denied { ioctl } for pid=16260 comm="syz.1.2451" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 847.391240][ T1210] usb 6-1: device descriptor read/all, error -71 [ 847.659281][T16097] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.822714][ T30] audit: type=1400 audit(1787107490.197:1949): avc: denied { unmount } for pid=13496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 847.966423][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.973851][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.990446][ T30] audit: type=1400 audit(1787107492.097:1950): avc: denied { read } for pid=5260 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 848.063533][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.070914][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.153080][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2454'. [ 848.262696][ T30] audit: type=1400 audit(1787107492.417:1951): avc: denied { ioctl } for pid=16288 comm="syz.3.2457" path="socket:[64444]" dev="sockfs" ino=64444 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 848.354770][ T30] audit: type=1400 audit(1787107492.447:1952): avc: denied { bind } for pid=16288 comm="syz.3.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 848.464252][ T30] audit: type=1400 audit(1787107492.607:1953): avc: denied { search } for pid=5260 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.590518][ T30] audit: type=1400 audit(1787107492.607:1954): avc: denied { search } for pid=5260 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.640878][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 848.801234][ T30] audit: type=1400 audit(1787107492.607:1955): avc: denied { search } for pid=5260 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.019129][ T143] bridge_slave_1: left allmulticast mode [ 849.036512][ T30] audit: type=1400 audit(1787107492.607:1956): avc: denied { read } for pid=5260 comm="dhcpcd" name="n124" dev="tmpfs" ino=11793 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 849.077533][ T143] bridge_slave_1: left promiscuous mode [ 849.111062][ T143] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.327932][ T143] bridge_slave_0: left allmulticast mode [ 850.547365][ T143] bridge_slave_0: left promiscuous mode [ 850.632793][ T143] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.828271][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 851.828293][ T30] audit: type=1400 audit(1787107495.977:1964): avc: denied { mount } for pid=16320 comm="syz.5.2463" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 852.237645][ T30] audit: type=1400 audit(1787107496.297:1965): avc: denied { unmount } for pid=10431 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 853.367749][ T30] audit: type=1400 audit(1787107496.647:1966): avc: denied { create } for pid=16331 comm="syz.5.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 856.768868][ T30] audit: type=1400 audit(1787107500.907:1967): avc: denied { write } for pid=16299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.976857][ T30] audit: type=1400 audit(1787107500.907:1968): avc: denied { add_name } for pid=16299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.401475][ T30] audit: type=1400 audit(1787107500.907:1969): avc: denied { create } for pid=16299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 857.519282][ T30] audit: type=1400 audit(1787107500.907:1970): avc: denied { write } for pid=16299 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=11824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 857.625853][ T143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.684908][ T143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.706796][ T30] audit: type=1400 audit(1787107500.907:1971): avc: denied { append } for pid=16299 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=11824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 857.833170][ T143] bond0 (unregistering): Released all slaves [ 857.969670][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 858.018771][ T30] audit: type=1400 audit(1787107501.317:1972): avc: denied { ioctl } for pid=16350 comm="syz.2.2471" path="socket:[64839]" dev="sockfs" ino=64839 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 858.293914][ T30] audit: type=1400 audit(1787107501.617:1973): avc: denied { write } for pid=16352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.582107][T16382] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2478'. [ 860.141582][ T30] audit: type=1400 audit(1787107501.617:1974): avc: denied { remove_name } for pid=16352 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=11824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.380118][ T143] hsr_slave_0: left promiscuous mode [ 860.463739][ T30] audit: type=1400 audit(1787107501.617:1975): avc: denied { unlink } for pid=16352 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=11824 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 860.531343][ T143] hsr_slave_1: left promiscuous mode [ 860.571332][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.643305][ T143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.720223][ T30] audit: type=1400 audit(1787107504.237:1976): avc: denied { create } for pid=16379 comm="syz.2.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 860.747818][ T143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.810823][ T143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.898086][ T30] audit: type=1400 audit(1787107504.247:1977): avc: denied { write } for pid=16379 comm="syz.2.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 861.078673][T16409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2484'. [ 861.098433][T16409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 861.214945][ T143] veth1_macvtap: left promiscuous mode [ 861.258981][ T143] veth0_macvtap: left promiscuous mode [ 861.304439][ T143] veth1_vlan: left promiscuous mode [ 861.357983][ T143] veth0_vlan: left promiscuous mode [ 861.776018][T16426] Option '?o냟W(d̛p^ï8 XKt..