last executing test programs: 10.767629249s ago: executing program 3 (id=104): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x180, 0x0, 0x200, 0x180, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_bond\x00', 'vlan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) getpgid(0xffffffffffffffff) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10}}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x3) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f8c4b6355331602fb01db6e8db", @ANYBLOB="9b35568874c897b653a8ebaec0b5446cbb2abd253a32d076d31809354d645c461cd5239dad157fb919351411b554faad3b58ac298b6bae6a3eba18f07ce2a5f496c675d3d1f6b573d2f5f0c2ca7fcff0ed8773030dec83f5e58af6991cab447d62e2cf2c48dca0b027e14d40adcb6458f8cba3db08a36cdcdf31de9c6789975d829d24654841f0121b654289c55009e58aca153f142f16"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000001200), &(0x7f0000001240), 0x2, 0x3) sched_setscheduler(r6, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xfbfd, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) close(0xffffffffffffffff) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.543359405s ago: executing program 0 (id=107): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair(0x15, 0x800, 0x40000000, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061119c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r3) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) close(r1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "f663fa63"}]}}, 0x0}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x32315258, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x2, 0x2}}) 10.20085953s ago: executing program 3 (id=108): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x1b1000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r3 = dup(r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) 8.673984743s ago: executing program 2 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000002060100000000000005000100070000000900020073797a321000000016000300686173683a6e6574000000050005000200000005000400"/73], 0x50}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) 7.364810051s ago: executing program 0 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002d00), 0x1, 0x0) mq_timedsend(r1, &(0x7f0000002d40)="272eaf96cf9532ea942870afed888228daab55029b0fed5fd567d45422599c077511ef5f7d1393a55a534e1b00e19f5cf40f47c25f548b0aa5b58a17391a2ae9773a17b03f6f9c3226db59f5b7731a1cf4e225290dc352dae0d8eabafcd6b190c0e95b3a", 0x64, 0x0, &(0x7f0000002dc0)={0x77359400}) 6.851531629s ago: executing program 1 (id=116): socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xcff20eb824ab7c4a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000b00), &(0x7f0000000400)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/143, 0x8f}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x7, 0x8000, 0x9c1c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000030000000800010001"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000180001000000000000000000020000000000ff0000000000080008802353fcba3d0008803683f04ebc926969c5d307e3e3d294754f3aafaa63db1a5c82a8b5caade8449366df5b7a58c0fbc86eeaf705ac71b664044e488dd012b40c6400000008001e00ff"], 0x74}}, 0x0) 6.850695574s ago: executing program 4 (id=117): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 6.712876238s ago: executing program 4 (id=118): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 6.676203544s ago: executing program 0 (id=119): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe0, 0x3a}}]}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) 6.540713829s ago: executing program 1 (id=120): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000b2850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001540)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1}, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe0, 0x3a}}]}}]}}, 0x0) 6.459783638s ago: executing program 3 (id=121): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000110000", @ANYRES32, @ANYRES16=r4], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r9 = accept4$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000c00)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) 5.638756211s ago: executing program 4 (id=122): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000110000", @ANYRES32, @ANYRES16=r4], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r7, 0x0, 0x0, 0x0) 5.514077667s ago: executing program 2 (id=123): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$packet(0x11, 0x4000000000002, 0x300) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.806587855s ago: executing program 3 (id=124): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10503, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200), 0x13d000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) close(r3) read$char_usb(0xffffffffffffffff, 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c55959a8a2eb060}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c55959a8a2eb060}, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000080)={0xc, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) fsetxattr$security_evm(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) fsetxattr$security_evm(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x925, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000004687d90000850000000f0000001801000000007b1af8fd00000000bfa100000000000807010000f8ffffffb702000008000000b70300000080000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000004687d90000850000000f0000001801000000007b1af8fd00000000bfa100000000000807010000f8ffffffb702000008000000b70300000080000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES64=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r6, &(0x7f00000008c0)={0xfffffe80, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @global=@item_012={0x0, 0x1, 0xa}, @global]}}, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x30, r8, 0x2, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x99, {0x10, 0x3d}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) (async) accept(0xffffffffffffffff, 0x0, 0x0) 4.401586101s ago: executing program 4 (id=125): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x0, 