last executing test programs: 1m19.227297772s ago: executing program 0 (id=4168): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04e60f08"], 0x7) 1m19.150045683s ago: executing program 0 (id=4169): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m18.337208349s ago: executing program 0 (id=4173): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m17.207338876s ago: executing program 0 (id=4176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300), 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) sendmmsg$unix(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5ca07ebddfb4cc236ba18881f38f4d760c620c635bb5a22700ac9a3b54fc1f89f54c45d19d04b785b01252859968c6440a8c30545dead2103f6280c8e708bb74a6d78eb5477143f45d6a3f65fb5ce7d77fd5d04933e6f00a3fdeb3c2b9cce37dffba41bdf1bf9b84b5128f7b3082c1ef6cf98a9983ec76b0127603686d95ad7969594c603b2f765e8044982d216b2735af2aad1241692da80100", 0x9a}, {&(0x7f0000000380)="28730e6a2afc52cbbef08acab069aa13e138d6f2e2f7593c56ccbd64290bd7a93fd7dc3b02cdaa9347df554c0b310eddc67256d9b6b6f4c1528026f08034c0bd2338523f", 0x44}, {&(0x7f0000000400)="9c520f86a43446ebf6563a9cee4f85b85c9867663da7257aa97883eaffa19e2ae6fcf3be5a4441434e38b4393357741e42467b085c0828372c68b046c03ddfcd2891611fc24703a6948777f04bf46902815585055f384c8f5682abe0a717080044e930445288bd8883ed5c988d9de6ddd879c9edf38c44bd373e96d0d97546cf857092f51a90219a34dfbeeb9ad0bdbd824b671face124addd70c11343b618fb12576a69dbd7fb80eba585d4fe8f14f552bbdec27ac961a7818ba8233d7e15f156a4858c6c0d1e26035fe51ed8b535c7251330cbd92387b2", 0xd8}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1, r1, r0, r1]}}], 0xc8, 0x1}}, {{&(0x7f0000000900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000980)="9a3c674411777e4700fea1ee21891b7d344f8a10a0f5904e0467885e6b13c461ea67de923de157fe5f6359d133f550716ca2b785881a1392422df4f4156d8d9d8afe65d29431f45e2ccff4fac854ad946d37308b919370cb5488d50e377f110d90822681027c869fd5", 0x69}, {&(0x7f0000000a00)="6061ad17bceb9292e795c8e4b5797def5e8b39d90565f5a1244bead242fd454d3b32d49343c169bf300e81fc98dcf524d49a2e8deec1a593f6ccc0a40923064c62924dbd726f32d2a71d8ef0ffc5a737c6c5014a61955d2b", 0x58}, {&(0x7f0000000a80)="8f0cafc7e058418f7e4c8cbf5d1f1ab7496f10a81ab9408e98fab6af8be23243d3a85b1eb3d3d10375be48539049417c3cc6dfb10180ff85e3c3d30e49db67ac2ad598bc63fcef1db114c5c5e08197de7e5135b5c5242d9f964cea941babc8d27a23bfed714f1924e32c35b1191f2031b17ede81d4025be6a233b93fd6bff7045de96f1028cd2a9ac071861052bd8a9cdb19133031c0ce42708666aef5b1bb04c0e7c46b7488fd1bd1c26c20ddafd01f51d51e5e73d2d677557550f3618a8de88b62b96cbb5abe561a0c9c3d6de7598ec4fa83def2c7", 0xd6}, {&(0x7f0000000b80)="5d28f051ac99df463c6e7150d7d83cb10ec19ca5f548f6dee49b371e441b1a218c2af0ead9d90367ae08d065ec77957587b94bb85c65e3aefd118ee10db45ac682c82664cfee7ae297d0ff30d72cc4b193b4c94522fedbafff88962f122937984ae5a3bbf6bfc75e35a3c1e1ed4fbcdb2fc1c97ef704b1156976944a0585009b", 0x80}, {&(0x7f0000000c00)="72e0067fce90f2e455ebcf4484268b2d4a76ff3b2b801043aa218be635e45b3e1d3fe3343c341260a84fed7d064577695af7b311f15f6850a1bc899435fcd8cb22ca3c", 0x43}, {&(0x7f0000000c80)="bb0152bbdb4c76bf10764fea420909286f23d7884d5e0638a0ff5ebe06cf7fb52ff091692348e4f82dd57c7c9d1f2bb856ae8228e85ce118726fd19fdbb7bb94ef7ea6467470f9b88db382e41c6433cf117da8cfe9e5cc3434429e227ce8cbafe1f39880f132d60d1fbcd77fa1bdb8e02cf82ff026509bdb7d5b6f03463826ac435fca14e2489e87eb87567351eb13bf8df5d3ca05b9b3723848c011e2a3e5d305d5f9c15fe7aa077cb74ad985afc624dcda88a6ef991e708decd3dfcd94bdc53157ed8b94044d27e82e638c984fefdf380d9d957a673f3bd6", 0xd9}, {&(0x7f0000000d80)="bad3e3879fc4177c2401a47e37eb885fbb1ffa1be613e1a8d5d140da54c044c1a4dde6891bcb4d90d93ba8fac1b94db9a8bb23d28f80267f5b719861532b2218bdbc2dc915e173f1ad308b3beab91f7ff0b84d5d3603f3ed50c57b9d3704957380fb089ac97f7cacc3a8cd6829c52c5b3cb7d1cfc4213e7589e5f75f67", 0x7d}], 0x7, &(0x7f0000000ec0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x80}}, {{0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0, 0x24000091}}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB, @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = io_uring_setup(0x7da, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1m15.351662403s ago: executing program 0 (id=4185): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a41", 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r5, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xce\x82\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x04\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\xd8\x00\x00\x00\x00\x00\x00\x00\x1b\xcb\xfc6\xba\xde44m\x96#\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xdb\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x480c4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xde0, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xdaa, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private1, [{0x5, 0xd, "52811c8f7eefb435b3fcbd906282e8dcc4436572645e443db860c149c04bcefadad96545eeae73819162fe2099e06d52c1e95acc597cfea679351e8fe58afb31e3076c9074c81020a1aec96e31fde771cad6784b75ad75a7e23b50a17c6f7a4197df2c7a32b4e6d48ac88c"}, {0x19, 0x8, "16198027b1d7011df55036b41e693daaa3a374e951a3bd1e7a794eb3d4a4aea35967f1f412c3f66dc291723df062329c1eef10de42e5015e82a0a0fcfbb4dc10031be4"}, {0x18, 0x19c, "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"}]}}}}}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x0, 0x80005, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x50}}, 0x0) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r8, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 1m14.011460058s ago: executing program 0 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472a41e24b11f34b608816e5"}]}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') r5 = accept$nfc_llcp(r2, &(0x7f0000000200), &(0x7f00000000c0)=0x60) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r7 = getegid() setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400)={r1, r6, r7}, 0xc) getpgrp(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file1\x00') 59.597471362s ago: executing program 32 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r1 = getpid() r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xb, 0x141042) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472a41e24b11f34b608816e5"}]}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') r5 = accept$nfc_llcp(r2, &(0x7f0000000200), &(0x7f00000000c0)=0x60) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) r7 = getegid() setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000400)={r1, r6, r7}, 0xc) getpgrp(r1) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file1\x00') 19.365312407s ago: executing program 3 (id=4435): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x0, 0xd4, 0x8, &(0x7f0000000040)={0xd, "d915530f67b78831e27b51f3226a3ff08c343c76f8bb232ea71034336c30ad58dd"}}) 18.637943292s ago: executing program 3 (id=4439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x10002600, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/202, 0xff7a, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r2}}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$kcm(0xa, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.037990736s ago: executing program 4 (id=4465): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r5, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xce\x82\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x04\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\xd8\x00\x00\x00\x00\x00\x00\x00\x1b\xcb\xfc6\xba\xde44m\x96#\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xdb\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x480c4) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xde0, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xdaa, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private1, [{0x5, 0xd, "52811c8f7eefb435b3fcbd906282e8dcc4436572645e443db860c149c04bcefadad96545eeae73819162fe2099e06d52c1e95acc597cfea679351e8fe58afb31e3076c9074c81020a1aec96e31fde771cad6784b75ad75a7e23b50a17c6f7a4197df2c7a32b4e6d48ac88c"}, {0x19, 0x8, "16198027b1d7011df55036b41e693daaa3a374e951a3bd1e7a794eb3d4a4aea35967f1f412c3f66dc291723df062329c1eef10de42e5015e82a0a0fcfbb4dc10031be4"}, {0x18, 0x19c, "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"}]}}}}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x0, 0x80005, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x64}}, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, &(0x7f0000000100)={0x1, 0x1, [{0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 8.826386885s ago: executing program 3 (id=4439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000600)={0x10002600, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/202, 0xff7a, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r2}}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket$kcm(0xa, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.64905479s ago: executing program 4 (id=4471): mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0xe, &(0x7f0000000080)={0x8, 0x1000086}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xf, @loopback, 0x9ff3, 0x4}, 0x20) epoll_create(0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x21, 0x3, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x80a0000, 0x118000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000300)={0xdddd0000, 0x107000, 0x1}) ioctl$int_out(r3, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) 7.770340705s ago: executing program 4 (id=4475): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x207e) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7.701998433s ago: executing program 4 (id=4476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect$uac1(0x4, 0xb7, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x3, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6e3, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x5, 0x4, [0x2, 0x5, 0x8, 0x3], 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x0, "398179"}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x7, 0x1, "32ea98e0acca"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00'}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x9, "99ad646319"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x1, 0x5e, 0x7, ';', "3d97"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xf9, 0x1, {0x7, 0x25, 0x1, 0x102, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xe, 0x9, {0x7, 0x25, 0x1, 0x2, 0xf, 0x1000}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x74, 0xff, 0xfa, 0x8, 0xf8}, 0x7a, &(0x7f0000000280)={0x5, 0xf, 0x7a, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "9d37f912322839a96c91bb7879878b84"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xbc, 0x8, 0x7f7f, 0x5}, @generic={0x4f, 0x10, 0x1, "5ae260eb7b549826a0c70ca2cbbf31afd09d5d9d7094c8b2295807d4f93b359efec6d746e5a0b1e9cee8552652fbf71c0d240db3801ba8277d16c42e24426088a2febe4691b89e30282e0ee9"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x2, 0x5}]}, 0x5, [{0x8e, &(0x7f0000000300)=@string={0x8e, 0x3, "bb4f5091cb6e43ca450a9e6375453497e4eb698d11cca0aa47af3a2d25ce598afd0e1310cbb0a00588cb4458c84991dac2aa4e88ef4c46a6829d3749766ecc237f27962385c81a3163bfdaefd9d21240d06c145f43ab4674049ecfbb561f283cdf08ae39e78e3eddbe0e77d501c1ca43943421fb34f707101fd426a8229b55b94f5ba24ae236185fd374c30f"}}, {0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="5203a324de4d6eeb49a7eb289618982058bdaadd61c61f36a94132e21920935daab5893675cd70117d1a23401505ebd6c8376d2994a0825e004f8da6e029c588755e8914346bd662d4bb03e40b5370b52dee"]}, {0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="40037564781b8c262e942027cd718887882b7607755f7c44527301bcfb24f8d8edcf2bf8e097e9b8109a718a07f20adc8b89f7c82d1ca2dbbb8634a2cf5fe0ef"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}, {0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="b80353044be6a4d56eab2c44b019746ebefd3e89b1db6d143db88401935dbfc1fe245250f9df9edc49003539d43a692288f4ee5cee8eb7c0229e0b1a725efed2d387688adc1cff0419110e66326b0a2893c19b704e107604fcc9ed6dc0b8401beec2c1cd6e8e3ed929effe7546f35eb02947c0b13307266196df96c0cb5c82b467212244888ed59cdd81c7d334d0341e1620fae17217e4b9ead1ff42d69bb99c9070098ff54ee859ede9297f9a7ceb7b09cd8e66b04b6b0ffc3ac530d87200"/200]}]}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r6, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) gettid() listen(r0, 0x5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @empty}, 0x1c) sendto$inet6(r7, &(0x7f0000000040)="c49751936c4a9af2ee0283d5cb9f092671197ab206efc20d10346df8914bae6b73118f43", 0x24, 0x40850, 0x0, 0x0) 7.390260081s ago: executing program 3 (id=4479): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "669e7e", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @local}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x1}, 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 7.037189731s ago: executing program 1 (id=4480): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000340)={0x200000, 0x4, 0x0, 0x0, 0x5987}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xfffffffff2065da1, 0x4, 0x8010, 0xfffffffc, 0x6, 0x0, 0x0, 0x20, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)={0x4f0243, 0x5d4, 0x21}, 0x18) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="0f2309410f01df8fc9709618470f7908410fa90f08410f01d1c7442400fd000000c7444b24020200000f0f2c24640f69e9c4e225b8aac7000000", 0x3a}], 0x1, 0x50, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="f78d9ca38fff48f3be52163448412ba868f47bd08c125ead6730b2fe38e91da3a218ad510c88932b22c1251bf86c1e9f2ba534ff248c2b2ade1b93b9a2d41c8ea2ff373298e2d89cf5c3fb017becea31d90c1f6570c95c9662becb1ed39dc553276c119ec4086d860600000081d67de6a4dbb914d02aab3626b674b3c5ddbd9554fe5107ff6fd00fb19db7f1c9e1a7da011de2c7242c2054d6ad7ad75f37b813c92ce9a92817347b56eab245bf017092a3ceb30bcee312f653a919da27679a67cf91b08d7be102d3dd0142b569198105da8f75c33be06a23e846b3d3a4e5c0ec2113e784c48c3a2015008f9ef816797bcd15709c58cacc3c92ad26304326da6d8cdc22de47dbc7e5490fb54c42c226b09a334487f9acfa182ca492b96cdccdfb6dcb8a800bcabaa531c56299eb1e14ca7f2bca7493748074bb0557a8651d5d241d55c0c30a58de31a41de7d9c16b4b40fcd23552298b72a339bf9d17761bb186dc825bfb322aca8eebbd41ea235eb0437e2bf68297711f4bc6d8cf70e8ac0cb988a7f60aedd74fbb412f54a40f0631d44ac07a47e90c0e4b7684edb7a99ed8d88f7c75", 0x1a3}], 0x1}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="31486db315f378051e1e875f2471b3cdd7711132347ea06a4ca5dfbcde55c4c2f3518b243941b5afc2552cd3be01f2f871a16b50e4957137d2fa", 0x3a}, {&(0x7f0000000740)="588345259eb41ef09488d6516d7b9daa7b1f86cd8deae7c03dc5750a803b96d7b75575317436a4cf34fdd4abe7050a1a56bdb3d07ca8748036d1fe9b13291336463381fbead166ee80c4db713367dc01287f0b608102af0b7beb3442b0949755f6f9764bbdd27effe840b8f1da37ba25a59fc3e2a3fa3a260abacfd75aeffd4fb4a579e2cf30f78414915a49221e8342e1deff07", 0x94}, {&(0x7f00000002c0)="fceda5f5a6a149ca91414e7b066041f542cef5b9ef01e3c3a9203e9cd569af0e514b9edd5285b01e5e78095f882101a5e6865f", 0x33}, {&(0x7f0000000800)="da204cc778808454ed71249d1a097854ae85ba2a112d3e91a4b03fe2af82001829ff5e79d3635c0df7b74b7261275a7d4145631c8afd455b32f12452eb695b787381ba1795e552f69a764dd9a27c3f418132aabc757762a295f297277afe01b972f0a7f3f1a92acdc004c355ebf71f59fccc27fde5c69ef6760ee15bea1e185aadd9616ad42cacb8c7592706f5191249c7", 0x91}, {&(0x7f0000000ac0)="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", 0x150}, {&(0x7f0000000440)="22587b686f07d05867ea60d80ac900000000000000", 0x15}, {&(0x7f00000008c0)="78e482d1ea1923847faf350da82a85bfcca3adaf012ab884cf4205a05e3bffabd970323c8ed72b73bac246c1b13a6ecc6c55c1aa5505748c41f2d0489998c15042975d15146a516fe49961fe9cb2d1290a8ecdd5a79646559133b98651c843d49bd45663ca0938ac338059dc3d4dd3ad87809283f715e11030600eac8f7d29b885a0e96e7f82c73a02adcbe4ab5cd21dc0043c0d7ec5bb1409a7d19e64aed30fbae14b1c5cb179016f31f7616f1b5a5474d11ad09d4047b26aacbeb229c3145b68befcfdea8fb9eea47e8696a5b2ecace9988aae7c1f68d70a386ca9979f8c", 0xdf}], 0x7, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x64}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x24005064}], 0x2, 0x40800) (async, rerun: 64) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x40000160) (rerun: 64) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x1) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 6.461763022s ago: executing program 3 (id=4482): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000014000500fcf0ff005dd4a9820000000000000001080002000500000007000600ff"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x200}, 0x10) r9 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r10, 0xe}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r11, 0x431, 0x70bd2a, 0x259fdc00, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14200000", @ANYRES16=r11, @ANYBLOB="000126bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x28c0b08755603ae3}, 0x24000055) r12 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x3516, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x8}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000000)) 6.446292254s ago: executing program 1 (id=4483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r0, 0x11}, 0x14) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) 5.562742068s ago: executing program 1 (id=4484): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) read$ptp(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x13, 0x40, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x8, 0x1000}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x8, 0x1, 