+jXpszgH{&}()eH/ k;RE<' to dns_resolver key: bad/missing value [ 861.797213][T16426] sysfs: Unknown parameter 'flock' [ 861.979540][T16429] FAULT_INJECTION: forcing a failure. [ 861.979540][T16429] name failslab, interval 1, probability 0, space 0, times 0 [ 862.087482][T16429] CPU: 0 UID: 0 PID: 16429 Comm: syz.1.2487 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.087503][T16429] Tainted: [L]=SOFTLOCKUP [ 862.087508][T16429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 862.087514][T16429] Call Trace: [ 862.087518][T16429] [ 862.087523][T16429] dump_stack_lvl+0x100/0x190 [ 862.087542][T16429] should_fail_ex.cold+0x5/0xa [ 862.087556][T16429] should_failslab+0xc2/0x120 [ 862.087571][T16429] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 862.087585][T16429] ? __alloc_skb+0x5b7/0x710 [ 862.087601][T16429] ? __alloc_skb+0x140/0x710 [ 862.087619][T16429] __alloc_skb+0x140/0x710 [ 862.087634][T16429] ? __alloc_skb+0x5b7/0x710 [ 862.087650][T16429] ? __pfx___alloc_skb+0x10/0x10 [ 862.087670][T16429] netlink_alloc_large_skb+0x69/0x150 [ 862.087686][T16429] netlink_sendmsg+0x680/0xda0 [ 862.087704][T16429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.087720][T16429] ? selinux_socket_sendmsg+0x198/0x2f0 [ 862.087738][T16429] ____sys_sendmsg+0xa4d/0xbe0 [ 862.087751][T16429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 862.087767][T16429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 862.087786][T16429] ___sys_sendmsg+0x190/0x1e0 [ 862.087802][T16429] ? __pfx____sys_sendmsg+0x10/0x10 [ 862.087815][T16429] ? __lock_acquire+0x49f/0x1a40 [ 862.087834][T16429] ? get_pid_task+0x106/0x250 [ 862.087859][T16429] __sys_sendmsg+0x160/0x210 [ 862.087870][T16429] ? __pfx___sys_sendmsg+0x10/0x10 [ 862.087888][T16429] do_syscall_64+0x115/0x870 [ 862.087903][T16429] ? clear_bhb_loop+0x70/0xc0 [ 862.087917][T16429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.087928][T16429] RIP: 0033:0x7f566219e0d9 [ 862.087937][T16429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.087948][T16429] RSP: 002b:00007f5663085028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.087959][T16429] RAX: ffffffffffffffda RBX: 00007f5662425fa0 RCX: 00007f566219e0d9 [ 862.087966][T16429] RDX: 0000000020000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 862.087972][T16429] RBP: 00007f5663085090 R08: 0000000000000000 R09: 0000000000000000 [ 862.087979][T16429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.087985][T16429] R13: 00007f5662426038 R14: 00007f5662425fa0 R15: 00007ffcecdb8bf8 [ 862.087999][T16429] [ 862.723404][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 862.723426][ T30] audit: type=1400 audit(1787107506.757:1983): avc: denied { write } for pid=16428 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.025807][T16437] binder: 16436:16437 ioctl 4018620d 0 returned -22 [ 863.182174][ T30] audit: type=1400 audit(1787107507.327:1984): avc: denied { create } for pid=16438 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 863.455762][ T143] team0 (unregistering): Port device team_slave_1 removed [ 863.484797][ T143] team0 (unregistering): Port device team_slave_0 removed [ 863.684863][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 863.915342][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2492'. [ 863.978611][ T30] audit: type=1400 audit(1787107508.127:1985): avc: denied { ioctl } for pid=16453 comm="syz.5.2494" path="socket:[65427]" dev="sockfs" ino=65427 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 864.059515][T16454] 9p: Bad value for 'rfdno' [ 864.070740][ T143] IPVS: stop unused estimator thread 0... [ 864.089462][ T30] audit: type=1400 audit(1787107508.157:1986): avc: denied { ioctl } for pid=16453 comm="syz.5.2494" path="socket:[65429]" dev="sockfs" ino=65429 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 864.298496][ T30] audit: type=1400 audit(1787107508.157:1987): avc: denied { getopt } for pid=16453 comm="syz.5.2494" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 865.208793][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.268597][ T30] audit: type=1400 audit(1787107508.157:1988): avc: denied { write } for pid=16453 comm="syz.5.2494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 866.598716][ T30] audit: type=1400 audit(1787107510.747:1989): avc: denied { write } for pid=16452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.671757][T16097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.781789][T16487] tmpfs: Unknown parameter 'usrquota-' [ 866.789087][T16488] 9p: Unknown Cache mode or invalid value fscacaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 866.843900][ T30] audit: type=1400 audit(1787107510.997:1990): avc: denied { listen } for pid=16484 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 868.152548][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 868.169300][T16500] program syz.1.2502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.897769][ T30] audit: type=1400 audit(1787107511.167:1991): avc: denied { write } for pid=16489 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.030652][ T30] audit: type=1400 audit(1787107512.377:1992): avc: denied { map } for pid=16498 comm="syz.1.2502" path="/dev/sg0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 869.055476][T16526] fuse: fd is not a fuse device [ 869.110213][T16097] veth0_vlan: entered promiscuous mode [ 869.164156][T16097] veth1_vlan: entered promiscuous mode [ 869.205762][ T30] audit: type=1400 audit(1787107512.377:1993): avc: denied { execute } for pid=16498 comm="syz.1.2502" path="/dev/sg0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 869.288707][T16097] veth0_macvtap: entered promiscuous mode [ 869.332414][T16097] veth1_macvtap: entered promiscuous mode [ 869.380436][ T30] audit: type=1400 audit(1787107513.207:1994): avc: denied { mounton } for pid=16522 comm="syz.2.2508" path="/474/file0" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 869.438355][T16097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.505834][T16097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.541136][ T30] audit: type=1400 audit(1787107513.307:1995): avc: denied { setattr } for pid=16522 comm="syz.2.2508" name="file0" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 869.604332][ T1109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.655329][ T1109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.713861][ T30] audit: type=1400 audit(1787107513.467:1996): avc: denied { bind } for pid=16530 comm="syz.2.