0x40400, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x5}) 4.352639055s ago: executing program 1 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000c0601031000000000000000000000000500010007000000"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ad0ccc807d935271ffa82a012cf36ccf039d2866cb3e67eef65a4fe01f0d07d6b9b228f6b05b569ece7c5e5af2da29eebd23cb81cd198db19543760b9b133097ecf027ef3e054b4477a95ae45bffa6d8147b705d604b969c4cbb63f9f7c8e10835bc1367bde57ee2c890dce4098a8963a054e7423e02861c278074064eff3d2af2ceae54ec81240a98bb497d26546a4f80b0fd53472beb899abead5467caf3ebb9f8803227629dd5a6cc5526af558f1e4b6ba1ab453d63feff16f7dfa1a66806432316de94f9646fd73d3a61969c9be6df9791215a8dceaf4cbd35d569163ec3afbeedb57759fa11167e"], 0x5728}}, 0x20040012) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000206050000000000000000000000000014f34600686173683a69702c706f72742c697000050000000c00078008009a2ca1d95b75910600000000009ff901007379000005000400e2ffffff0000001200"/95], 0x58}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) getpid() r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x28a, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r4) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="ad", 0x1}, {&(0x7f0000000080)="a47fb2a54c206acdeaacc8ecd6d95c2526ce", 0x12}], 0x2) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000002c0)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) 4.351986414s ago: executing program 3 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6611, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13000100}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4004000}, 0x20044020) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 4.299419228s ago: executing program 2 (id=128): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 4.154005838s ago: executing program 0 (id=129): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00002c2000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) dup3(r3, r4, 0x0) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000013c0)=[{{&(0x7f0000000480)={0xa, 0x0, 0x5, @mcast2, 0x401}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001180)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x20000001) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0188c200000086dd6012000800503a00fe800000d0346117b40000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc0100000000000000000000000000000000000000000000000000000000000000000000000000000533000000000000fb36eeca6fad50b375a22a584d16ca5500"/149], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xffa0) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f0000001b40)=""/193) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) 3.957068859s ago: executing program 2 (id=130): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002d00), 0x1, 0x0) mq_timedsend(r0, &(0x7f0000002d40)="272eaf96cf9532ea942870afed888228daab55029b0fed5fd567d45422599c077511ef5f7d1393a55a534e1b00e19f5cf40f47c25f548b0aa5b58a17391a2ae9773a17b03f6f9c3226db59f5b7731a1cf4e225290dc352dae0d8eabafcd6b190c0e95b3a", 0x64, 0x0, &(0x7f0000002dc0)={0x77359400}) 3.84480477s ago: executing program 4 (id=131): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x48815) signalfd4(r1, 0x0, 0x0, 0x800) getgroups(0x5, &(0x7f00000003c0)=[0x0, 0xee01, 0xee00, 0xee00, 0xffffffffffffffff]) fstat(r0, 0x0) 3.127967922s ago: executing program 3 (id=132): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x10, 0x0, 0x11) syz_open_dev$admmidi(&(0x7f0000000000), 0xee5d, 0x551a00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGBITSW(r2, 0x80044501, &(0x7f0000000300)=""/243) 2.720937965s ago: executing program 2 (id=133): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x7, 0x40200) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x5, 0x101080) close_range(r2, r1, 0x0) bind$x25(r3, &(0x7f0000000180), 0x12) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x84002, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='net/ip_mr_cache\x00') sendfile(r7, r1, &(0x7f0000000280)=0x2, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='svc_stats_latency\x00', r7}, 0x10) ioctl$RTC_AIE_OFF(r7, 0x7002) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000740)={r9, 0x1, 0x9, 0x1}) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000b40)={0xfff8, 0x4000, 0x6}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000b80)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x8}, 0x18) syslog(0x9, &(0x7f0000000c40)=""/219, 0xdb) syslog(0x2, &(0x7f0000000d40)=""/118, 0x76) socket$kcm(0x29, 0x7, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000dc0)=@req3={0x5, 0x7, 0x0, 0x7, 0x2, 0x8, 0x9}, 0x1c) 2.483885804s ago: executing program 1 (id=134): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90f, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400002, 0x0, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @empty}}]}, 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000100000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x10000) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffefffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x4, 0x0, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0x4}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r6, 0x0, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2.156596668s ago: executing program 0 (id=135): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 1.924098655s ago: executing program 4 (id=136): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000110000", @ANYRES32, @ANYRES16=r4], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) accept4$unix(r7, 0x0, 0x0, 0x0) 1.739362564s ago: executing program 0 (id=137): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x26044005}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2f, 0x2e, 0xa5, 0x8, 0x867, 0x9812, 0x9407, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x44, 0x5e, 0xc1}}]}}]}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, r4, 0x1, 0x20000, 0x0, {0x4a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000180)={'ipvlan0\x00'}) accept4(r2, 0x0, 0x0, 0x80800) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000400000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011"]}, 