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x9, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57d3, 0x0, 0x0, 0x0, 0xbd3}, [@call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7667, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @generic={0x1, 0x1, 0xb, 0xfb3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x4, r4, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x9, 0x6, 0x4}, 0x10, 0x0, r5, 0x7, &(0x7f0000000440)=[0x1, r6, r7], &(0x7f0000000480)=[{0x3, 0x4, 0x2, 0xa}, {0x5, 0x4, 0x6, 0x1}, {0x2, 0x2, 0x0, 0x4}, {0x4, 0x1, 0x6, 0xd}, {0x4, 0x5, 0x1, 0x6}, {0x5, 0x5, 0x8}, {0x0, 0x1, 0x2, 0x2}], 0x10, 0x6}, 0x94) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000249e58407c2c12051a372094e90b0902120001000000000904180000ffffff00"], 0x0) 4.861687606s ago: executing program 3 (id=4486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000140)={0x1c, 0x9, 0x20, 0x6, 0x0, 0x788aa21, 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x10, 0xffffffffffffffff, 0x215eb000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffff7b) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xffffffffffffff42, &(0x7f0000000740)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="5af720752c47f9b5f458740f3f33b3a0a300150129f92dc51f1a88440feff0256dfed72839fe1e6bf2"]) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x10000000, 0x36a, 0x0, 0x6, 0x8, 0xfffffe0000000001, 0xfa14, 0x1ff}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x40008) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x109000, 0x0) 4.674059977s ago: executing program 1 (id=4487): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000040)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1010003c00010325bd7000fcca908f"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000014000100000000ce00030000010011000100000000000000000010000000000000505b2f"], 0x28}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000180)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r4, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{0x6, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000021e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) 4.597089115s ago: executing program 4 (id=4488): sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0xe) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}}, 0x24040084) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000000008000100"], 0x30}}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_channels={0x1b, 0xffffffff, 0x0, 0x0, 0x5, 0x2}}) signalfd(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 4.367591126s ago: executing program 5 (id=4491): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x5, 0x6c, &(0x7f0000003c40)="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"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) (async) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x80001, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f00000001c0)=0x2, 0x4) r6 = creat(&(0x7f0000000580)='./file1\x00', 0x0) (async) r7 = fanotify_init(0xf00, 0x1) fanotify_mark(r7, 0x105, 0x40009975, r6, 0x0) (async) fallocate(r5, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) 3.947889195s ago: executing program 5 (id=4492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.812270786s ago: executing program 5 (id=4493): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e26, 0xd, @local, 0x9}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=0x0, @ANYRES8=r0], 0x20}}, 0x4000000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) 3.640481643s ago: executing program 2 (id=4494): fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff020000000000000000006b"], 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 2.94200046s ago: executing program 5 (id=4495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40800, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x25dfdbfb, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r6, 0x89e1, &(0x7f0000000000)=0x8000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000c40)=""/11, 0xb}], 0x1, 0x0, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r9 = fsopen(&(0x7f0000000180)='9p\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000140)="41000200010001", 0x7) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c9201c001800050017091400000009000600ff07090005001309080004000500"], 0x21) 2.844747776s ago: executing program 5 (id=4496): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2c000, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) fcntl$setownex(r8, 0xf, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.726928437s ago: executing program 2 (id=4497): syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.688981575s ago: executing program 2 (id=4498): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x2000000000000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x89) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4004e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x3c}) close_range(r1, 0xffffffffffffffff, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x6, 0x183a80) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x88600, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) 1.671982457s ago: executing program 5 (id=4499): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x97, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_TCP_SRC]}}]}, 0x6c}}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="dbc50afce96e556c1dffffffffffff85e3b2e81eaaaaaaaaaa1586dd6000021000403afffe80000000000000000000bbff0200000000000000000000000000010301a578305b9600007e81b06900000000ffff011000000000000000000000000001200100000000000000000000000000022f000400"], 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000640)="cc123e78d3c4812e5515680f4aadf06c45d4c309fee26c87220a4772bf9dd258cc79ff856c54f1c6f3067a6e6bfe73f1bb1ffd94355d66d3e3228519d37a1ac65c13f683c4e81898fde2d1f942acb2d96c2a6261974d23f5b4b4c7438e30b9c9a338", 0x62}, {&(0x7f00000004c0)="c7d6f5ce5bb11bb9744ac6d8f18fdb4d8d00332cd6017e", 0x17}], 0x3, 0x0, 0x0, 0x1000}], 0x1, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.671607027s ago: executing program 2 (id=4500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() process_vm_readv(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x3, &(0x7f0000000300)=[{0xffffffffffffffff}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000480)=""/120, 0x78}], 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff0000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000ffffffffffffff00000000004000"/56], 0xb8}}, 0x0) r2 = fanotify_init(0x16, 0x0) r3 = epoll_create1(0x80000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000000)={0x0}, 0x1) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'comedi_test\x00', [0x3, 0x0, 0x9, 0x2, 0x1, 0x0, 0x1, 0x80000003, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0x20ffff, 0xffff, 0xffffffa8, 0x40000009, 0xa0002f, 0x3, 0x3ff, 0x410000, 0x8, 0xe2dd, 0x2, 0x8, 0x10001, 0x3, 0x7, 0x4, 0x8045]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x2002}) r8 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) dup(r8) 1.631942465s ago: executing program 4 (id=4501): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8800) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x6b) io_setup(0x1, &(0x7f00000016c0)) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000580)={0x6e9, 0x6, 0x40, "02306d937b9d31672aeddbc98d9a8ee29135d555cfdf095a52fdb4d3656777cb", 0x55595659}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090", 0x7b}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d58176", 0x17}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aed", 0x9}], 0x1, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) 965.809246ms ago: executing program 1 (id=4502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x8080000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x3, 0x6}, {0x1, 0x8000000, 0x0, 0xd, 0x8, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x5000, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x6}, {0x5000, 0x8000000, 0x9, 0xc, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x3, 0x43, 0x7, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0xd000, 0x0, 0x2, 0x0, 0xdddd1000, [0x5, 0x3, 0x10a, 0x7]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8, 0x39b, 0x8, 0x1}, 0xb4a9, 0x1, 0x2, 0x40, 0x80, 0xb, 0x5, 0x11, 0x4, 0xf5, {0x0, 0xc2dd, 0x8, 0x2, 0x3, 0xf1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff1}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) getpgid(0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) syz_init_net_socket$ax25(0x3, 0x5, 0xca) 219.085091ms ago: executing program 2 (id=4503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r1, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 150.39649ms ago: executing program 1 (id=4504): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf5, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff02000000000000"], 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f18", 0x85}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 0s ago: executing program 2 (id=4505): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r5, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xce\x82\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x04\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\xd8\x00\x00\x00\x00\x00\x00\x00\x1b\xcb\xfc6\xba\xde44m\x96#\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xdb\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r4, 0x0, 0x480c4) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xde0, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0xdaa, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x6, '\x00', @private1, [{0x5, 0xd, "52811c8f7eefb435b3fcbd906282e8dcc4436572645e443db860c149c04bcefadad96545eeae73819162fe2099e06d52c1e95acc597cfea679351e8fe58afb31e3076c9074c81020a1aec96e31fde771cad6784b75ad75a7e23b50a17c6f7a4197df2c7a32b4e6d48ac88c"}, {0x19, 0x8, "16198027b1d7011df55036b41e693daaa3a374e951a3bd1e7a794eb3d4a4aea35967f1f412c3f66dc291723df062329c1eef10de42e5015e82a0a0fcfbb4dc10031be4"}, {0x18, 0x19c, "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"}]}}}}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x4, 'lblcr\x00', 0x0, 0x80005, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x64}}, 0x0) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r9, 0x40087543, 0x0) kernel console output (not intermixed with test programs): "syz.0.3915" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1205.407349][T16653] DVB: Unable to find symbol dib7000p_attach() [ 1205.422569][T16653] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1205.532024][T20690] usb 2-1: Using ep0 maxpacket: 8 [ 1205.538294][T20690] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1205.547604][T20690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.562628][T20690] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1205.569883][T20690] pvrusb2: ********** [ 1205.575527][T20690] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1206.017754][T16653] rc_core: IR keymap rc-dib0700-rc5 not found [ 1206.023850][T16653] Registered IR keymap rc-empty [ 1206.027234][T20690] pvrusb2: Important functionality might not be entirely working. [ 1206.054897][T20690] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1206.054973][T16653] dvb-usb: could not initialize remote control. [ 1206.073195][T16653] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1206.103734][T20690] pvrusb2: ********** [ 1206.124517][ T2337] pvrusb2: Invalid write control endpoint [ 1206.408511][T16653] usb 1-1: USB disconnect, device number 90 [ 1206.850801][ T30] audit: type=1400 audit(2000000228.404:5291): avc: denied { map_create } for pid=21007 comm="syz.3.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1206.881996][ T2337] pvrusb2: Invalid write control endpoint [ 1206.888604][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1206.924874][ T30] audit: type=1400 audit(2000000228.541:5292): avc: denied { perfmon } for pid=21007 comm="syz.3.3922" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1206.947061][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1206.947095][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1206.947105][ T2337] pvrusb2: Device being rendered inoperable [ 1206.947830][ T2337] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1206.991510][ T30] audit: type=1400 audit(2000000228.541:5293): avc: denied { prog_run } for pid=21007 comm="syz.3.3922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1207.040367][ T2337] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1207.070912][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1207.092044][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1207.120260][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1207.320789][T18720] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1207.333323][T18720] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1207.817934][ T5862] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1208.104135][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.114596][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1208.130490][ T5862] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1208.139586][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.198235][ T5862] usb 5-1: config 0 descriptor?? [ 1208.619386][ T5862] waterforce 0003:1044:7A4D.0015: item fetching failed at offset 0/1 [ 1208.660572][ T5862] waterforce 0003:1044:7A4D.0015: hid parse failed with -22 [ 1208.676250][ T5862] waterforce 0003:1044:7A4D.0015: probe with driver waterforce failed with error -22 [ 1209.302589][T20690] usb 5-1: USB disconnect, device number 66 [ 1209.432129][T21085] sctp: [Deprecated]: syz.3.3933 (pid 21085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1209.432129][T21085] Use struct sctp_sack_info instead [ 1209.497108][ T30] audit: type=1400 audit(2000000231.648:5294): avc: denied { mount } for pid=21089 comm="syz.3.3936" name="/" dev="pstore" ino=3446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1209.684837][ T30] audit: type=1400 audit(2000000231.837:5295): avc: denied { map_read map_write } for pid=21101 comm="syz.3.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1209.689631][T21104] vlan0: entered promiscuous mode [ 1209.711342][T21104] veth1: entered promiscuous mode [ 1209.717785][T21104] vlan0: left allmulticast mode [ 1209.722851][T21104] veth1: left allmulticast mode [ 1209.745085][T20690] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1209.885557][T20690] usb 5-1: device descriptor read/64, error -71 [ 1209.899557][T21088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1210.190425][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1210.196981][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1210.218538][T20690] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1210.486148][T20690] usb 5-1: device descriptor read/64, error -71 [ 1210.708026][T20690] usb usb5-port1: attempt power cycle [ 1211.219163][T20690] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1211.287417][T20690] usb 5-1: device descriptor read/8, error -71 [ 1211.618576][T20690] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1211.838408][T20690] usb 5-1: device descriptor read/8, error -71 [ 1211.952535][T20690] usb usb5-port1: unable to enumerate USB device [ 1213.674536][T21144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.761882][T21144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.875252][T21145] netlink: 'syz.0.3950': attribute type 4 has an invalid length. [ 1213.883083][T21145] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3950'. [ 1214.052725][ T30] audit: type=1400 audit(2000000236.236:5296): avc: denied { read } for pid=21138 comm="syz.0.3950" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1214.097327][ T30] audit: type=1400 audit(2000000236.236:5297): avc: denied { open } for pid=21138 comm="syz.0.3950" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1214.234753][T21151] QAT: Invalid ioctl 1074328842 [ 1214.306786][ T30] audit: type=1400 audit(2000000236.236:5298): avc: denied { ioctl } for pid=21138 comm="syz.0.3950" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1215.181306][T21166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.277040][T21166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.321194][T21166] binder: BINDER_SET_CONTEXT_MGR already set [ 1215.362218][T21166] binder: 21165:21166 ioctl 4018620d 200000000100 returned -16 [ 1215.637078][T21146] Process accounting resumed [ 1215.670609][T21174] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3957'. [ 1216.610325][T18720] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1217.110060][T21147] delete_channel: no stack [ 1217.184346][T18720] usb 5-1: Using ep0 maxpacket: 16 [ 1217.202915][T18720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1217.231102][T18720] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1217.252704][T18720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.358531][T18720] usb 5-1: Product: syz [ 1217.372160][T18720] usb 5-1: Manufacturer: syz [ 1217.376847][T18720] usb 5-1: SerialNumber: syz [ 1217.586385][T18720] usb 5-1: config 0 descriptor?? [ 1217.668416][T18720] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1217.691357][T18720] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1218.388077][T21186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.467837][T18720] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1218.541917][T18720] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1218.555199][T18720] em28xx 5-1:0.0: board has no eeprom [ 1218.619927][T18720] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1218.629151][T18720] em28xx 5-1:0.0: dvb set to bulk mode. [ 1218.635428][ T5862] em28xx 5-1:0.0: Binding DVB extension [ 1218.635498][T21218] team0: No ports can be present during mode change [ 1218.720812][T18720] usb 5-1: USB disconnect, device number 71 [ 1218.740170][T18720] em28xx 5-1:0.0: Disconnecting em28xx [ 1218.763218][ T5862] em28xx 5-1:0.0: Registering input extension [ 1218.789721][T18720] em28xx 5-1:0.0: Closing input extension [ 1218.833789][T18720] em28xx 5-1:0.0: Freeing device [ 1218.953688][ T5876] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1218.982008][T21228] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1219.604612][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 1219.611711][ T5876] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 1219.620055][ T5876] usb 3-1: config 251 has no interface number 0 [ 1219.626388][ T5876] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1219.636547][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1219.647633][ T5876] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1219.658987][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1219.671008][ T5876] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 1219.682667][ T5876] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1219.696412][ T5876] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.711709][ T5876] usb 3-1: config 251 interface 202 has no altsetting 0 [ 1219.723892][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1219.734676][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.744526][ T5876] usb 3-1: Product: syz [ 1219.748779][ T5876] usb 3-1: Manufacturer: syz [ 1219.763497][ T5876] usb 3-1: SerialNumber: syz [ 1219.770773][T21221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1219.780660][T21221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1220.232631][ T30] audit: type=1400 audit(2000000242.881:5299): avc: denied { create } for pid=21252 comm="syz.3.