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 869.739049][ T3296] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.782635][ T3296] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.894913][ T30] audit: type=1400 audit(1787107513.667:1997): avc: denied { ioctl } for pid=16519 comm="syz.5.2507" path="socket:[65678]" dev="sockfs" ino=65678 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 870.013840][ T3296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.050916][ T3296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.083938][ T30] audit: type=1400 audit(1787107513.827:1998): avc: denied { write } for pid=16518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.162628][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 870.186261][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.196911][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 870.226011][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.261224][ T30] audit: type=1400 audit(1787107514.157:1999): avc: denied { write } for pid=16544 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.399605][ T30] audit: type=1400 audit(1787107514.447:2000): avc: denied { mounton } for pid=16097 comm="syz-executor" path="/root/syzkaller.ETN1Rj/syz-tmp" dev="sda1" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 870.615383][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2408'. [ 870.637865][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 870.649815][T16566] bridge_slave_1: left allmulticast mode [ 870.662977][T16566] bridge_slave_1: left promiscuous mode [ 870.686807][T16566] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.723746][T16566] bridge_slave_0: left allmulticast mode [ 870.747826][T16571] overlayfs: failed to clone upperpath [ 870.755116][T16566] bridge_slave_0: left promiscuous mode [ 870.770378][T16566] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.815782][T13498] Bluetooth: Wrong link type (-71) [ 870.826445][T13498] Bluetooth: hci1: hcon ffff888047850000 sent 0 < count 2 [ 872.441694][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 872.623828][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.699590][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 872.779971][ T9] usb 8-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 872.805548][T16622] netlink: 'syz.2.2522': attribute type 1 has an invalid length. [ 872.869527][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.943511][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.950625][T16622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 872.966843][ T9] usb 8-1: invalid MIDI out EP 0 [ 874.271760][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 874.271782][ T30] audit: type=1400 audit(1787107518.417:2019): avc: denied { connect } for pid=16635 comm="syz.5.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 874.740395][T13498] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 874.752976][T13498] Bluetooth: hci4: Injecting HCI hardware error event [ 874.763019][ T5608] Bluetooth: hci4: hardware error 0x00 [ 874.798764][ T9] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 874.960577][ T9] usb 8-1: USB disconnect, device number 2 [ 875.419757][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 875.482867][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 875.553420][ T5696] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 875.734656][T16664] dummy_hcd dummy_hcd.0: remove, state 4 [ 875.773131][T16664] usb usb1: USB disconnect, device number 1 [ 875.878279][T16673] No such timeout policy "n" [ 875.925763][T16673] netlink: Failed to associated timeout policy 'n' [ 876.153168][T16664] dummy_hcd dummy_hcd.0: stopped [ 876.199713][T16664] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 876.225382][T16680] tipc: Started in network mode [ 876.265477][T16680] tipc: Node identity 7f000001, cluster identity 4711 [ 876.327073][T16680] tipc: New replicast peer: 127.0.0.2 [ 876.362737][T16680] tipc: Enabled bearer , priority 10 [ 876.468981][T16674] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 876.508014][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2538'. [ 876.543835][T16674] dummy_hcd dummy_hcd.0: Dummy host controller [ 876.685090][T16674] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 876.768547][T16674] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 876.851565][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2539'. [ 876.884701][T16674] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 876.935001][T16674] usb usb1: Product: Dummy host controller [ 876.972295][ T5608] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 876.983497][T16674] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 877.023262][T16674] usb usb1: SerialNumber: dummy_hcd.0 [ 877.270499][T16674] hub 1-0:1.0: USB hub found [ 877.318226][T16674] hub 1-0:1.0: 1 port detected [ 877.489405][ T5697] tipc: Node number set to 2130706433 [ 877.568860][ T5696] usb 8-1: New USB device found, idVendor=0c45, idProduct=6001, bcdDevice= 1.00 [ 877.618993][ T5696] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 877.649477][T16708] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 877.664364][ T5696] usb 8-1: can't read configurations, error -71 [ 877.672361][T16709] fuse: fd is not a fuse device [ 877.679784][ T30] audit: type=1400 audit(1787107521.827:2020): avc: denied { mounton } for pid=16706 comm="syz.2.2543" path="/484/file0" dev="tmpfs" ino=2634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 877.705303][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 877.717887][ T5697] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 877.731300][T16710] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 877.762502][T16710] syz_tun: entered promiscuous mode [ 877.792674][T16710] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 877.894730][ T5697] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 877.920074][ T5697] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 878.025741][ T5697] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 878.060207][ T5697] usb 6-1: config 0 has no interface number 0 [ 878.845454][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.882143][ T5697] usb 6-1: Product: syz [ 878.908742][ T5697] usb 6-1: Manufacturer: syz [ 878.998525][ T5697] usb 6-1: SerialNumber: syz [ 879.029216][ T5697] usb 6-1: config 0 descriptor?? [ 879.453893][T13498] Bluetooth: hci0: command 0x0c1a tx timeout [ 879.460049][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 879.599500][ T5697] uvcvideo 6-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 879.634891][ T5697] uvcvideo 6-1:0.64: No valid video chain found. [ 879.666629][ T5697] usb 6-1: USB disconnect, device number 37 [ 880.559577][ T30] audit: type=1400 audit(1787107524.707:2021): avc: denied { write } for pid=16735 comm="syz.1.2549" path="socket:[66642]" dev="sockfs" ino=66642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 882.430041][T16766] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 882.627342][T16760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 883.327860][T16787] pim6reg: entered allmulticast mode [ 883.399883][T16792] veth0_to_bond: entered allmulticast mode [ 883.729841][ T30] audit: type=1400 audit(1787107527.877:2022): avc: denied { create } for pid=16808 comm="syz.3.