0x109) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.736964367s ago: executing program 2 (id=138): sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x6f58, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@bcast, @netrom, @netrom, @netrom, @null, @bcast, @rose, @rose]}, &(0x7f00000000c0)=0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x3, 0x1, 0xc0, 0x51}, {0x2, 0xc, 0x6, 0xe0}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r4, &(0x7f0000001480), 0x0}, 0x20) r5 = openat$selinux_access(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r7, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4360095dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @random="bbce6de868a5", @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x23, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466fb19f71e96642faa2300"}]}}}}}}}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe0, 0x3a}}]}}]}}, 0x0) 1.016639687s ago: executing program 1 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000780), 0x3, 0x2) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x4) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058560f, &(0x7f0000000840)=@overlay={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8f5aa78a"}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r2], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x2) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) keyctl$search(0x4, r6, 0x0, 0x0, r6) close_range(r5, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x482481, 0x1ca) fcntl$notify(r8, 0x402, 0x15) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x480, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 0s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0x6f7, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f000000a840)={&(0x7f000000a740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000a800)={&(0x7f000000a780)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0x8}, @device_b, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x8ba}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000045}, 0x4048054) r1 = syz_genetlink_get_family_id$devlink(&(0x7f000000a8c0), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f000000aa00)={&(0x7f000000a880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000a9c0)={&(0x7f000000a900)={0x88, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000800) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f000000aa40)='.log\x00', 0x40600, 0x109) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f000000aac0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000aa80), 0x13f, 0x5}}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000ab40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000ab80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f000000ac80)={&(0x7f000000ab00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000ac40)={&(0x7f000000abc0)={0x5c, r3, 0x83e, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2ae56270d171c2b4d389ce56a5f653c9"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ea7103fdbf21216b478ee5ec2e095c9c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000af00)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000afc0)={0xb, 0x20, &(0x7f000000acc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff7}, [@generic={0x3, 0xa, 0x3, 0x9, 0xfffffff9}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ldst={0x2, 0x1, 0x4, 0x4, 0x8, 0x20, 0x1}, @jmp={0x5, 0x1, 0x0, 0xa, 0x3, 0x2, 0x9}, @jmp={0x5, 0x0, 0xc, 0xb, 0x5, 0x1, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9}, @jmp={0x5, 0x0, 0x5, 0x0, 0x2, 0x6, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x1, 0x1, 0x1, 0xb, 0x21}]}, &(0x7f000000adc0)='syzkaller\x00', 0xe, 0xcf, &(0x7f000000ae00)=""/207, 0x41000, 0x2, '\x00', r5, 0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x2, &(0x7f000000af40)=[r2, r2], &(0x7f000000af80)=[{0x1, 0x4, 0x6, 0x2}, {0x5, 0x4, 0x5, 0xb}], 0x10, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f000000b080)={0x0, 0xfff}, &(0x7f000000b0c0)=0x8) syz_usb_connect$uac1(0x2, 0xdf, &(0x7f000000b680)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x9, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x10}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x5, 0xfb}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x5, 0x97, "839c9f23979a"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x3, "b6d369b0"}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x1, 0x6, 's'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x0, "c6a227af3790"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x5, 0xcc, "d1316b828cc5"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x7, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7, 0x8, 0x9, "1a3f7725"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0xc8, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0x0, 0x2, {0x7, 0x25, 0x1, 0x4, 0xd, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x3, 0x4, 0x3, 0x5, "cd202fa27d1bce"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x1, 0x7, {0x7, 0x25, 0x1, 0x80, 0x7}}}}}}}]}}, &(0x7f000000bbc0)={0xa, &(0x7f000000b780)={0xa, 0x6, 0x250, 0x40, 0xff, 0x6, 0x10, 0x5}, 0x5, &(0x7f000000b7c0)={0x5, 0xf, 0x5}, 0x9, [{0x9c, &(0x7f000000b800)=@string={0x9c, 0x3, "49c169a1042676f68159d095977364fb6daccafc7002df4f6f32b636420ce30991e30b0c055dbe6c747fa0bb5a0a2c778d4a54278f8874717019adaf6db25202728a631c677b6fac38debb2836001a6832214fbeca08611198991567f0ea0515a9d42f9773e9a1a6db14a7fcfb5d0f9d0886e2299e49727bd852d3d1d4e68a32b5e80e9dfde0d7ae3c13c71696c9122d462c6bb11c50be2d939a"}}, {0x5a, &(0x7f000000b8c0)=@string={0x5a, 0x3, "2808c215348b53ff04c429b93afe5ef98b61751d41858a3c6cbcea6c5f3ffcc10c33e5d73dd4b924c60bd7a737d5c7ba8a4e3e5e435bd8c448dcd047f21ddff474a8202718b46420e3e7ce6e6a28352c57b20acb36e7bb51"}}, {0x4, &(0x7f000000b940)=@lang_id={0x4, 0x3, 0x3001}}, {0x11, &(0x7f000000b980)=@string={0x11, 0x3, "579465b77df64887e51227f3b7440b"}}, {0x4, &(0x7f000000b9c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f000000ba00)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f000000ba40)=@lang_id={0x4, 0x3, 0x416}}, {0xd7, &(0x7f000000ba80)=@string={0xd7, 