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1220.437208][ T30] audit: type=1400 audit(2000000242.881:5300): avc: denied { setopt } for pid=21252 comm="syz.3.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1220.466592][ T30] audit: type=1400 audit(2000000242.892:5301): avc: denied { getopt } for pid=21252 comm="syz.3.3983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1220.554224][T21269] Cannot find add_set index 65532 as target [ 1220.881992][T20690] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1220.935253][ T30] audit: type=1400 audit(2000000242.955:5302): avc: denied { execmem } for pid=21220 comm="syz.2.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1220.954713][ T30] audit: type=1400 audit(2000000243.112:5303): avc: denied { ioctl } for pid=21258 comm="syz.4.3985" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1220.996136][ T30] audit: type=1400 audit(2000000243.123:5304): avc: denied { create } for pid=21250 comm="syz.1.3982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1221.111497][T20690] usb 5-1: Using ep0 maxpacket: 16 [ 1221.121830][T20690] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1221.130440][ T30] audit: type=1400 audit(2000000243.123:5305): avc: denied { ioctl } for pid=21250 comm="syz.1.3982" path="socket:[75162]" dev="sockfs" ino=75162 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1221.174440][T20690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.185522][T20690] usb 5-1: config 0 has no interface number 0 [ 1221.196663][T20690] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1221.206729][T21271] openvswitch: netlink: EtherType 0 is less than min 600 [ 1221.216256][T21271] /dev/nullb0: Can't lookup blockdev [ 1221.222796][ T30] audit: type=1400 audit(2000000243.910:5306): avc: denied { create } for pid=21270 comm="syz.3.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1221.251615][ T30] audit: type=1400 audit(2000000243.942:5307): avc: denied { write } for pid=21270 comm="syz.3.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1221.263768][T20690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.284792][ T30] audit: type=1400 audit(2000000243.942:5308): avc: denied { create } for pid=21270 comm="syz.3.3986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1221.334990][T20690] usb 5-1: Product: syz [ 1221.347930][T20690] usb 5-1: Manufacturer: syz [ 1221.358988][T20690] usb 5-1: SerialNumber: syz [ 1221.380431][T20690] usb 5-1: config 0 descriptor?? [ 1221.413328][T20690] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1221.433234][T20690] uvcvideo 5-1:0.105: No valid video chain found. [ 1221.665711][T21259] binder: 21258:21259 ioctl c00c6211 0 returned -14 [ 1221.715242][T21276] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 1221.780047][ T5862] usb 5-1: USB disconnect, device number 72 [ 1223.692022][T21276] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1223.738813][ T5876] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1223.794504][ T5876] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 1223.839565][ T5876] usb 3-1: USB disconnect, device number 67 [ 1225.032444][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1225.032459][ T30] audit: type=1400 audit(2000000247.952:5345): avc: denied { create } for pid=21325 comm="syz.4.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1225.109733][ T30] audit: type=1400 audit(2000000248.025:5346): avc: denied { bind } for pid=21325 comm="syz.4.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1225.219087][ T30] audit: type=1400 audit(2000000248.036:5347): avc: denied { name_bind } for pid=21325 comm="syz.4.3998" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1225.284515][T21338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1225.359009][ T30] audit: type=1400 audit(2000000248.036:5348): avc: denied { node_bind } for pid=21325 comm="syz.4.3998" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1225.406218][T21345] afs: Unknown parameter '0x0000000000000000' [ 1225.422127][ T30] audit: type=1400 audit(2000000248.036:5349): avc: denied { write } for pid=21325 comm="syz.4.3998" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1225.488047][ T30] audit: type=1400 audit(2000000248.036:5350): avc: denied { connect } for pid=21325 comm="syz.4.3998" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1225.523357][T21351] netlink: 'syz.1.4005': attribute type 1 has an invalid length. [ 1226.068860][ T30] audit: type=1400 audit(2000000248.036:5351): avc: denied { name_connect } for pid=21325 comm="syz.4.3998" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1226.092931][ T30] audit: type=1400 audit(2000000248.141:5352): avc: denied { create } for pid=21333 comm="syz.3.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1226.116949][ T30] audit: type=1400 audit(2000000248.141:5353): avc: denied { setopt } for pid=21333 comm="syz.3.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1226.146905][ T30] audit: type=1400 audit(2000000248.141:5354): avc: denied { read write } for pid=21334 comm="syz.2.3999" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1227.695145][T21394] syzkaller1: entered promiscuous mode [ 1227.715963][T21394] syzkaller1: entered allmulticast mode [ 1227.864047][T21402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.955767][T21402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.881875][ T1206] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1229.068068][T21414] xt_hashlimit: size too large, truncated to 1048576 [ 1229.606584][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 1229.622708][ T1206] usb 5-1: config 0 has no interfaces? [ 1229.628196][ T1206] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1229.639741][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.656352][ T1206] usb 5-1: config 0 descriptor?? [ 1229.745509][ T5133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1229.767911][ T5133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1229.781168][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1229.796884][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1229.804859][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.807276][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1229.807288][ T30] audit: type=1400 audit(2000000252.959:5397): avc: denied { mount } for pid=21420 comm="syz.2.4020" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1229.997831][ T30] audit: type=1400 audit(2000000253.033:5398): avc: denied { mounton } for pid=21418 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1230.033934][ T1206] usb 5-1: USB disconnect, device number 73 [ 1230.040073][ T30] audit: type=1400 audit(2000000253.054:5399): avc: denied { read write } for pid=21399 comm="syz.4.4015" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1230.068080][ T30] audit: type=1400 audit(2000000253.054:5400): avc: denied { open } for pid=21399 comm="syz.4.4015" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1230.106667][ T30] audit: type=1400 audit(2000000253.054:5401): avc: denied { read write } for pid=21399 comm="syz.4.4015" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1230.221670][ T30] audit: type=1400 audit(2000000253.054:5402): avc: denied { open } for pid=21399 comm="syz.4.4015" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1230.247342][ T30] audit: type=1400 audit(2000000253.064:5403): avc: denied { ioctl } for pid=21399 comm="syz.4.4015" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1230.292859][ T30] audit: type=1400 audit(2000000253.075:5404): avc: denied { unmount } for pid=21420 comm="syz.2.4020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1230.677857][ T30] audit: type=1400 audit(2000000253.085:5405): avc: denied { ioctl } for pid=21420 comm="syz.2.4020" path="socket:[75497]" dev="sockfs" ino=75497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1230.823921][ T30] audit: type=1400 audit(2000000253.652:5406): avc: denied { setopt } for pid=21428 comm="syz.0.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1231.657944][T21418] chnl_net:caif_netlink_parms(): no params data found [ 1231.738958][T21457] futex_wake_op: syz.1.4031 tries to shift op by 32; fix this program [ 1231.781270][T21457] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1231.792758][T21457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4031'. [ 1231.823259][T16317] Bluetooth: hci1: command tx timeout [ 1231.859548][T21418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.876203][T21418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.898440][T21418] bridge_slave_0: entered allmulticast mode [ 1231.967916][T20690] libceph: connect (1)[c::]:6789 error -13 [ 1231.986944][T21418] bridge_slave_0: entered promiscuous mode [ 1232.001384][T21418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.009937][T20690] libceph: mon0 (1)[c::]:6789 connect error [ 1232.028931][T21418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.132480][T21418] bridge_slave_1: entered allmulticast mode [ 1232.139970][T21418] bridge_slave_1: entered promiscuous mode [ 1232.184562][T21418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.228226][T21418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.270893][ T5876] libceph: connect (1)[c::]:6789 error -13 [ 1232.277861][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1232.288320][T21418] team0: Port device team_slave_0 added [ 1232.301976][T21418] team0: Port device team_slave_1 added [ 1232.356953][T21418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.372351][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.430882][T21418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.463073][T21418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.475642][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.502490][T21418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.514823][T21466] ceph: No mds server is up or the cluster is laggy [ 1232.604955][T21418] hsr_slave_0: entered promiscuous mode [ 1232.611325][T21418] hsr_slave_1: entered promiscuous mode [ 1232.617803][T21418] debugfs: 'hsr0' already exists in 'hsr' [ 1232.632158][T21418] Cannot create hsr debugfs directory [ 1232.800057][T21418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1232.817384][T21418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.955308][T21480] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1233.602337][T21418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.632915][T21418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.804021][T16317] Bluetooth: hci1: command tx timeout [ 1233.824262][T21418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1233.836598][T21418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.479692][T21418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1234.511172][T21418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.578502][T21497] syz_tun: entered allmulticast mode [ 1234.773215][T21418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1234.774544][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1234.774556][ T30] audit: type=1400 audit(2000000258.177:5424): avc: denied { set_context_mgr } for pid=21501 comm="syz.1.4040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1234.808923][T21418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1234.831108][T21418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1234.846291][ T30] audit: type=1400 audit(2000000258.229:5425): avc: denied { mounton } for pid=21501 comm="syz.1.4040" path="/proc/810/task" dev="proc" ino=77829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1234.847126][T21418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1234.909001][ T30] audit: type=1400 audit(2000000258.229:5426): avc: denied { mount } for pid=21501 comm="syz.1.4040" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1235.035303][T21418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1235.088600][T21418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1235.151204][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.158351][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.170332][T16135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.177479][T16135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.271078][ T30] audit: type=1400 audit(2000000258.660:5427): avc: denied { append } for pid=21513 comm="syz.1.4041" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1235.435184][ T30] audit: type=1400 audit(2000000258.691:5428): avc: denied { create } for pid=21513 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1235.587549][ T30] audit: type=1400 audit(2000000258.691:5429): avc: denied { write } for pid=21513 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1235.684446][ T30] audit: type=1400 audit(2000000258.691:5430): avc: denied { nlmsg_write } for pid=21513 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1235.729910][ T30] audit: type=1400 audit(2000000258.754:5431): avc: denied { shutdown } for pid=21513 comm="syz.1.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1235.785211][T16317] Bluetooth: hci1: command tx timeout [ 1235.954970][T21535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.957080][ T5862] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1235.978191][T21535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.995498][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.014236][T21535] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1236.045440][T21418] veth0_vlan: entered promiscuous mode [ 1236.058282][T21418] veth1_vlan: entered promiscuous mode [ 1236.072133][ T30] audit: type=1400 audit(2000000259.542:5432): avc: denied { map_read map_write } for pid=21536 comm="syz.1.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1236.085098][T21418] veth0_macvtap: entered promiscuous mode [ 1236.103361][T21418] veth1_macvtap: entered promiscuous mode [ 1236.151400][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 1236.175644][T21418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.211733][ T5862] usb 5-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1236.294671][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 125, changing to 7 [ 1236.305794][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 42438, setting to 1024 [ 1236.317940][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1236.320298][T21418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1236.379096][ T30] audit: type=1400 audit(2000000259.867:5433): avc: denied { listen } for pid=21536 comm="syz.1.