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 883.967465][T16811] lo speed is unknown, defaulting to 1000 [ 883.983691][ T30] audit: type=1400 audit(1787107527.947:2023): avc: denied { sys_admin } for pid=16808 comm="syz.3.2567" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 884.968164][ T30] audit: type=1400 audit(1787107528.097:2024): avc: denied { write } for pid=16777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 885.310042][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 885.350121][ T30] audit: type=1400 audit(1787107528.107:2025): avc: denied { unmount } for pid=16808 comm="syz.3.2567" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 885.494005][ T30] audit: type=1400 audit(1787107529.147:2026): avc: denied { create } for pid=16824 comm="syz.3.2571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 886.263334][ T30] audit: type=1400 audit(1787107529.147:2027): avc: denied { write } for pid=16824 comm="syz.3.2571" name="file0" dev="tmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 886.923918][ T30] audit: type=1400 audit(1787107529.147:2028): avc: denied { open } for pid=16824 comm="syz.3.2571" path="/525/file0" dev="tmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 887.198916][T16848] lo speed is unknown, defaulting to 1000 [ 887.229129][ T30] audit: type=1400 audit(1787107529.147:2029): avc: denied { ioctl } for pid=16824 comm="syz.3.2571" path="/525/file0" dev="tmpfs" ino=2860 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 888.314815][ T30] audit: type=1400 audit(1787107529.317:2030): avc: denied { write } for pid=16823 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.430662][ T30] audit: type=1400 audit(1787107529.497:2031): avc: denied { create } for pid=16826 comm="syz.1.2573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 888.543061][ T30] audit: type=1400 audit(1787107529.757:2032): avc: denied { ioctl } for pid=16844 comm="syz.1.2575" path="socket:[67015]" dev="sockfs" ino=67015 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 889.488040][ T30] audit: type=1400 audit(1787107531.447:2033): avc: denied { unmount } for pid=13496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 889.649898][ T30] audit: type=1400 audit(1787107532.517:2034): avc: denied { unlink } for pid=8964 comm="syz-executor" name="file0" dev="tmpfs" ino=2860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 889.787871][ T30] audit: type=1400 audit(1787107532.687:2035): avc: denied { write } for pid=16842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.924912][ T30] audit: type=1400 audit(1787107532.747:2036): avc: denied { write } for pid=16877 comm="syz.7.2582" name="sg0" dev="devtmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 889.999683][T16897] futex_wake_op: syz.3.2585 tries to shift op by 144; fix this program [ 890.232342][ T5696] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 890.372383][T16913] netlink: 'syz.2.2589': attribute type 21 has an invalid length. [ 890.380730][T16913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16913 comm=syz.2.2589 [ 890.395758][T16913] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 890.412812][ T5696] usb 8-1: Invalid ep0 maxpacket: 32 [ 890.613148][ T5696] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 890.825976][T16923] ALSA: mixer_oss: invalid OSS volume 'OGADCaptuO'.L*8P88re' [ 890.852059][ T5696] usb 8-1: Invalid ep0 maxpacket: 32 [ 890.879689][ T5696] usb usb8-port1: attempt power cycle [ 890.976726][T16923] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 891.027950][T16928] netlink: 'syz.1.2591': attribute type 21 has an invalid length. [ 891.036030][T16928] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2591'. [ 891.045469][T16928] netlink: 'syz.1.2591': attribute type 4 has an invalid length. [ 891.053611][T16928] netlink: 'syz.1.2591': attribute type 5 has an invalid length. [ 891.061494][T16928] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2591'. [ 891.395846][ T5696] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 891.446150][ T5696] usb 8-1: Invalid ep0 maxpacket: 32 [ 891.592714][ T5696] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 891.626754][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 891.626766][ T30] audit: type=1400 audit(1787107535.777:2040): avc: denied { write } for pid=16931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.687780][ T5696] usb 8-1: Invalid ep0 maxpacket: 32 [ 891.804487][ T5696] usb usb8-port1: unable to enumerate USB device [ 891.957113][T16949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2593'. [ 892.061995][ T30] audit: type=1400 audit(1787107536.207:2041): avc: denied { write } for pid=16951 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.297389][ T30] audit: type=1400 audit(1787107539.317:2042): avc: denied { write } for pid=16986 comm="syz.2.2604" path="socket:[67512]" dev="sockfs" ino=67512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 895.557416][ T30] audit: type=1400 audit(1787107539.697:2043): avc: denied { write } for pid=16961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.440168][ T30] audit: type=1400 audit(1787107540.587:2044): avc: denied { write } for pid=17000 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.650254][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'. [ 896.706119][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2610'. [ 896.759167][T17010] netlink: 'syz.5.2610': attribute type 18 has an invalid length. [ 896.794334][T17017] fuse: Unknown parameter 'dI>f@&0x0000000000000003' [ 896.836864][T17017] fuse: Unknown parameter '01777777777777777777777000000000000000000000000000000000000000000018446744073709551615' [ 