0x3, "06439b67865e5847ad06e71290018028df53d20ba4087e15743ed73dca5f127b32ca3484c95d8ad313cb27383155c7c412378b4ce71858e10b59d0874e161f14826fdd9a777b3d1225c24f70ed8e3fc309ad46127f8823f82677ddf5d9565d2fed20def74fb39995298d708bee6215f3cb3abdc5eb18e451a56c0c6a8e82f1f57eea7bb6925ace9415e35760b855d2d870f17c3867a59761c29870bd3dd16fec04962ff70d7b6c7e7533dd5ac6a4d1e1c6814a16e66004372046ae23f96164aff997191b8f49e1a64c032cd125b0eccb7619fa425c"}}, {0x4, &(0x7f000000bb80)=@lang_id={0x4, 0x3, 0x40a}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 67.771270][ T29] audit: type=1400 audit(1723042746.654:88): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.778937][ T5209] cgroup: Unknown subsys name 'net' [ 67.794266][ T29] audit: type=1400 audit(1723042746.654:89): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.822435][ T29] audit: type=1400 audit(1723042746.694:90): avc: denied { unmount } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.005257][ T5209] cgroup: Unknown subsys name 'rlimit' [ 68.124306][ T29] audit: type=1400 audit(1723042747.004:91): avc: denied { setattr } for pid=5209 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.148421][ T29] audit: type=1400 audit(1723042747.004:92): avc: denied { create } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.190551][ T29] audit: type=1400 audit(1723042747.004:93): avc: denied { write } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.211169][ T29] audit: type=1400 audit(1723042747.014:94): avc: denied { read } for pid=5209 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.231855][ T29] audit: type=1400 audit(1723042747.024:95): avc: denied { mounton } for pid=5209 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.257167][ T29] audit: type=1400 audit(1723042747.024:96): avc: denied { mount } for pid=5209 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.271041][ T5213] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 68.280688][ T29] audit: type=1400 audit(1723042747.064:97): avc: denied { read } for pid=4884 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.594279][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.002788][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.016205][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.081713][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.091110][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.099257][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.107740][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.115908][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.121906][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.123320][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.138520][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.153092][ T4608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.153254][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.165933][ T4608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.169468][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.176909][ T4608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.182523][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.197375][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.205311][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.212638][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.220099][ T4608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.220658][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.235422][ T4608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.244784][ T4608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.269885][ T4608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.286729][ T4608] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.292129][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.301384][ T4608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.320124][ T4608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.328401][ T4608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.347049][ T4608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.355102][ T4608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.363544][ T4608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.929896][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 72.929914][ T29] audit: type=1400 audit(1723042751.814:112): avc: denied { module_request } for pid=5229 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.049391][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 73.087054][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 73.147426][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 73.197115][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 73.345852][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.353630][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.361838][ T5222] bridge_slave_0: entered allmulticast mode [ 73.369809][ T5222] bridge_slave_0: entered promiscuous mode [ 73.379060][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.386416][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.393577][ T5222] bridge_slave_1: entered allmulticast mode [ 73.400736][ T5222] bridge_slave_1: entered promiscuous mode [ 73.464094][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 73.507408][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.514564][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.522427][ T5229] bridge_slave_0: entered allmulticast mode [ 73.530990][ T5229] bridge_slave_0: entered promiscuous mode [ 73.551411][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.587422][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.594570][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.602220][ T5224] bridge_slave_0: entered allmulticast mode [ 73.609501][ T5224] bridge_slave_0: entered promiscuous mode [ 73.619285][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.626609][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.633810][ T5229] bridge_slave_1: entered allmulticast mode [ 73.642759][ T5229] bridge_slave_1: entered promiscuous mode [ 73.676009][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.698845][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.706101][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.713291][ T5221] bridge_slave_0: entered allmulticast