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1236.458279][ T5862] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1236.469215][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.477574][T16144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.479043][ T5862] usb 5-1: Product: syz [ 1236.513256][T16144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.536019][T16144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.536974][ T5862] usb 5-1: Manufacturer: syz [ 1236.568071][T16144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1236.568464][ T5862] usb 5-1: SerialNumber: syz [ 1236.599282][ T5862] usb 5-1: config 0 descriptor?? [ 1236.617925][ T5862] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1236.626456][ T5862] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1236.698649][T21495] syz_tun: left allmulticast mode [ 1236.734164][T16126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.743936][T16126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.758464][ T5862] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1236.799587][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.808824][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.809228][ T5862] usb 5-1: USB disconnect, device number 74 [ 1237.157191][ T5862] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1237.348506][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1237.490104][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.518813][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.529418][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.886324][T16317] Bluetooth: hci1: command tx timeout [ 1237.891034][T21547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.920267][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1237.962117][T21547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.979090][T21563] 9p: Bad value for 'rfdno' [ 1238.023442][T21547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.085268][T21567] netlink: 620 bytes leftover after parsing attributes in process `syz.4.4050'. [ 1238.178921][T21547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.219847][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1238.350585][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.367426][ T5862] usb 4-1: usb_control_msg returned -32 [ 1238.373005][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 1238.424641][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.269582][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64140 sclass=netlink_route_socket pid=21582 comm=syz.1.4054 [ 1239.352936][T21541] usb 4-1: USB disconnect, device number 75 [ 1239.384804][T21584] ip_vti0: entered promiscuous mode [ 1239.396920][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4055'. [ 1239.549382][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1239.549396][ T30] audit: type=1400 audit(2000000263.195:5454): avc: denied { write } for pid=21585 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1239.599555][ T30] audit: type=1400 audit(2000000263.195:5455): avc: denied { read } for pid=21585 comm="syz.1.4057" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1239.727021][T20690] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1239.735036][ T30] audit: type=1400 audit(2000000263.195:5456): avc: denied { open } for pid=21585 comm="syz.1.4057" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1239.777925][ T30] audit: type=1400 audit(2000000263.195:5457): avc: denied { ioctl } for pid=21585 comm="syz.1.4057" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1239.822106][ T30] audit: type=1400 audit(2000000263.195:5458): avc: denied { kexec_image_load } for pid=21585 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1239.988711][ T30] audit: type=1400 audit(2000000263.195:5459): avc: denied { ioctl } for pid=21585 comm="syz.1.4057" path="socket:[77088]" dev="sockfs" ino=77088 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1240.155684][T20690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1240.192337][T20690] usb 5-1: not running at top speed; connect to a high speed hub [ 1240.202611][ T30] audit: type=1400 audit(2000000263.237:5460): avc: denied { read append } for pid=21589 comm="syz.1.4058" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1240.300575][ T30] audit: type=1400 audit(2000000263.237:5461): avc: denied { open } for pid=21589 comm="syz.1.4058" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1240.305939][T20690] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1240.331946][ T30] audit: type=1400 audit(2000000263.247:5462): avc: denied { write } for pid=21589 comm="syz.1.4058" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1240.408101][T20690] usb 5-1: can't read configurations, error -22 [ 1240.421421][ T30] audit: type=1400 audit(2000000263.415:5463): avc: denied { sqpoll } for pid=21587 comm="syz.0.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1240.469372][T21608] netlink: 620 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1240.597181][T20690] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1240.750825][T20690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1240.761336][T20690] usb 5-1: not running at top speed; connect to a high speed hub [ 1240.790720][T20690] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1240.818449][T20690] usb 5-1: can't read configurations, error -22 [ 1240.845402][T20690] usb usb5-port1: attempt power cycle [ 1241.319506][T18720] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1241.500838][T18720] usb 4-1: Using ep0 maxpacket: 16 [ 1241.509049][T18720] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1241.519612][T20690] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1241.519913][T18720] usb 4-1: config 251 has no interface number 0 [ 1241.540765][T20690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1241.558812][T18720] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1241.569455][T18720] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1241.586413][T18720] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1241.598179][T18720] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1241.599533][T20690] usb 5-1: not running at top speed; connect to a high speed hub [ 1241.622143][T21621] netlink: 'syz.2.4066': attribute type 33 has an invalid length. [ 1241.652033][T18720] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 1241.668903][T21621] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1241.682131][T18720] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1241.707062][T20690] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1241.710231][T18720] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.719769][T20690] usb 5-1: can't read configurations, error -22 [ 1241.739726][T21621] netlink: 'syz.2.4066': attribute type 5 has an invalid length. [ 1241.798694][T18720] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1241.818616][T18720] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1241.830633][T18720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.839933][T18720] usb 4-1: Product: syz [ 1241.844218][T18720] usb 4-1: Manufacturer: syz [ 1241.848924][T18720] usb 4-1: SerialNumber: syz [ 1241.855653][T21615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1241.863314][T21615] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1241.919947][T20690] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1241.942010][T20690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1241.950957][T20690] usb 5-1: not running at top speed; connect to a high speed hub [ 1241.960430][T20690] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1241.968734][T20690] usb 5-1: can't read configurations, error -22 [ 1241.985502][T20690] usb usb5-port1: unable to enumerate USB device [ 1243.800024][T18720] cxacru 4-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1243.814749][T18720] cxacru 4-1:251.202: probe with driver cxacru failed with error -22 [ 1243.994349][T18720] usb 4-1: USB disconnect, device number 76 [ 1245.774124][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 1246.590133][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1246.590149][ T30] audit: type=1400 audit(2000000270.585:5479): avc: denied { mount } for pid=21677 comm="syz.1.4082" name="/" dev="hugetlbfs" ino=77313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1247.034088][T21687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4084'. [ 1247.616171][T21678] netlink: 'syz.1.4082': attribute type 7 has an invalid length. [ 1247.623913][T21678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1249.701198][ T30] audit: type=1400 audit(2000000273.304:5480): avc: denied { create } for pid=21693 comm="syz.4.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1249.795766][ T30] audit: type=1400 audit(2000000273.315:5481): avc: denied { write } for pid=21693 comm="syz.4.4087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1249.929181][T21711] sp0: Synchronizing with TNC [ 1250.155158][ T30] audit: type=1400 audit(2000000274.291:5482): avc: denied { search } for pid=5476 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.245895][ T30] audit: type=1400 audit(2000000274.291:5483): avc: denied { search } for pid=5476 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.343433][ T30] audit: type=1400 audit(2000000274.291:5484): avc: denied { search } for pid=5476 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1250.432565][ T30] audit: type=1400 audit(2000000274.386:5485): avc: denied { read } for pid=5476 comm="dhcpcd" name="n149" dev="tmpfs" ino=10975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.044786][ T30] audit: type=1400 audit(2000000274.386:5486): avc: denied { open } for pid=5476 comm="dhcpcd" path="/run/udev/data/n149" dev="tmpfs" ino=10975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.822604][T21707] [U] è [ 1251.839325][ T30] audit: type=1400 audit(2000000274.386:5487): avc: denied { getattr } for pid=5476 comm="dhcpcd" path="/run/udev/data/n149" dev="tmpfs" ino=10975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.940195][ T30] audit: type=1400 audit(2000000274.669:5488): avc: denied { create } for pid=21720 comm="syz.2.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1252.007100][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1252.030022][ T30] audit: type=1400 audit(2000000274.785:5489): avc: denied { write } for pid=21720 comm="syz.2.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1252.079273][ T30] audit: type=1400 audit(2000000274.869:5490): avc: denied { bind } for pid=21718 comm="syz.1.4095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1252.134020][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'. [ 1252.145779][T21735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4100'. [ 1252.155953][ T30] audit: type=1400 audit(2000000274.879:5491): avc: denied { read write } for pid=21718 comm="syz.1.4095" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1252.189136][T21736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.202144][ T30] audit: type=1400 audit(2000000274.879:5492): avc: denied { open } for pid=21718 comm="syz.1.4095" path="/dev/sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1252.239741][T21736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.293918][ T30] audit: type=1400 audit(2000000276.559:5493): avc: denied { create } for pid=21731 comm="syz.1.4099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1252.365561][T21732] bond0: (slave bond_slave_1): Releasing backup interface [ 1252.385913][ T30] audit: type=1400 audit(2000000276.569:5494): avc: denied { ioctl } for pid=21731 comm="syz.1.4099" path="socket:[77402]" dev="sockfs" ino=77402 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1253.573236][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1254.518777][T21749] xt_CT: No such helper "snmp_trap" [ 1254.666511][T21759] fuse: Bad value for 'fd' [ 1254.676996][ T30] audit: type=1400 audit(2000000279.078:5495): avc: denied { setopt } for pid=21758 comm="syz.4.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1254.735067][ T30] audit: type=1400 audit(2000000279.078:5496): avc: denied { ioctl } for pid=21758 comm="syz.4.4104" path="socket:[78728]" dev="sockfs" ino=78728 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1254.833184][T21766] tipc: Started in network mode [ 1254.838114][T21766] tipc: Node identity 7f000001, cluster identity 4711 [ 1254.846082][T21766] tipc: Enabled bearer , priority 10 [ 1255.557571][T18720] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1255.761982][T18720] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1255.776389][T18720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.801322][T18720] usb 5-1: config 0 descriptor?? [ 1255.912934][ T5876] tipc: Node number set to 2130706433 [ 1255.934918][T21796] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 1255.942282][ T5862] IPVS: starting estimator thread 0... [ 1256.065464][T21797] IPVS: using max 42 ests per chain, 100800 per kthread [ 1256.255520][T21804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21804 comm=syz.4.4106 [ 1256.361177][T21804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.507679][T21804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.789304][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1256.789333][ T30] audit: type=1400 audit(2000000281.293:5513): avc: denied { remove_name } for pid=21814 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=11030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.912388][T18720] ath6kl: Failed to submit usb control message: -110 [ 1256.920794][T18720] ath6kl: unable to send the bmi data to the device: -110 [ 1256.951147][ T30] audit: type=1400 audit(2000000281.325:5514): avc: denied { unlink } for pid=21814 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=11030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1256.997472][T21816] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1257.012676][T21816] SELinux: failed to load policy [ 1257.037991][T18720] ath6kl: Unable to send get target info: -110 [ 1257.126896][ T30] audit: type=1400 audit(2000000281.356:5515): avc: denied { write } for pid=21811 comm="syz.1.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1257.252074][ T30] audit: type=1400 audit(2000000281.409:5516): avc: denied { name_bind } for pid=21811 comm="syz.1.4112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1257.252466][T18720] ath6kl: Failed to init ath6kl core: -110 [ 1257.338118][ T30] audit: type=1400 audit(2000000281.440:5517): avc: denied { load_policy } for pid=21813 comm="syz.3.4113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1257.532765][T18720] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1258.002563][T18720] usb 5-1: USB disconnect, device number 79 [ 1258.256457][ T30] audit: type=1400 audit(2000000282.816:5518): avc: denied { execute } for pid=21830 comm="syz.2.4115" name="file1" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1258.355813][ T30] audit: type=1400 audit(2000000282.816:5519): avc: denied { execute_no_trans } for pid=21830 comm="syz.2.4115" path="/238/file1" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1258.466159][T21838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1258.802033][T21845] vcan0: tx drop: invalid da for name 0x000000000000fffd [ 1259.211072][ T30] audit: type=1400 audit(2000000283.393:5520): avc: denied { create } for pid=21842 comm="syz.4.4117" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1259.254118][ T30] audit: type=1400 audit(2000000283.393:5521): avc: denied { bind } for pid=21842 comm="syz.4.