896.898738][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 897.074207][ T30] audit: type=1400 audit(1787107541.227:2045): avc: denied { read append } for pid=17007 comm="syz.7.2611" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 897.186162][ T30] audit: type=1400 audit(1787107541.227:2046): avc: denied { open } for pid=17007 comm="syz.7.2611" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 897.327493][ T30] audit: type=1400 audit(1787107541.367:2047): avc: denied { write } for pid=17012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.487815][ T30] audit: type=1400 audit(1787107541.607:2048): avc: denied { write } for pid=17031 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.737428][ T30] audit: type=1400 audit(1787107541.887:2049): avc: denied { write } for pid=17047 comm="syz.7.2616" lport=55598 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 898.468437][T17055] genirq: Flags mismatch irq 2. 00200000 (pcl812) vs. 00200000 (pcl818) [ 898.535312][ T30] audit: type=1400 audit(1787107541.887:2050): avc: denied { setopt } for pid=17047 comm="syz.7.2616" lport=55598 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 898.705698][ T30] audit: type=1400 audit(1787107541.947:2051): avc: denied { getopt } for pid=17050 comm="syz.5.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 898.831059][ T30] audit: type=1400 audit(1787107541.947:2052): avc: denied { setopt } for pid=17050 comm="syz.5.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 898.976130][ T30] audit: type=1400 audit(1787107542.747:2053): avc: denied { bind } for pid=17052 comm="syz.1.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 899.105863][ T30] audit: type=1400 audit(1787107542.817:2054): avc: denied { audit_write } for pid=17058 comm="syz.5.2621" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 899.392894][T17077] fuse: Bad value for 'fd' [ 899.908160][T17086] fuse: fd is not a fuse device [ 900.512307][T17091] fuse: fd is not a fuse device [ 900.517505][T13913] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 900.534143][ T5602] usb 2-1: Failed to load image "edgeport/boot.fw" err -110 [ 900.565664][ T5602] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB0 [ 900.624108][ T5602] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB1 [ 900.680634][ T5602] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB2 [ 900.695065][T13913] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 900.748764][T13913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 900.762646][ T5602] usb 2-1: Edgeport 4 port adapter converter now attached to ttyUSB3 [ 900.789392][T13913] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 900.811998][ T5602] usb 2-1: USB disconnect, device number 74 [ 900.847887][ T5602] edgeport_4 ttyUSB0: Edgeport 4 port adapter converter now disconnected from ttyUSB0 [ 900.861126][T13913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 900.876486][T17097] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2635'. [ 900.885590][T13913] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 900.897172][ T5602] edgeport_4 ttyUSB1: Edgeport 4 port adapter converter now disconnected from ttyUSB1 [ 900.926968][T13913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.941866][ T5602] edgeport_4 ttyUSB2: Edgeport 4 port adapter converter now disconnected from ttyUSB2 [ 900.988579][T13913] usb 8-1: config 0 descriptor?? [ 901.064474][ T5602] edgeport_4 ttyUSB3: Edgeport 4 port adapter converter now disconnected from ttyUSB3 [ 901.124882][ T5602] io_edgeport 2-1:1.0: device disconnected [ 901.296152][T13913] hdpvr 8-1:0.0: unexpected answer of status request, len -71 [ 901.331570][T13913] hdpvr 8-1:0.0: device init failed [ 902.073120][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2639'. [ 902.083228][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 902.083238][ T30] audit: type=1400 audit(1787107546.227:2060): avc: denied { accept } for pid=17103 comm="syz.5.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 902.149274][T13913] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -12 [ 902.305498][T13913] usb 8-1: USB disconnect, device number 9 [ 902.425948][T17116] netlink: 'syz.3.2641': attribute type 1 has an invalid length. [ 902.642841][ T5696] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 902.802355][T17124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2644'. [ 902.825762][ T5696] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 902.964493][ T5696] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.016903][ T5696] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 903.035901][ T5696] usb 6-1: Manufacturer: syz [ 903.041995][T17131] netlink: 'syz.2.2637': attribute type 29 has an invalid length. [ 903.089963][ T5696] usb 6-1: SerialNumber: syz [ 903.109163][T17132] netlink: 'syz.2.2637': attribute type 29 has an invalid length. [ 903.117522][ T5696] usb 6-1: config 0 descriptor?? [ 905.413466][ T5696] usb 6-1: USB disconnect, device number 38 [ 906.522564][T17154] fuse: Unknown parameter '' [ 906.789931][ T30] audit: type=1326 audit(1787107550.937:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 906.951934][ T30] audit: type=1326 audit(1787107550.937:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.076982][ T30] audit: type=1326 audit(1787107550.937:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.133185][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2655'. [ 907.208012][ T30] audit: type=1326 audit(1787107550.937:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.320914][T17171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 907.331813][ T30] audit: type=1326 audit(1787107550.977:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.400767][T17171] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 907.444097][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 907.459599][ T30] audit: type=1326 audit(1787107550.977:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.509717][T17171] audit: backlog limit exceeded [ 907.568386][ T30] audit: type=1326 audit(1787107550.977:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.632509][T17177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.720621][ T30] audit: type=1326 audit(1787107550.977:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 907.842420][ T30] audit: type=1326 