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1259.316091][ T30] audit: type=1400 audit(2000000283.939:5522): avc: denied { read write } for pid=21847 comm="syz.0.4118" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1259.990099][ T5876] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1260.208903][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 1260.506455][T21857] overlayfs: failed to clone upperpath [ 1260.599654][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1260.626943][ T5876] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1260.658599][ T5876] usb 4-1: can't read configurations, error -71 [ 1262.587425][T21900] 9pnet_fd: p9_fd_create_unix (21900): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1263.157412][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1263.157430][ T30] audit: type=1400 audit(2000000287.613:5526): avc: denied { block_suspend } for pid=21890 comm="syz.3.4130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1263.574865][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1265.806248][ T30] audit: type=1400 audit(2000000290.752:5527): avc: denied { mount } for pid=21929 comm="syz.0.4137" name="/" dev="ramfs" ino=78943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1265.932882][ T30] audit: type=1400 audit(2000000290.847:5528): avc: denied { getopt } for pid=21924 comm="syz.4.4136" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1266.933879][ T980] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1267.481470][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1267.942894][ T30] audit: type=1400 audit(2000000292.841:5529): avc: denied { write } for pid=21941 comm="syz.1.4140" name="netstat" dev="proc" ino=4026532921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1268.011902][ T980] usb 5-1: config 6 has an invalid interface number: 158 but max is 0 [ 1268.020513][ T980] usb 5-1: config 6 has no interface number 0 [ 1268.034336][T21945] FAULT_INJECTION: forcing a failure. [ 1268.034336][T21945] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.046970][T21945] CPU: 1 UID: 0 PID: 21945 Comm: syz.1.4140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1268.046997][T21945] Tainted: [L]=SOFTLOCKUP [ 1268.047003][T21945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1268.047014][T21945] Call Trace: [ 1268.047020][T21945] [ 1268.047027][T21945] dump_stack_lvl+0x100/0x190 [ 1268.047056][T21945] should_fail_ex.cold+0x5/0xa [ 1268.047076][T21945] should_failslab+0xc2/0x120 [ 1268.047099][T21945] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1268.047120][T21945] __kmalloc_noprof+0xf6/0x9c0 [ 1268.047145][T21945] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1268.047163][T21945] tomoyo_realpath_from_path+0xb6/0x690 [ 1268.047189][T21945] tomoyo_path_number_perm+0x23c/0x580 [ 1268.047216][T21945] ? tomoyo_path_number_perm+0x22e/0x580 [ 1268.047245][T21945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1268.047271][T21945] ? preempt_schedule_thunk+0x16/0x30 [ 1268.047316][T21945] ? find_held_lock+0x2b/0x80 [ 1268.047338][T21945] ? hook_file_ioctl_common+0x146/0x410 [ 1268.047360][T21945] ? __fget_files+0x215/0x3d0 [ 1268.047386][T21945] ? __fget_files+0x21f/0x3d0 [ 1268.047411][T21945] security_file_ioctl+0xd3/0x230 [ 1268.047433][T21945] __x64_sys_ioctl+0xb7/0x210 [ 1268.047453][T21945] do_syscall_64+0xc9/0xf80 [ 1268.047476][T21945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.047494][T21945] RIP: 0033:0x7fba9e99aeb9 [ 1268.047508][T21945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.047524][T21945] RSP: 002b:00007fba9f80b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.047541][T21945] RAX: ffffffffffffffda RBX: 00007fba9ec16180 RCX: 00007fba9e99aeb9 [ 1268.047553][T21945] RDX: 00002000000000c0 RSI: 00000000c0205647 RDI: 0000000000000009 [ 1268.047564][T21945] RBP: 00007fba9f80b090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.047574][T21945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.047585][T21945] R13: 00007fba9ec16218 R14: 00007fba9ec16180 R15: 00007ffcc1b2c4b8 [ 1268.047610][T21945] [ 1268.047636][T21945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1268.262140][ T980] usb 5-1: config 6 interface 158 has no altsetting 0 [ 1268.307933][ T980] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 1268.317670][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.331130][ T30] audit: type=1400 audit(2000000293.335:5530): avc: denied { create } for pid=21937 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1268.355285][ T980] usb 5-1: Product: syz [ 1268.362836][ T980] usb 5-1: Manufacturer: syz [ 1268.371966][ T980] usb 5-1: SerialNumber: syz [ 1268.440739][T21949] bridge0: port 3(gretap0) entered blocking state [ 1268.447207][T21949] bridge0: port 3(gretap0) entered disabled state [ 1268.453754][T21949] gretap0: entered allmulticast mode [ 1268.459999][T21949] gretap0: entered promiscuous mode [ 1268.569061][ T980] rtsx_usb 5-1:6.158: probe with driver rtsx_usb failed with error -22 [ 1268.604780][ T980] usb 5-1: USB disconnect, device number 80 [ 1268.635422][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.644457][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.825494][ T30] audit: type=1400 audit(2000000293.923:5531): avc: denied { mounton } for pid=21963 comm="syz.4.4145" path="/214/file0" dev="tmpfs" ino=1152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1268.899562][ T30] audit: type=1400 audit(2000000293.996:5532): avc: denied { ioctl } for pid=21965 comm="syz.1.4146" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1268.985278][T21974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.995873][T21974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.163954][ T30] audit: type=1804 audit(2000000294.269:5533): pid=21977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4149" name="/newroot/215/file0" dev="fuse" ino=1 res=1 errno=0 [ 1269.257095][ T30] audit: type=1400 audit(2000000294.374:5534): avc: denied { connect } for pid=21987 comm="syz.2.4151" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1269.471867][ T30] audit: type=1400 audit(2000000294.605:5535): avc: denied { ioctl } for pid=21991 comm="syz.3.4154" path="socket:[79927]" dev="sockfs" ino=79927 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1269.520458][T22000] netlink: 'syz.1.4156': attribute type 1 has an invalid length. [ 1269.545683][T22000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1269.557478][T22000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1269.596592][T22000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1269.634880][T22000] bond4: (slave geneve2): making interface the new active one [ 1269.711310][T22000] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1269.973979][T16135] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1269.984751][T16135] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1269.995694][T16135] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1270.004740][T16135] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1270.077575][T22014] IPVS: set_ctl: invalid protocol: 0 172.20.20.46:20002 [ 1270.085339][T22015] IPVS: set_ctl: invalid protocol: 0 172.20.20.46:20002 [ 1270.249183][ T980] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1270.391772][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 1270.407991][ T980] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1270.420646][ T980] usb 5-1: config 0 has no interface number 0 [ 1270.429939][ T980] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1270.438772][ T980] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1270.448239][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.456424][ T980] usb 5-1: Product: syz [ 1270.460882][ T980] usb 5-1: Manufacturer: syz [ 1270.465480][ T980] usb 5-1: SerialNumber: syz [ 1270.490405][ T980] usb 5-1: config 0 descriptor?? [ 1270.499672][ T980] smsc75xx v1.0.0 [ 1270.890369][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1270.927307][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1270.953993][ T980] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1270.983973][ T980] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1272.297979][ T30] audit: type=1400 audit(2000000297.513:5536): avc: denied { accept } for pid=22009 comm="syz.4.4159" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1272.541105][T22063] netlink: 'syz.1.4172': attribute type 21 has an invalid length. [ 1272.676819][ T30] audit: type=1400 audit(2000000297.544:5537): avc: denied { watch watch_reads } for pid=22055 comm="syz.1.4172" path="/262/file0" dev="tmpfs" ino=1391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1272.762716][ T30] audit: type=1400 audit(2000000297.544:5538): avc: denied { watch_mount watch_reads } for pid=22055 comm="syz.1.4172" path="/262" dev="tmpfs" ino=1386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1272.898772][ T30] audit: type=1400 audit(2000000298.038:5539): avc: denied { write } for pid=22059 comm="syz.0.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1272.951825][ T30] audit: type=1400 audit(2000000298.038:5540): avc: denied { connect } for pid=22059 comm="syz.0.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1274.239177][T22073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22073 comm=syz.0.4176 [ 1274.269208][ T5862] usb 5-1: USB disconnect, device number 81 [ 1274.328466][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1274.424949][T22081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4178'. [ 1275.081290][ T30] audit: type=1400 audit(2000000300.494:5541): avc: denied { mounton } for pid=22092 comm="syz.4.4183" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1275.114748][T22093] tmpfs: Bad value for 'mpol' [ 1275.178769][ T30] audit: type=1400 audit(2000000300.599:5542): avc: denied { mount } for pid=22092 comm="syz.4.4183" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1275.631190][T21541] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1276.183847][T21541] usb 4-1: device descriptor read/64, error -71 [ 1276.265985][T22128] overlayfs: failed to clone upperpath [ 1276.436948][T21541] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 1276.679545][T22138] overlayfs: failed to resolve './file1': -40 [ 1276.766514][T21541] usb 4-1: device descriptor read/64, error -71 [ 1276.879040][T21541] usb usb4-port1: attempt power cycle [ 1277.298995][T21541] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 1277.348814][T21541] usb 4-1: device descriptor read/8, error -71 [ 1278.183987][T21541] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1278.207071][ T30] audit: type=1400 audit(2000000303.770:5543): avc: denied { bind } for pid=22154 comm="syz.1.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1278.251298][T21541] usb 4-1: device descriptor read/8, error -71 [ 1278.269019][ T30] audit: type=1400 audit(2000000303.822:5544): avc: denied { listen } for pid=22154 comm="syz.1.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1278.326599][ T30] audit: type=1400 audit(2000000303.822:5545): avc: denied { connect } for pid=22154 comm="syz.1.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1278.357548][T22158] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 1278.362784][T22158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.363810][T22158] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1278.374278][T22158] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 1278.374289][T22158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4201'. [ 1278.374303][T22158] batadv0: entered promiscuous mode [ 1278.374312][T22158] batadv0: entered allmulticast mode [ 1278.384830][T21541] usb usb4-port1: unable to enumerate USB device [ 1278.403487][T22158] bond0: (slave batadv0): Releasing backup interface [ 1278.468764][T22158] bridge0: port 1(batadv0) entered blocking state [ 1278.468853][T22158] bridge0: port 1(batadv0) entered disabled state [ 1278.964304][T16135] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1278.973929][T16135] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1279.781085][T22181] NFSD: Failed to start, no listeners configured. [ 1280.155586][ T30] audit: type=1400 audit(2000000305.817:5546): avc: denied { write } for pid=22187 comm="syz.1.4208" path="socket:[79410]" dev="sockfs" ino=79410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1281.007589][ T30] audit: type=1400 audit(2000000306.709:5547): avc: denied { accept } for pid=22199 comm="syz.2.4214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1281.441567][ T5862] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1281.705891][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 1281.713415][ T5862] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1281.735921][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.748629][ T5862] usb 5-1: config 0 descriptor?? [ 1281.767475][ T5862] as10x_usb: device has been detected [ 1281.782246][ T5862] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1281.813704][ T5862] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1281.936451][ T30] audit: type=1400 audit(2000000307.685:5548): avc: denied { firmware_load } for pid=5862 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1281.962597][ T5862] as10x_usb: error during firmware upload part1 [ 1281.969714][ T5862] Registered device nBox DVB-T Dongle [ 1282.046521][ T5862] usb 5-1: USB disconnect, device number 82 [ 1282.062096][ T30] audit: type=1400 audit(2000000307.790:5549): avc: denied { ioctl } for pid=22208 comm="syz.4.4216" path="/dev/sg0" dev="devtmpfs" ino=777 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1282.151415][ T5862] Unregistered device nBox DVB-T Dongle [ 1282.161519][ T5862] as10x_usb: device has been disconnected [ 1283.383111][T22245] ipip0: entered promiscuous mode [ 1284.413972][T22262] mkiss: ax0: crc mode is auto. [ 1284.498022][T22263] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4229'. [ 1284.729300][ T30] audit: type=1400 audit(2000000310.373:5550): avc: denied { bind } for pid=22261 comm="syz.4.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1284.821454][T22265] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1285.347246][ T5862] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1285.606801][ T5862] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1285.620671][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.638561][ T5862] usb 4-1: config 0 has no interface number 0 [ 1285.673417][ T5862] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1285.709270][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.717319][ T5862] usb 4-1: Product: syz [ 1285.738269][ T5862] usb 4-1: Manufacturer: syz [ 1285.747164][ T5862] usb 4-1: SerialNumber: syz [ 1285.758302][ T5862] usb 4-1: config 0 descriptor?? [ 1285.778310][ T5862] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 1285.784696][ T5862] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 1285.866416][ T30] audit: type=1400 audit(2000000311.811:5551): avc: denied { remount } for pid=22284 comm="syz.2.4236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1286.240687][T22301] syz.3.4233: attempt to access beyond end of device [ 1286.240687][T22301] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 1286.274899][ T30] audit: type=1400 audit(2000000312.231:5552): avc: denied { mount } for pid=22272 comm="syz.3.4233" name="/" dev="autofs" ino=80404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1287.287169][ T30] audit: type=1400 audit(2000000313.302:5553): avc: denied { connect } for pid=22306 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1287.329040][T22314] fuse: Unknown parameter '@' [ 1287.612586][ T30] audit: type=1400 audit(2000000313.648:5554): avc: denied { create } for pid=22321 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1287.637628][ T30] audit: type=1400 audit(2000000313.669:5555): avc: denied { connect } for pid=22321 comm="syz.1.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1287.882945][T22322] netlink: 'syz.1.4245': attribute type 1 has an invalid length. [ 1287.884843][T20690] usb 4-1: USB disconnect, device number 83 [ 1287.899943][ T30] audit: type=1400 audit(2000000313.942:5556): avc: denied { unmount } for pid=21418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1287.971558][T22322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1288.008768][T22329] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1288.039395][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4245'. [ 1288.087972][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4245'. [ 1288.104848][T22322] bond5: (slave dummy0): making interface the new active one [ 1288.123223][T22322] dummy0: entered promiscuous mode [ 1288.131036][T22322] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1288.224415][T22337] 9p: Bad value for 'rfdno' [ 1288.334548][T22329] bond5 (unregistering): (slave veth3): Releasing active interface [ 1288.350801][T22329] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1288.363843][T22329] bond5 (unregistering): Released all slaves [ 1288.444823][T22337] ªªªªª»: renamed from veth0_vlan (while UP) [ 1288.509784][ T30] audit: type=1400 audit(2000000314.583:5557): avc: denied { create } for pid=22339 comm="syz.4.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1288.560306][ T30] audit: type=1400 audit(2000000314.625:5558): avc: denied { write } for pid=22339 comm="syz.4.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1289.929108][ T30] audit: type=1400 audit(2000000315.506:5559): avc: denied { setopt } for pid=22355 comm="syz.1.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1290.393717][T22364] netlink: 'syz.3.4257': attribute type 1 has an invalid length. [ 1290.405780][T22364] netlink: 9188 bytes leftover after parsing attributes in process `syz.3.4257'. [ 1290.492211][T16317] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 1291.207661][T22374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1291.574986][ T30] audit: type=1400 audit(2000000317.805:5560): avc: denied { bind } for pid=22376 comm="syz.3.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1291.726346][T22381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.781395][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.792416][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1291.800921][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1291.808719][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1291.816460][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1291.956502][ T30] audit: type=1400 audit(2000000318.204:5561): avc: denied { setopt } for pid=22387 comm="syz.1.4256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1292.946381][T22398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1293.369237][T20690] libceph: connect (1)[c::]:6789 error -13 [ 1293.388422][T20690] libceph: mon0 (1)[c::]:6789 connect error [ 1293.437710][T22397] ceph: No mds server is up or the cluster is laggy [ 1293.786921][ T5133] Bluetooth: hci4: command tx timeout [ 1293.816796][ T30] audit: type=1400 audit(2000000320.147:5562): avc: denied { ioctl } for pid=22412 comm="syz.1.4271" path="socket:[80645]" dev="sockfs" ino=80645 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1294.007648][T22417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4271'. [ 1294.027049][T22417] xt_hashlimit: size too large, truncated to 1048576 [ 1294.633444][T22424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4273'. [ 1294.942420][T22415] mkiss: ax0: crc mode is auto. [ 1295.240297][T22382] chnl_net:caif_netlink_parms(): no params data found [ 1295.274308][T22433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1295.330247][T22382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.339372][T22433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4275'. [ 1295.339852][T22382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.363797][T22382] bridge_slave_0: entered allmulticast mode [ 1295.373226][ T30] audit: type=1400 audit(2000000321.795:5563): avc: denied { create } for pid=22431 comm="syz.4.