audit(1787107550.977:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef9c99e0d9 code=0x7ffc0000 [ 908.096609][ T30] audit: type=1326 audit(1787107550.977:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.5.2653" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef9c95e90e code=0x7ffc0000 [ 908.662535][T17196] xt_TCPMSS: Only works on TCP SYN packets [ 908.700095][T17196] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 908.739535][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2664'. [ 908.754327][T17200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 908.963366][T17195] ima: policy update failed [ 909.120196][T17216] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2670'. [ 909.199989][T17205] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 909.222258][ T5696] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 909.252626][T17205] block device autoloading is deprecated and will be removed. [ 909.341671][ T5602] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 909.392106][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 909.404358][ T5696] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 909.435312][ T5696] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 909.459043][ T5696] usb 2-1: config 0 has no interface number 0 [ 909.477584][ T5696] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 909.511000][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.520423][ T5602] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 909.540413][ T5696] usb 2-1: Product: syz [ 909.556446][ T5602] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.572055][ T5696] usb 2-1: Manufacturer: syz [ 909.584856][ T5696] usb 2-1: SerialNumber: syz [ 909.598049][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.610761][ T5696] usb 2-1: config 0 descriptor?? [ 909.626281][ T5602] usb 6-1: Product: syz [ 909.640911][ T5602] usb 6-1: Manufacturer: syz [ 909.647207][ T5696] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 909.671336][ T5602] usb 6-1: SerialNumber: syz [ 909.689174][ T5602] usb 6-1: config 0 descriptor?? [ 909.695221][ T5696] em28xx 2-1:0.132: Video interface 132 found: [ 909.717998][ T5602] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 909.745206][ T5602] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 909.836395][T17222] 9p: Bad value for 'wfdno' [ 910.035826][T17224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.044421][ T5696] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 910.054059][T17227] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20001 [ 910.087836][T17224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 910.123524][ T5602] lo speed is unknown, defaulting to 1000 [ 910.158427][ T5602] syz2: Port: 1 Link ACTIVE [ 910.269643][ T5696] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 910.289840][T17232] lo speed is unknown, defaulting to 1000 [ 910.311361][ T5696] em28xx 2-1:0.132: board has no eeprom [ 910.418127][T17231] FAULT_INJECTION: forcing a failure. [ 910.418127][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 910.430873][T17231] CPU: 0 UID: 0 PID: 17231 Comm: syz.7.2675 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.430890][T17231] Tainted: [L]=SOFTLOCKUP [ 910.430894][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 910.430901][T17231] Call Trace: [ 910.430905][T17231] [ 910.430909][T17231] dump_stack_lvl+0x100/0x190 [ 910.430928][T17231] should_fail_ex.cold+0x5/0xa [ 910.430942][T17231] should_failslab+0xc2/0x120 [ 910.430957][T17231] kmem_cache_alloc_noprof+0x91/0x6a0 [ 910.430970][T17231] ? trace_kmem_cache_alloc+0xdd/0x100 [ 910.430985][T17231] ? security_file_alloc+0x34/0x2c0 [ 910.431004][T17231] security_file_alloc+0x34/0x2c0 [ 910.431020][T17231] init_file+0x95/0x480 [ 910.431034][T17231] alloc_empty_file+0x79/0x1c0 [ 910.431048][T17231] path_openat+0xdb/0x2440 [ 910.431062][T17231] ? __pfx_path_openat+0x10/0x10 [ 910.431078][T17231] do_file_open+0x20e/0x430 [ 910.431090][T17231] ? __lock_acquire+0x49f/0x1a40 [ 910.431105][T17231] ? __pfx_do_file_open+0x10/0x10 [ 910.431126][T17231] ? _raw_spin_unlock+0x28/0x50 [ 910.431140][T17231] ? alloc_fd+0x471/0x7a0 [ 910.431156][T17231] do_sys_openat2+0x10f/0x1e0 [ 910.431171][T17231] ? __pfx_do_sys_openat2+0x10/0x10 [ 910.431186][T17231] ? __fget_files+0x21f/0x3d0 [ 910.431200][T17231] __x64_sys_open+0xfe/0x1d0 [ 910.431214][T17231] ? __pfx___x64_sys_open+0x10/0x10 [ 910.431227][T17231] ? ksys_write+0x1ac/0x250 [ 910.431237][T17231] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 910.431256][T17231] ? syscall_user_dispatch+0x76/0x130 [ 910.431273][T17231] do_syscall_64+0x115/0x870 [ 910.431288][T17231] ? clear_bhb_loop+0x70/0xc0 [ 910.431301][T17231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.431312][T17231] RIP: 0033:0x7fd79d59e0d9 [ 910.431322][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.431332][T17231] RSP: 002b:00007fd79e479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 910.431343][T17231] RAX: ffffffffffffffda RBX: 00007fd79d825fa0 RCX: 00007fd79d59e0d9 [ 910.431350][T17231] RDX: 0000000000000088 RSI: 0000000000555502 RDI: 0000200000000e80 [ 910.431356][T17231] RBP: 00007fd79e479090 R08: 0000000000000000 R09: 0000000000000000 [ 910.431363][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.431369][T17231] R13: 00007fd79d826038 R14: 00007fd79d825fa0 R15: 00007fff8f8260b8 [ 910.431382][T17231] [ 911.646664][ T5696] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 911.664087][ T5696] em28xx 2-1:0.132: analog set to bulk mode. [ 911.675821][ T5697] em28xx 2-1:0.132: Registering V4L2 extension [ 911.948398][ T1210] usb 6-1: USB disconnect, device number 39 [ 912.276012][T17251] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2681'. [ 912.297362][ T5697] em28xx 2-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 912.347481][ T5602] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 912.400027][ T5696] usb 2-1: USB disconnect, device number 76 [ 912.409561][ T5696] em28xx 2-1:0.132: Disconnecting em28xx [ 912.434053][ T5697] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 912.524851][ T5602] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 912.537727][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 912.537738][ T30] audit: type=1326 audit(1787107556.687:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.3.2682" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f660fb9e0d9 