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1295.398896][T22382] bridge_slave_0: entered promiscuous mode [ 1295.422925][T22382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.457671][T22382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.473778][T22382] bridge_slave_1: entered allmulticast mode [ 1295.488957][T22382] bridge_slave_1: entered promiscuous mode [ 1295.527572][T22382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.543547][T22382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.637013][T22382] team0: Port device team_slave_0 added [ 1295.659996][T22382] team0: Port device team_slave_1 added [ 1295.710016][T22382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.727237][T22382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.767977][ T5133] Bluetooth: hci4: command tx timeout [ 1295.795353][T22382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.823330][T22382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.839851][T22382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.902299][T22382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.938309][T22445] ªªªªªª: renamed from vlan0 (while UP) [ 1295.969682][ T30] audit: type=1400 audit(2000000322.425:5564): avc: denied { ioctl } for pid=22446 comm="syz.1.4280" path="socket:[80713]" dev="sockfs" ino=80713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1296.036404][T22382] hsr_slave_0: entered promiscuous mode [ 1296.042765][T22382] hsr_slave_1: entered promiscuous mode [ 1296.064672][T22382] debugfs: 'hsr0' already exists in 'hsr' [ 1296.070393][T22382] Cannot create hsr debugfs directory [ 1296.225729][ T30] audit: type=1400 audit(2000000322.698:5565): avc: denied { write } for pid=22452 comm="syz.4.4283" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1296.292732][ T30] audit: type=1400 audit(2000000322.698:5566): avc: denied { open } for pid=22452 comm="syz.4.4283" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1296.450482][T22382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1296.466037][T22382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1296.489553][T22382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1296.511115][T22382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1296.695223][T22382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1296.794821][T22382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1296.832184][T16140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.839315][T16140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.252867][T22467] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1297.258316][T16140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.260065][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1297.267007][T16140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.733638][T22382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.740823][ T5133] Bluetooth: hci4: command tx timeout [ 1297.748145][T22479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1297.840314][ T5876] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1298.523957][ T5876] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1298.544883][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.583116][ T5876] usb 5-1: Product: syz [ 1298.587307][ T5876] usb 5-1: Manufacturer: syz [ 1298.617377][ T5876] usb 5-1: SerialNumber: syz [ 1298.637215][ T5876] usb 5-1: config 0 descriptor?? [ 1298.653793][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1298.718915][T22382] veth0_vlan: entered promiscuous mode [ 1298.727980][T22500] SELinux: failed to load policy [ 1298.747371][T22382] veth1_vlan: entered promiscuous mode [ 1298.756562][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1298.782308][T22500] SELinux: failed to load policy [ 1298.795394][T22382] veth0_macvtap: entered promiscuous mode [ 1298.804680][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1298.818049][T22382] veth1_macvtap: entered promiscuous mode [ 1298.837376][T22382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.844831][T22500] SELinux: failed to load policy [ 1298.854651][ T5876] usb 5-1: USB disconnect, device number 83 [ 1298.858424][T22382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.871410][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1298.887643][T22500] SELinux: failed to load policy [ 1298.912170][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.915562][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1298.920892][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.920926][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.920955][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.994366][T22500] SELinux: failed to load policy [ 1299.029840][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.054594][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.065898][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.102855][T22500] SELinux: failed to load policy [ 1299.116328][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.134652][T16144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.144697][T16144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.154182][T22500] SELinux: failed to load policy [ 1299.164032][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.183538][T22500] SELinux: failed to load policy [ 1299.206144][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.231672][T22500] SELinux: failed to load policy [ 1299.245837][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.262258][T22500] SELinux: failed to load policy [ 1299.268554][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.279003][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.289854][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.302596][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.314158][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.324763][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.337824][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.348328][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.358300][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.370436][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.381247][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.391769][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.402299][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.413309][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.423816][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.434437][T22500] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1299.521172][ T78] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1299.637276][T22510] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1299.678640][ T78] usb 6-1: Using ep0 maxpacket: 16 [ 1299.693822][ T78] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1299.723565][ T5133] Bluetooth: hci4: command tx timeout [ 1299.745341][ T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 193, changing to 11 [ 1299.770758][T22512] syz_tun: entered allmulticast mode [ 1299.778400][T22511] syz_tun: left allmulticast mode [ 1299.825020][ T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32904, setting to 1024 [ 1300.361450][ T78] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1300.374126][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.440173][ T78] usb 6-1: Product: syz [ 1300.462008][ T78] usb 6-1: Manufacturer: syz [ 1300.473068][ T78] usb 6-1: SerialNumber: syz [ 1300.494799][ T78] usb 6-1: config 0 descriptor?? [ 1300.534374][ T78] hub 6-1:0.0: bad descriptor, ignoring hub [ 1300.548785][ T78] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1300.583903][ T78] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input79 [ 1300.629286][ T30] audit: type=1400 audit(2000000327.317:5567): avc: denied { read } for pid=5166 comm="acpid" name="mouse1" dev="devtmpfs" ino=4099 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1300.676436][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1300.864527][ T30] audit: type=1400 audit(2000000327.317:5568): avc: denied { open } for pid=5166 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4099 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1300.994207][ T30] audit: type=1400 audit(2000000327.317:5569): avc: denied { ioctl } for pid=5166 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4099 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1301.216333][T22534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4301'. [ 1301.284328][ T5166] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 1301.298933][ T5166] usb 6-1: device reset changed ep0 maxpacket size! [ 1301.310075][ T1206] usb 6-1: USB disconnect, device number 2 [ 1301.387776][T22539] netlink: 'syz.3.4303': attribute type 1 has an invalid length. [ 1301.406018][ T30] audit: type=1400 audit(2000000328.104:5570): avc: denied { create } for pid=22536 comm="syz.3.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1301.426087][T22539] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4303'. [ 1301.474870][ T30] audit: type=1400 audit(2000000328.177:5571): avc: denied { setopt } for pid=22536 comm="syz.3.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1301.674474][T22546] /dev/nullb0: Can't lookup blockdev [ 1301.693433][T22546] /dev/nullb0: Can't lookup blockdev [ 1301.789253][ T1206] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1302.588255][ T1206] usb 6-1: Using ep0 maxpacket: 32 [ 1302.614184][ T1206] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1302.664656][ T1206] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1302.675983][ T1206] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1302.687196][ T1206] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1302.734700][ T1206] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1302.762321][ T1206] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1302.831953][ T1206] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1302.871138][ T1206] usb 6-1: Product: syz [ 1302.878002][T22553] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4307'. [ 1302.893278][ T1206] usb 6-1: Manufacturer: syz [ 1302.902779][ T1206] usb 6-1: SerialNumber: syz [ 1302.928243][ T1206] usb 6-1: config 0 descriptor?? [ 1302.941648][ T1206] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1302.969217][ T1206] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1303.039903][ T30] audit: type=1400 audit(2000000329.847:5572): avc: denied { name_connect } for pid=22556 comm="syz.2.4308" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1303.046615][T22557] netlink: 'syz.2.4308': attribute type 10 has an invalid length. [ 1303.077558][T22557] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1303.412628][ T30] audit: type=1400 audit(2000000330.162:5573): avc: denied { mounton } for pid=22530 comm="syz.5.4300" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1303.757322][ T30] audit: type=1400 audit(2000000330.572:5574): avc: denied { map } for pid=22562 comm="syz.3.4309" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1303.788654][T22566] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1303.826851][ T30] audit: type=1400 audit(2000000330.572:5575): avc: denied { execute } for pid=22562 comm="syz.3.4309" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1304.054094][T22566] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4310'. [ 1304.205159][T22560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.582172][ T1206] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1304.744133][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.758990][ T1206] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 1304.770714][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.784969][ T1206] usb 5-1: config 0 descriptor?? [ 1304.858435][T22579] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1305.290176][T18720] usb 6-1: USB disconnect, device number 3 [ 1305.314383][ T1206] cherry 0003:046A:0023.0016: unbalanced delimiter at end of report description [ 1305.345193][ T1206] cherry 0003:046A:0023.0016: probe with driver cherry failed with error -22 [ 1305.365250][T18720] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1306.031002][ T30] audit: type=1400 audit(2000000332.609:5576): avc: denied { create } for pid=22572 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1306.172754][ T30] audit: type=1400 audit(2000000332.609:5577): avc: denied { connect } for pid=22572 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1306.197314][ T30] audit: type=1400 audit(2000000332.619:5578): avc: denied { connect } for pid=22572 comm="syz.4.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1306.267725][T22600] 9pnet_fd: p9_fd_create_unix (22600): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1306.472693][T22603] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1306.530531][T22605] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1307.331462][ T78] usb 5-1: USB disconnect, device number 84 [ 1307.750736][ T78] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1307.836633][T20690] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1307.906851][ T78] usb 5-1: Using ep0 maxpacket: 16 [ 1308.112548][T20690] usb 6-1: Using ep0 maxpacket: 16 [ 1308.119183][T20690] usb 6-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1308.129857][T20690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 232: 146, using maximum allowed: 30 [ 1308.141141][ T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.151447][ T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1308.162463][T20690] usb 6-1: config 0 interface 0 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 146 [ 1308.177295][ T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 1308.188743][T20690] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1308.195766][ T78] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1308.205974][ T78] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.224032][T20690] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1308.233795][T20690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.243122][T20690] usb 6-1: Product: syz [ 1308.247910][T20690] usb 6-1: Manufacturer: syz [ 1308.252856][ T78] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1308.263136][ T78] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1308.271529][T20690] usb 6-1: SerialNumber: syz [ 1308.278143][ T78] usb 5-1: Manufacturer: syz [ 1308.283537][T20690] usb 6-1: config 0 descriptor?? [ 1308.303433][ T78] usb 5-1: config 0 descriptor?? [ 1308.446422][T18720] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1308.545491][T22615] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1308.588932][T18720] usb 4-1: device descriptor read/64, error -71 [ 1308.637015][T20690] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1308.644495][T20690] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1308.703510][ T78] rc_core: IR keymap rc-hauppauge not found [ 1308.710341][T20690] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 1308.723712][ T78] Registered IR keymap rc-empty [ 1308.733675][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.742622][T20690] usb 6-1: USB disconnect, device number 4 [ 1308.754782][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.800483][ T78] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1308.832439][ T78] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 [ 1308.836584][T18720] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1308.900360][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.923035][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.950817][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.969967][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1308.989374][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.000896][T18720] usb 4-1: device descriptor read/64, error -71 [ 1309.008021][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.015302][T22655] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 1309.023703][T22655] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1309.036603][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.055651][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.074685][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.094167][ T78] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1309.120991][T22656] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4327'. [ 1309.130707][T18720] usb usb4-port1: attempt power cycle [ 1309.132401][ T78] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1309.436534][ T78] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1309.681060][ T78] usb 5-1: USB disconnect, device number 85 [ 1309.744872][T22658] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 1309.835017][T18720] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1309.875227][T18720] usb 4-1: device descriptor read/8, error -71 [ 1309.920223][ T1206] IPVS: starting estimator thread 0... [ 1309.932702][T22667] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1309.940901][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1309.956860][T22667] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1309.970512][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1310.096710][T22668] IPVS: using max 48 ests per chain, 115200 per kthread [ 1310.131735][T18720] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1310.170585][T18720] usb 4-1: device descriptor read/8, error -71 [ 1310.295738][T18720] usb usb4-port1: unable to enumerate USB device [ 1311.903986][ T30] audit: type=1400 audit(2000000339.139:5579): avc: denied { getopt } for pid=22688 comm="syz.5.