code=0x0 [ 912.607681][ T5602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.635278][ T5602] usb 8-1: config 0 descriptor?? [ 912.676619][ T5602] cp210x 8-1:0.0: cp210x converter detected [ 912.740282][ T5697] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 912.761694][ T5697] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 912.780215][T17256] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 912.799179][ T5697] em28xx 2-1:0.132: No AC97 audio processor [ 912.876429][ T5602] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 912.903802][ T5602] cp210x 8-1:0.0: querying part number failed [ 912.997318][ T5697] usb 2-1: Decoder not found [ 913.015267][ T5602] usb 8-1: cp210x converter now attached to ttyUSB0 [ 913.041978][ T5697] em28xx 2-1:0.132: failed to create media graph [ 913.077775][ T5602] usb 8-1: USB disconnect, device number 10 [ 913.094567][ T5697] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 913.134532][ T5602] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 913.206242][T17271] 9p: Bad value for 'wfdno' [ 913.221052][ T5602] cp210x 8-1:0.0: device disconnected [ 913.291561][T17261] ================================================================== [ 913.299627][T17261] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 913.306809][T17261] Read of size 4 at addr ffff8880617f0860 by task v4l_id/17261 [ 913.314324][T17261] [ 913.316624][T17261] CPU: 0 UID: 0 PID: 17261 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 913.316639][T17261] Tainted: [L]=SOFTLOCKUP [ 913.316643][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 913.316650][T17261] Call Trace: [ 913.316654][T17261] [ 913.316658][T17261] dump_stack_lvl+0x100/0x190 [ 913.316673][T17261] print_report+0x13d/0x4b0 [ 913.316689][T17261] ? __virt_addr_valid+0x239/0x430 [ 913.316704][T17261] ? v4l2_open+0x351/0x490 [ 913.316713][T17261] kasan_report+0xdf/0x1c0 [ 913.316728][T17261] ? v4l2_open+0x351/0x490 [ 913.316739][T17261] v4l2_open+0x351/0x490 [ 913.316750][T17261] ? __pfx_v4l2_open+0x10/0x10 [ 913.316760][T17261] chrdev_open+0x234/0x6a0 [ 913.316772][T17261] ? __pfx_chrdev_open+0x10/0x10 [ 913.316785][T17261] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 913.316802][T17261] do_dentry_open+0x6ab/0x14d0 [ 913.316812][T17261] ? __pfx_chrdev_open+0x10/0x10 [ 913.316825][T17261] vfs_open+0x82/0x3f0 [ 913.316838][T17261] path_openat+0x19fa/0x2440 [ 913.316851][T17261] ? __pfx_path_openat+0x10/0x10 [ 913.316865][T17261] do_file_open+0x20e/0x430 [ 913.316877][T17261] ? __pfx_do_file_open+0x10/0x10 [ 913.316894][T17261] ? alloc_fd+0x471/0x7a0 [ 913.316906][T17261] ? do_getname+0x191/0x390 [ 913.316921][T17261] do_sys_openat2+0x10f/0x1e0 [ 913.316935][T17261] ? __pfx_do_sys_openat2+0x10/0x10 [ 913.316950][T17261] __x64_sys_openat+0x12d/0x210 [ 913.316964][T17261] ? __pfx___x64_sys_openat+0x10/0x10 [ 913.316980][T17261] do_syscall_64+0x115/0x870 [ 913.316996][T17261] ? clear_bhb_loop+0x70/0xc0 [ 913.317008][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.317019][T17261] RIP: 0033:0x7f32a40a7407 [ 913.317028][T17261] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 913.317039][T17261] RSP: 002b:00007ffe278e3530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 913.317049][T17261] RAX: ffffffffffffffda RBX: 00007f32a4784880 RCX: 00007f32a40a7407 [ 913.317057][T17261] RDX: 0000000000000000 RSI: 00007ffe278e4f1b RDI: ffffffffffffff9c [ 913.317063][T17261] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 913.317069][T17261] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 913.317076][T17261] R13: 00007ffe278e3780 R14: 00007f32a4889000 R15: 000056446a40a4d8 [ 913.317086][T17261] [ 913.317090][T17261] [ 913.553407][T17261] Allocated by task 5697: [ 913.557706][T17261] kasan_save_stack+0x30/0x50 [ 913.562360][T17261] kasan_save_track+0x14/0x30 [ 913.567007][T17261] __kasan_kmalloc+0xaa/0xb0 [ 913.571569][T17261] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 913.576955][T17261] em28xx_v4l2_init.cold+0x94/0x3a40 [ 913.582228][T17261] em28xx_init_extension+0x13a/0x200 [ 913.587499][T17261] request_module_async+0x61/0x80 [ 913.592496][T17261] process_one_work+0xa23/0x1940 [ 913.597420][T17261] worker_thread+0x5ef/0xe50 [ 913.601979][T17261] kthread+0x370/0x450 [ 913.606015][T17261] ret_from_fork+0x72b/0xd50 [ 913.610586][T17261] ret_from_fork_asm+0x1a/0x30 [ 913.615321][T17261] [ 913.617619][T17261] Freed by task 5697: [ 913.621565][T17261] kasan_save_stack+0x30/0x50 [ 913.626214][T17261] kasan_save_track+0x14/0x30 [ 913.630862][T17261] kasan_save_free_info+0x3b/0x70 [ 913.635852][T17261] __kasan_slab_free+0x5f/0x80 [ 913.640585][T17261] kfree+0x22b/0x6c0 [ 913.644447][T17261] kref_put.isra.0+0x53/0x75 [ 913.649011][T17261] em28xx_v4l2_init.cold+0x280/0x3a40 [ 913.654362][T17261] em28xx_init_extension+0x13a/0x200 [ 913.659617][T17261] request_module_async+0x61/0x80 [ 913.664612][T17261] process_one_work+0xa23/0x1940 [ 913.669517][T17261] worker_thread+0x5ef/0xe50 [ 913.674076][T17261] kthread+0x370/0x450 [ 913.678111][T17261] ret_from_fork+0x72b/0xd50 [ 913.682673][T17261] ret_from_fork_asm+0x1a/0x30 [ 913.687417][T17261] [ 913.689712][T17261] The buggy address belongs to the object at ffff8880617f0000 [ 913.689712][T17261] which belongs to the cache kmalloc-8k of size 8192 [ 913.703741][T17261] The buggy address is located 2144 bytes inside of [ 913.703741][T17261] freed 8192-byte region [ffff8880617f0000, ffff8880617f2000) [ 913.717696][T17261] [ 913.720010][T17261] The buggy address belongs to the physical page: [ 913.726388][T17261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x617f0 [ 913.735122][T17261] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 913.743603][T17261] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 913.751115][T17261] page_type: f5(slab) [ 913.755068][T17261] raw: 00fff00000000040 ffff88801c028280 dead000000000122 0000000000000000 [ 913.763618][T17261] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 913.772170][T17261] head: 00fff00000000040 ffff88801c028280 dead000000000122 0000000000000000 [ 913.780807][T17261] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 913.789447][T17261] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 913.798084][T17261] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 913.806724][T17261] page dumped because: kasan: bad access detected [ 913.813110][T17261] page_owner tracks the page as allocated [ 913.818791][T17261] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17232, tgid 17225 (syz.3.2674), ts 910817437661, free_ts 910386155826 [ 913.840292][T17261] post_alloc_hook+0xfd/0x120 [ 913.844941][T17261] get_page_from_freelist+0xf48/0x3530 [ 913.850373][T17261] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 913.856245][T17261] new_slab+0xa2/0x640 [ 913.860282][T17261] refill_objects+0xe3/0x410 [ 913.864854][T17261] __pcs_replace_empty_main+0x376/0x680 [ 913.870373][T17261] __kmalloc_noprof+0x66d/0x820 [ 913.875194][T17261] ops_init+0x77/0x5f0 [ 913.879233][T17261] setup_net+0x118/0x3a0 [ 913.883445][T17261] copy_net_ns+0x46f/0x7c0 [ 913.887835][T17261] create_new_namespaces+0x3ea/0xac0 [ 913.893103][T17261] unshare_nsproxy_namespaces+0xf2/0x220 [ 913.898707][T17261] ksys_unshare+0x4a2/0xa70 [ 913.903183][T17261] __x64_sys_unshare+0x31/0x40 [ 913.907918][T17261] do_syscall_64+0x115/0x870 [ 913.912489][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.918357][T17261] page last free pid 17203 tgid 17203 stack trace: [ 913.924827][T17261] __free_frozen_pages+0x79f/0x1090 [ 913.929999][T17261] __folio_put+0x3b4/0x5f0 [ 913.934382][T17261] skb_release_data+0x649/0x8e0 [ 913.939199][T17261] __kfree_skb+0x4f/0x70 [ 913.943418][T17261] tcp_ack+0x2079/0x7650 [ 913.947639][T17261] tcp_rcv_established+0x116d/0x3990 [ 913.952899][T17261] tcp_v4_do_rcv+0xbb6/0x1260 [ 913.957564][T17261] tcp_v4_rcv+0x2ec1/0x4840 [ 913.962050][T17261] ip_protocol_deliver_rcu+0xba/0x4d0 [ 913.967400][T17261] ip_local_deliver_finish+0x3f2/0x6e0 [ 913.972838][T17261] ip_local_deliver+0x19a/0x1f0 [ 913.977660][T17261] ip_list_rcv_finish+0xa14/0xce0 [ 913.982665][T17261] ip_list_rcv+0x338/0x450 [ 913.987052][T17261] __netif_receive_skb_list_core+0x74c/0x940 [ 913.993013][T17261] netif_receive_skb_list_internal+0x722/0xd40 [ 913.999146][T17261] napi_complete_done+0x221/0x940 [ 914.004153][T17261] [ 914.006448][T17261] Memory state around the buggy address: [ 914.012043][T17261] ffff8880617f0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.020071][T17261] ffff8880617f0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.028108][T17261] >ffff8880617f0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.036137][T17261] ^ [ 914.043299][T17261] ffff8880617f0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.051331][T17261] ffff8880617f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.059359][T17261] ================================================================== [ 914.086039][ T5697] em28xx 2-1:0.132: Remote control support is not available for this card. [ 914.328731][ T5696] em28xx 2-1:0.132: Closing input extension [ 914.615935][ T5696] em28xx 2-1:0.132: Freeing device [ 914.652829][ T30] audit: type=1400 audit(1787107558.737:2238): avc: denied { read } for pid=4947 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 914.678657][ T30] audit: type=1400 audit(1787107558.737:2239): avc: denied { search } for pid=4947 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.703738][ T30] audit: type=1400 audit(1787107558.737:2240): avc: denied { append } for pid=4947 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 914.728439][ T30] audit: type=1400 audit(1787107558.737:2241): avc: denied { open } for pid=4947 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 914.781938][ T30] audit: type=1400 audit(1787107558.737:2242): avc: denied { getattr } for pid=4947 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 914.819982][T17261] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 914.827180][T17261] CPU: 0 UID: 0 PID: 17261 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 914.837746][T17261] Tainted: [L]=SOFTLOCKUP [ 914.842050][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 914.852073][T17261] Call Trace: [ 914.855330][T17261] [ 914.858233][T17261] dump_stack_lvl+0x100/0x190 [ 914.862888][T17261] vpanic+0x552/0x970 [ 914.866838][T17261] ? __pfx_vpanic+0x10/0x10 [ 914.871308][T17261] ? rcu_is_watching+0x12/0xc0 [ 914.876056][T17261] ? v4l2_open+0x351/0x490 [ 914.880444][T17261] panic+0xd1/0xe0 [ 914.884133][T17261] ? __pfx_panic+0x10/0x10 [ 914.888517][T17261] ? v4l2_open+0x351/0x490 [ 914.892902][T17261] ? preempt_schedule_common+0x42/0xc0 [ 914.898333][T17261] ? check_panic_on_warn+0x1f/0x90 [ 914.903412][T17261] check_panic_on_warn.cold+0x19/0x34 [ 914.908754][T17261] end_report.part.0+0x3a/0x90 [ 914.913498][T17261] kasan_report.cold+0xe/0x18 [ 914.918157][T17261] ? v4l2_open+0x351/0x490 [ 914.922549][T17261] v4l2_open+0x351/0x490 [ 914.926761][T17261] ? __pfx_v4l2_open+0x10/0x10 [ 914.931493][T17261] chrdev_open+0x234/0x6a0 [ 914.935880][T17261] ? __pfx_chrdev_open+0x10/0x10 [ 914.940786][T17261] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 914.947088][T17261] do_dentry_open+0x6ab/0x14d0 [ 914.951820][T17261] ? __pfx_chrdev_open+0x10/0x10 [ 914.956727][T17261] vfs_open+0x82/0x3f0 [ 914.960773][T17261] path_openat+0x19fa/0x2440 [ 914.965335][T17261] ? __pfx_path_openat+0x10/0x10 [ 914.970256][T17261] do_file_open+0x20e/0x430 [ 914.974731][T17261] ? __pfx_do_file_open+0x10/0x10 [ 914.979730][T17261] ? alloc_fd+0x471/0x7a0 [ 914.984031][T17261] ? do_getname+0x191/0x390 [ 914.988515][T17261] do_sys_openat2+0x10f/0x1e0 [ 914.993164][T17261] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.998334][T17261] __x64_sys_openat+0x12d/0x210 [ 915.003155][T17261] ? __pfx___x64_sys_openat+0x10/0x10 [ 915.008499][T17261] do_syscall_64+0x115/0x870 [ 915.013069][T17261] ? clear_bhb_loop+0x70/0xc0 [ 915.017716][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.023577][T17261] RIP: 0033:0x7f32a40a7407 [ 915.027961][T17261] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 915.047537][T17261] RSP: 002b:00007ffe278e3530 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 915.055922][T17261] RAX: ffffffffffffffda RBX: 00007f32a4784880 RCX: 00007f32a40a7407 [ 915.063872][T17261] RDX: 0000000000000000 RSI: 00007ffe278e4f1b RDI: ffffffffffffff9c [ 915.071832][T17261] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 915.079777][T17261] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 915.087717][T17261] R13: 00007ffe278e3780 R14: 00007f32a4889000 R15: 000056446a40a4d8 [ 915.095661][T17261] [ 915.098694][T17261] Kernel Offset: disabled [ 915.102989][T17261] Rebooting in 86400 seconds..