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1312.018104][T22694] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4345'. [ 1312.163145][T22700] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1312.181437][T22700] VFS: Can't find a romfs filesystem on dev nullb0. [ 1312.181437][T22700] [ 1312.673894][ T30] audit: type=1400 audit(2000000339.822:5580): avc: denied { read } for pid=22695 comm="syz.1.4348" lport=58287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1312.966286][ T30] audit: type=1400 audit(2000000340.231:5581): avc: denied { mount } for pid=22709 comm="syz.4.4351" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1313.304963][ T30] audit: type=1400 audit(2000000340.242:5582): avc: denied { mounton } for pid=22709 comm="syz.4.4351" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1313.614615][ T30] audit: type=1400 audit(2000000340.494:5583): avc: denied { unmount } for pid=17071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1313.688969][T22723] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4356'. [ 1313.848453][T20690] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1313.910454][T22723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1313.942871][T22723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1313.985156][T22723] bond0 (unregistering): Released all slaves [ 1314.027608][T20690] usb 5-1: Using ep0 maxpacket: 32 [ 1314.039851][T20690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.083683][T20690] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1314.093507][T20690] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1314.102867][T20690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.115136][T20690] usb 5-1: config 0 descriptor?? [ 1314.358219][ T30] audit: type=1400 audit(2000000341.722:5584): avc: denied { read } for pid=22733 comm="syz.3.4360" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1314.530069][ T30] audit: type=1400 audit(2000000341.796:5585): avc: denied { open } for pid=22733 comm="syz.3.4360" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1314.673836][ T30] audit: type=1326 audit(2000000342.058:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.3.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8e79aeb9 code=0x7ffc0000 [ 1314.837340][ T30] audit: type=1326 audit(2000000342.058:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.3.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8e79aeb9 code=0x7ffc0000 [ 1315.286474][ T30] audit: type=1326 audit(2000000342.058:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.3.4362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2e8e79aeb9 code=0x7ffc0000 [ 1315.504620][T22752] /dev/nullb0: Can't lookup blockdev [ 1316.156499][T22758] netlink: 'syz.2.4365': attribute type 1 has an invalid length. [ 1316.164277][T22758] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1316.235657][ T5133] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1316.881668][ T1206] usb 5-1: USB disconnect, device number 86 [ 1316.894152][ T78] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1317.037127][ T78] usb 6-1: Using ep0 maxpacket: 32 [ 1317.047999][ T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1317.070802][ T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1317.095416][ T78] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 1317.111715][ T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.133887][ T78] usb 6-1: Product: syz [ 1317.143126][ T78] usb 6-1: Manufacturer: syz [ 1317.156475][ T78] usb 6-1: SerialNumber: syz [ 1317.173541][ T78] usb 6-1: config 0 descriptor?? [ 1317.209837][ T78] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input81 [ 1317.236938][T22769] netlink: 556 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1317.496692][T22775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4370'. [ 1317.535403][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1317.535419][ T30] audit: type=1400 audit(2000000345.050:5633): avc: denied { listen } for pid=22770 comm="syz.4.4370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1317.700198][T22776] rdma_rxe: rxe_newlink: failed to add gre0 [ 1317.748018][ T30] audit: type=1400 audit(2000000345.050:5634): avc: denied { ioctl } for pid=22770 comm="syz.4.4370" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1318.140047][ T1206] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1318.361603][ T1206] usb 4-1: Using ep0 maxpacket: 16 [ 1318.368034][ T1206] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1318.380295][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1318.407246][ T1206] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1318.416716][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.426265][ T1206] usb 4-1: Product: syz [ 1318.432820][ T1206] usb 4-1: Manufacturer: syz [ 1318.439415][ T1206] usb 4-1: SerialNumber: syz [ 1318.462745][ T1206] usb 4-1: config 0 descriptor?? [ 1318.712090][ T1206] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1318.725825][ T1206] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1318.771482][ T1206] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 1318.791607][ T1206] usb 4-1: USB disconnect, device number 88 [ 1318.854890][ T78] usb 6-1: USB disconnect, device number 5 [ 1319.199596][T22787] netlink: 'syz.5.4377': attribute type 13 has an invalid length. [ 1319.208252][T22790] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1319.340759][T22787] gretap0: refused to change device tx_queue_len [ 1319.349305][T22787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1319.460421][T22795] /dev/nullb0: Can't lookup blockdev [ 1319.902854][T22804] netlink: 556 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1320.118468][ T30] audit: type=1400 audit(2000000347.770:5635): avc: denied { write } for pid=22801 comm="syz.2.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1320.180463][ T30] audit: type=1400 audit(2000000347.812:5636): avc: denied { mounton } for pid=22807 comm="syz.3.4385" path="/57/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1320.704158][ T5862] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1320.973419][ T30] audit: type=1400 audit(2000000348.673:5637): avc: denied { map } for pid=22826 comm="syz.3.4391" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1321.063320][ T30] audit: type=1400 audit(2000000348.673:5638): avc: denied { execute } for pid=22826 comm="syz.3.4391" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1321.298688][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 1321.727564][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.737665][ T5862] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1321.747596][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.761393][ T5862] usb 5-1: config 0 descriptor?? [ 1321.772965][ T5862] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1321.900590][T22838] netlink: 556 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1322.011176][ T30] audit: type=1400 audit(2000000349.764:5639): avc: denied { listen } for pid=22839 comm="syz.5.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1322.828034][T22846] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1323.502023][T22848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.509605][T22848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.523220][ T30] audit: type=1400 audit(2000000351.339:5640): avc: denied { bind } for pid=22855 comm="syz.5.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1323.582506][ T30] audit: type=1400 audit(2000000351.339:5641): avc: denied { node_bind } for pid=22855 comm="syz.5.4398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1323.751227][T22863] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4398'. [ 1323.858836][T22864] xt_TCPMSS: Only works on TCP SYN packets [ 1324.011157][T22848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1324.034162][T22848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1324.474664][T22872] usb 5-1: USB disconnect, device number 87 [ 1324.524628][ T30] audit: type=1326 audit(2000000352.389:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.608105][ T30] audit: type=1326 audit(2000000352.389:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.662760][ T30] audit: type=1326 audit(2000000352.389:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.693115][ T30] audit: type=1326 audit(2000000352.389:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.813214][ T30] audit: type=1326 audit(2000000352.389:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.869550][T22848] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1324.937789][ T30] audit: type=1326 audit(2000000352.389:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1324.999641][ T30] audit: type=1326 audit(2000000352.389:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1325.023811][ T30] audit: type=1326 audit(2000000352.389:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22877 comm="syz.4.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e77f9aeb9 code=0x7ffc0000 [ 1325.167433][T22852] : renamed from bridge_slave_0 [ 1325.209177][ T1159] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.238852][ T1159] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.270866][ T1159] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.348309][T22890] netlink: 568 bytes leftover after parsing attributes in process `syz.3.4405'. [ 1325.369864][ T1159] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.661448][T22896] xt_ecn: cannot match TCP bits for non-tcp packets [ 1325.915511][ T1206] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1326.702211][ T1206] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1326.777266][ T1206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.846380][ T1206] usb 4-1: config 0 has no interface number 0 [ 1326.868004][ T1206] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1326.886001][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.901725][ T1206] usb 4-1: Product: syz [ 1326.906683][T22899] mkiss: ax0: crc mode is auto. [ 1326.914049][ T1206] usb 4-1: Manufacturer: syz [ 1326.924740][ T1206] usb 4-1: SerialNumber: syz [ 1326.994645][T22902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4408'. [ 1327.175152][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1327.220123][ T1206] usb 4-1: config 0 descriptor?? [ 1327.232643][ T1206] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 1327.249864][ T1206] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 1328.032227][T22910] mkiss: ax0: crc mode is auto. [ 1328.419304][T22914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1328.470647][T22926] netlink: 182 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1328.839547][T22932] netlink: 568 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1328.996818][ T1206] usb 4-1: USB disconnect, device number 89 [ 1329.202914][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1329.202925][ T30] audit: type=1400 audit(2000000357.313:5703): avc: denied { connect } for pid=22946 comm="syz.3.4423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1329.515147][ T30] audit: type=1400 audit(2000000357.649:5704): avc: denied { map } for pid=22954 comm="syz.1.4426" path="socket:[84102]" dev="sockfs" ino=84102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1329.551575][T22958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1329.563245][ T30] audit: type=1400 audit(2000000357.691:5705): avc: denied { ioctl } for pid=22956 comm="syz.5.4427" path="socket:[83183]" dev="sockfs" ino=83183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1329.642818][ T30] audit: type=1400 audit(2000000357.775:5706): avc: denied { setattr } for pid=22954 comm="syz.1.4426" name="NETLINK" dev="sockfs" ino=84102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1330.211205][ T30] audit: type=1400 audit(2000000358.363:5707): avc: denied { create } for pid=22970 comm="syz.4.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1330.453661][T22979] cgroup: fork rejected by pids controller in /syz3 [ 1330.791999][T22978] fuse: Unknown parameter './file0' [ 1331.423424][T23029] 9pnet_fd: p9_fd_create_unix (23029): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1331.648276][ T30] audit: type=1400 audit(2000000359.875:5708): avc: denied { read } for pid=23030 comm="syz.1.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1332.070735][T23037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4436'. [ 1332.079976][T23037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4436'. [ 1333.577706][ T30] audit: type=1400 audit(2000000361.440:5709): avc: denied { bind } for pid=23043 comm="syz.5.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1333.639121][T16317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.667670][T16317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1333.682726][T16317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1333.700630][T16317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1333.712281][T16317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1334.134904][ T30] audit: type=1400 audit(2000000362.479:5710): avc: denied { wake_alarm } for pid=23053 comm="syz.2.4445" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1334.494423][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4446'. [ 1335.395697][T23049] chnl_net:caif_netlink_parms(): no params data found [ 1335.696989][ T5133] Bluetooth: hci1: command tx timeout [ 1335.816486][T23049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.829330][T23049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.859494][T23049] bridge_slave_0: entered allmulticast mode [ 1336.046225][T23049] bridge_slave_0: entered promiscuous mode [ 1336.061193][T23049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.123411][T23049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.143548][T23049] bridge_slave_1: entered allmulticast mode [ 1336.153679][T23049] bridge_slave_1: entered promiscuous mode [ 1336.234843][T23049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.298650][T23049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.405223][T23049] team0: Port device team_slave_0 added [ 1336.431638][T23049] team0: Port device team_slave_1 added [ 1336.526150][T23049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.541977][T23049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.066381][T23049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.088185][T23049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.095153][T23049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.174227][T23049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.667535][ T5133] Bluetooth: hci1: command tx timeout [ 1337.835285][T23049] hsr_slave_0: entered promiscuous mode [ 1337.850516][T23049] hsr_slave_1: entered promiscuous mode [ 1337.866140][T23049] debugfs: 'hsr0' already exists in 'hsr' [ 1337.878076][T23049] Cannot create hsr debugfs directory [ 1338.735177][T22872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.960911][T23138] tipc: Enabling of bearer rejected, failed to enable media [ 1339.372174][ T10] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1339.388588][T23049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1339.423944][T23049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1339.454052][T23145] 9pnet_fd: p9_fd_create_unix (23145): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1339.455264][T23049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1339.525780][ T10] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.624566][ T10] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1339.626018][T23049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1339.638906][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.648633][ T5133] Bluetooth: hci1: command tx timeout [ 1339.655027][ T10] usb 5-1: Product: syz [ 1339.661046][ T10] usb 5-1: Manufacturer: syz [ 1339.667372][ T10] usb 5-1: SerialNumber: syz [ 1339.918384][ T5876] usb 5-1: USB disconnect, device number 88 [ 1339.921111][T23049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.977463][T23049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.997794][T16135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.004883][T16135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.029881][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.036945][T16126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.447281][T23049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.493744][T23049] veth0_vlan: entered promiscuous mode [ 1340.525414][T23049] veth1_vlan: entered promiscuous mode [ 1340.636978][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1340.646239][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1340.925297][T23049] veth0_macvtap: entered promiscuous mode [ 1340.936292][T23049] veth1_macvtap: entered promiscuous mode [ 1340.957045][T23049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.980126][T23049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1341.086774][ T9809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.115117][ T9809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.304105][ T9809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.327824][ T9809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.411396][T23176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1341.455940][T16126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.464404][T16126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.615747][T16126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1341.624726][T16126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.629342][ T5133] Bluetooth: hci1: command tx timeout [ 1343.086661][ T5862] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1343.125109][ T5876] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1343.229896][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 1343.242842][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1343.251543][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1343.263542][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1343.276235][ T30] audit: type=1400 audit(2000000372.086:5711): avc: denied { read write } for pid=23212 comm="syz.3.4479" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1343.301900][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1343.307218][ T5876] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1343.313665][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1343.322174][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.334638][ T30] audit: type=1400 audit(2000000372.117:5712): avc: denied { open } for pid=23212 comm="syz.3.4479" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1343.367105][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1343.367682][ T5876] usb 6-1: config 0 descriptor?? [ 1343.384679][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1343.399628][ T5862] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1343.400425][ T5876] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1343.469480][ T5862] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1343.891213][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.899617][T23209] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1343.900257][ T5862] usb 5-1: Product: syz [ 1343.911498][ T5862] usb 5-1: Manufacturer: syz [ 1343.917459][T23209] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1343.925401][ T5862] usb 5-1: SerialNumber: syz [ 1343.960024][ T5862] usb 5-1: config 0 descriptor?? [ 1343.966218][T23208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1343.974523][T23208] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1343.991025][ T5862] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1344.185297][T23224] netlink: 'syz.2.4481': attribute type 1 has an invalid length. [ 1344.193204][T23224] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.4481'. [ 1344.311674][ T50] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1344.373107][ T5133] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1344.469273][T23231] netlink: 'syz.4.4476': attribute type 1 has an invalid length. [ 1344.873578][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1345.389218][ T5876] usb 6-1: USB disconnect, device number 6 [ 1345.891176][ T5876] usb 5-1: USB disconnect, device number 89 [ 1345.961765][ T30] audit: type=1400 audit(2000000374.900:5713): avc: denied { bind } for pid=23251 comm="syz.4.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1346.382152][ T5876] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1346.587464][ T5876] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1346.648303][ T5876] usb 5-1: config 0 has no interface number 0 [ 1346.663374][ T5876] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1346.672914][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.681078][ T5876] usb 5-1: Product: syz [ 1346.685296][ T5876] usb 5-1: Manufacturer: syz [ 1346.698544][ T5876] usb 5-1: SerialNumber: syz [ 1346.710118][ T5876] usb 5-1: config 0 descriptor?? [ 1346.974403][ T5876] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1346.990440][ T5876] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1347.002241][ T5876] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1347.011047][ T5876] usb 5-1: media controller created [ 1347.021175][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1347.222000][T23252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4488'. [ 1347.399061][ T5876] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1347.471631][ T5876] usb 5-1: USB disconnect, device number 90 [ 1347.919334][ T980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1349.480385][ T30] audit: type=1400 audit(2000000378.595:5714): avc: denied { read } for pid=23298 comm="syz.4.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1349.647913][T23302] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4499'. [ 1350.250714][ T9811] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.925943][ T31] INFO: task kworker/0:2:16653 blocked for more than 143 seconds. [ 1350.965182][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1350.980470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1350.992712][ T31] task:kworker/0:2 state:D stack:22584 pid:16653 tgid:16653 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1351.005608][ T31] Workqueue: usb_hub_wq hub_event [ 1351.005717][ T30] audit: type=1400 audit(2000000380.191:5715): avc: denied { write } for pid=5793 comm="syz-executor" path="pipe:[4003]" dev="pipefs" ino=4003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1351.010706][ T31] Call Trace: [ 1351.134474][ T31] [ 1351.141006][ T31] ? __schedule+0xf65/0x5e10 [ 1351.150810][ T31] __schedule+0xfe4/0x5e10 [ 1351.536265][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1351.541250][ T31] ? __pfx___schedule+0x10/0x10 [ 1351.617268][ T31] ? find_held_lock+0x2b/0x80 [ 1351.640707][ T31] ? schedule+0x2bf/0x390 [ 1351.651636][ T31] schedule+0xdd/0x390 [ 1351.656404][ T31] schedule_timeout+0x1b2/0x280 [ 1351.697231][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1351.702658][ T31] ? mark_held_locks+0x40/0x70 [ 1351.971570][ T31] __wait_for_common+0x2e7/0x4c0 [ 1351.976673][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1351.982309][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1352.001904][ T31] ? __pfx_device_del+0x10/0x10 [ 1352.006770][ T31] ? kobject_put+0xb9/0x640 [ 1352.011256][ T31] i2c_del_adapter+0x62d/0x820 [ 1352.363751][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1352.369399][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1352.401579][ T31] ? kfree+0x1c7/0x690 [ 1352.422131][ T31] ? usb_urb_exit+0x210/0x2d0 [ 1352.426834][ T31] ? dvb_usb_device_exit+0x29a/0x520 [ 1352.441068][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 1352.445761][ T31] dvb_usb_device_exit+0x313/0x520 [ 1352.451821][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1352.457683][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1352.463681][ T31] ? usb_disable_interface+0x211/0x4c0 [ 1352.469807][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1352.475618][ T31] usb_unbind_interface+0x1dd/0x9e0 [ 1352.488086][ T31] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 1352.493688][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1352.503996][ T31] device_remove+0x12a/0x180 [ 1352.527133][ T31] device_release_driver_internal+0x42e/0x600 [ 1352.533320][ T31] bus_remove_device+0x22f/0x440 [ 1352.544880][ T31] device_del+0x376/0x9b0 [ 1352.567552][ T31] ? __pfx_device_del+0x10/0x10 [ 1352.572425][ T31] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 1352.592580][ T31] usb_disable_device+0x367/0x810 [ 1352.597628][ T31] ? mark_held_locks+0x40/0x70 [ 1352.621389][ T31] usb_disconnect+0x2e2/0x9a0 [ 1352.626105][ T31] hub_event+0x1d0c/0x4af0 [ 1352.649283][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1352.656828][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1352.668570][ T31] ? __pfx_hub_event+0x10/0x10 [ 1352.673347][ T31] ? interval_tree_iter_first+0x130/0x250 [ 1352.687981][ T31] ? process_one_work+0x80b/0x1840 [ 1352.693099][ T31] ? rcu_is_watching+0x12/0xc0 [ 1352.707031][ T31] process_one_work+0x9c2/0x1840 [ 1352.711985][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1352.725793][ T31] ? assign_work+0x19c/0x250 [ 1352.730497][ T31] worker_thread+0x5da/0xe40 [ 1352.745131][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1352.750765][ T31] ? kthread+0x17d/0x730 [ 1352.755810][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1352.762286][ T31] kthread+0x3b3/0x730 [ 1352.773447][ T31] ? __pfx_kthread+0x10/0x10 [ 1352.781345][ T31] ? ret_from_fork+0x79/0xaf0 [ 1352.786175][ T31] ? ret_from_fork+0x79/0xaf0 [ 1352.790841][ T31] ? rcu_is_watching+0x12/0xc0 [ 1352.795619][ T31] ? __pfx_kthread+0x10/0x10 [ 1352.800198][ T31] ret_from_fork+0x754/0xaf0 [ 1352.804814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1352.809917][ T31] ? __switch_to+0x7b9/0x10c0 [ 1352.814672][ T31] ? __pfx_kthread+0x10/0x10 [ 1352.819250][ T31] ret_from_fork_asm+0x1a/0x30 [ 1352.824060][ T31] [ 1352.827126][ T31] [ 1352.827126][ T31] Showing all locks held in the system: [ 1352.835161][ T31] 5 locks held by rcu_exp_gp_kthr/18: [ 1352.876319][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1352.925819][ T31] #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 [ 1352.934522][ T31] #2: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2b6f/0x5e10 [ 1352.964010][ T31] #3: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1353.001991][ T31] #4: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x23b/0x560 [ 1353.040512][ T31] 1 lock held by khungtaskd/31: [ 1353.045385][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1353.087535][ T31] 3 locks held by kworker/1:2/980: [ 1353.125886][ T31] 2 locks held by getty/5573: [ 1353.130572][ T31] #0: ffff888031e960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1353.144804][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1353.162649][ T31] 4 locks held by kworker/1:5/5876: [ 1353.168037][ T31] 2 locks held by kworker/1:3/12649: [ 1353.173442][ T31] #0: ffff88813fe51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1353.211596][ T31] #1: ffffc9000e747c98 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1353.247111][ T31] 2 locks held by kworker/u8:16/16144: [ 1353.259208][ T31] #0: ffff888142a82948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1353.297300][ T31] #1: ffffc90003387c98 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1353.332560][ T31] 5 locks held by kworker/0:2/16653: [ 1353.344592][ T31] #0: ffff888020aac548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1353.365279][ T31] #1: ffffc9000b53fc98 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1353.392664][ T31] #2: ffff8880295ad198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1353.401518][ T31] #3: ffff88807cd74198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1353.410935][ T31] #4: ffff88807cd70160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1353.422052][ T31] 5 locks held by syz.1.3920/21011: [ 1353.430081][ T31] #0: ffff888074d00ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1353.440088][ T31] #1: ffff888074d000c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1353.451550][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1353.468809][ T31] #3: ffff888043dd7b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 1353.487782][ T31] #4: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1353.498273][ T31] 1 lock held by syz.0.4194/22138: [ 1353.509592][ T31] #0: ffff8880295ad198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1353.519243][ T31] 1 lock held by syz.3.4486/23246: [ 1353.524346][ T31] #0: ffff8880295ad198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 1353.534755][ T31] 3 locks held by syz.5.4499/23301: [ 1353.541594][ T31] #0: ffff88809e0d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1353.551402][ T31] #1: ffff88809e0d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1353.561090][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1353.571102][ T31] 3 locks held by syz.2.4505/23324: [ 1353.576373][ T31] #0: ffff888049644ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1353.585946][ T31] #1: ffff8880496440c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1353.598643][ T31] #2: ffffffff9068c228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1353.608838][ T31] 2 locks held by dhcpcd/23323: [ 1353.613771][ T31] #0: ffff8880755d1908 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1353.624328][ T31] #1: ffffffff8e5efab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1353.634638][ T31] [ 1353.637391][ T31] ============================================= [ 1353.637391][ T31] [ 1353.646438][ T31] NMI backtrace for cpu 0 [ 1353.646453][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.646476][ T31] Tainted: [L]=SOFTLOCKUP [ 1353.646483][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1353.646492][ T31] Call Trace: [ 1353.646497][ T31] [ 1353.646503][ T31] dump_stack_lvl+0x100/0x190 [ 1353.646523][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1353.646543][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1353.646559][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1353.646581][ T31] sys_info+0x141/0x190 [ 1353.646597][ T31] watchdog+0xcc3/0xfe0 [ 1353.646622][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.646642][ T31] ? __kthread_parkme+0x18c/0x230 [ 1353.646663][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.646684][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.646702][ T31] kthread+0x3b3/0x730 [ 1353.646718][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.646731][ T31] ? ret_from_fork+0x79/0xaf0 [ 1353.646746][ T31] ? ret_from_fork+0x79/0xaf0 [ 1353.646762][ T31] ? rcu_is_watching+0x12/0xc0 [ 1353.646781][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.646795][ T31] ret_from_fork+0x754/0xaf0 [ 1353.646811][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.646829][ T31] ? __switch_to+0x7b9/0x10c0 [ 1353.646857][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.646873][ T31] ret_from_fork_asm+0x1a/0x30 [ 1353.646895][ T31] [ 1353.646901][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1353.792129][ C1] NMI backtrace for cpu 1 [ 1353.792145][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.792165][ C1] Tainted: [L]=SOFTLOCKUP [ 1353.792170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1353.792178][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1353.792200][ C1] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 ae 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1353.792214][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1353.792226][ C1] RAX: 000000000667a59b RBX: ffff88801e2ba4c0 RCX: ffffffff8b76d4b5 [ 1353.792236][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45ba3 RDI: ffffffff8bfa3620 [ 1353.792245][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 1353.792254][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c57498 [ 1353.792263][ C1] R13: 0000000000000001 R14: ffffffff90b749d0 R15: 0000000000000000 [ 1353.792273][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 1353.792287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1353.792296][ C1] CR2: 000055a0bc140660 CR3: 000000000e392000 CR4: 00000000003526f0 [ 1353.792306][ C1] Call Trace: [ 1353.792311][ C1] [ 1353.792316][ C1] default_idle+0x9/0x10 [ 1353.792332][ C1] default_idle_call+0x6c/0xb0 [ 1353.792348][ C1] do_idle+0x35b/0x4b0 [ 1353.792369][ C1] ? __pfx_do_idle+0x10/0x10 [ 1353.792389][ C1] cpu_startup_entry+0x4f/0x60 [ 1353.792407][ C1] start_secondary+0x21d/0x2d0 [ 1353.792422][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1353.792438][ C1] common_startup_64+0x13e/0x148 [ 1353.792463][ C1] [ 1353.794453][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1353.794467][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.794488][ T31] Tainted: [L]=SOFTLOCKUP [ 1353.794494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1353.794503][ T31] Call Trace: [ 1353.794509][ T31] [ 1353.794516][ T31] dump_stack_lvl+0x100/0x190 [ 1353.794538][ T31] vpanic+0x20d/0x630 [ 1353.794554][ T31] panic+0xd1/0xd1 [ 1353.794568][ T31] ? __pfx_panic+0x10/0x10 [ 1353.794585][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1353.794607][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1353.794628][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1353.794648][ T31] ? watchdog.cold+0x198/0x1ca [ 1353.794664][ T31] ? watchdog+0xcd3/0xfe0 [ 1353.794688][ T31] watchdog.cold+0x1a9/0x1ca [ 1353.794710][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.794732][ T31] ? __kthread_parkme+0x18c/0x230 [ 1353.794755][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.794777][ T31] ? __pfx_watchdog+0x10/0x10 [ 1353.794797][ T31] kthread+0x3b3/0x730 [ 1353.794814][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.794829][ T31] ? ret_from_fork+0x79/0xaf0 [ 1353.794852][ T31] ? ret_from_fork+0x79/0xaf0 [ 1353.794869][ T31] ? rcu_is_watching+0x12/0xc0 [ 1353.794889][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.794906][ T31] ret_from_fork+0x754/0xaf0 [ 1353.794925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.794944][ T31] ? __switch_to+0x7b9/0x10c0 [ 1353.794965][ T31] ? __pfx_kthread+0x10/0x10 [ 1353.794982][ T31] ret_from_fork_asm+0x1a/0x30 [ 1353.795007][ T31] [ 1354.120974][ T31] Kernel Offset: disabled [ 1354.125272][ T31] Rebooting in 86400 seconds..