mode [ 73.720705][ T5221] bridge_slave_0: entered promiscuous mode [ 73.728708][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.738150][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.745321][ T5224] bridge_slave_1: entered allmulticast mode [ 73.753684][ T5224] bridge_slave_1: entered promiscuous mode [ 73.802349][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.809692][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.817567][ T5221] bridge_slave_1: entered allmulticast mode [ 73.824594][ T5221] bridge_slave_1: entered promiscuous mode [ 73.853316][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.883717][ T5222] team0: Port device team_slave_0 added [ 73.930217][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.942872][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.967967][ T5222] team0: Port device team_slave_1 added [ 74.017257][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.059455][ T5229] team0: Port device team_slave_0 added [ 74.072143][ T5229] team0: Port device team_slave_1 added [ 74.080631][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.094792][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.146432][ T5224] team0: Port device team_slave_0 added [ 74.192185][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.199467][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.206902][ T5237] bridge_slave_0: entered allmulticast mode [ 74.213871][ T5237] bridge_slave_0: entered promiscuous mode [ 74.222198][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.229587][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.237293][ T5237] bridge_slave_1: entered allmulticast mode [ 74.244947][ T5237] bridge_slave_1: entered promiscuous mode [ 74.257072][ T5224] team0: Port device team_slave_1 added [ 74.279843][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.286912][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.312994][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.322180][ T5228] Bluetooth: hci2: command tx timeout [ 74.329321][ T4608] Bluetooth: hci0: command tx timeout [ 74.329345][ T55] Bluetooth: hci3: command tx timeout [ 74.346415][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.353373][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.379714][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.395856][ T4608] Bluetooth: hci1: command tx timeout [ 74.401719][ T4608] Bluetooth: hci4: command tx timeout [ 74.442148][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.449243][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.475186][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.487189][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.494147][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.520815][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.536973][ T5221] team0: Port device team_slave_0 added [ 74.561018][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.573863][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.627751][ T5221] team0: Port device team_slave_1 added [ 74.634392][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.641505][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.668154][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.711252][ T5222] hsr_slave_0: entered promiscuous mode [ 74.719688][ T5222] hsr_slave_1: entered promiscuous mode [ 74.741926][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.751637][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.778155][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.799760][ T5237] team0: Port device team_slave_0 added [ 74.810685][ T5237] team0: Port device team_slave_1 added [ 74.872936][ T5229] hsr_slave_0: entered promiscuous mode [ 74.880984][ T5229] hsr_slave_1: entered promiscuous mode [ 74.889686][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.897602][ T5229] Cannot create hsr debugfs directory [ 74.928996][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.936217][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.962262][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.974947][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.983271][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.009982][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.064892][ T5224] hsr_slave_0: entered promiscuous mode [ 75.072625][ T5224] hsr_slave_1: entered promiscuous mode [ 75.079058][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.088068][ T5224] Cannot create hsr debugfs directory [ 75.094453][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.102116][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.128761][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.140847][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.151684][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.177886][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.414427][ T5237] hsr_slave_0: entered promiscuous mode [ 75.421114][ T5237] hsr_slave_1: entered promiscuous mode [ 75.430793][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.439206][ T5237] Cannot create hsr debugfs directory [ 75.512908][ T5221] hsr_slave_0: entered promiscuous mode [ 75.520301][ T5221] hsr_slave_1: entered promiscuous mode [ 75.529629][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.538356][ T5221] Cannot create hsr debugfs directory [ 75.982597][ T5222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.998964][ T5222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.015522][ T5222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.047928][ T5222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.104553][ T5224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.117418][ T5224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.134281][ T5224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.171900][ T5224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.228368][ T5237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.250650][ T5237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.264569][ T5237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.280265][ T5237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.396243][ T5228] Bluetooth: hci2: command tx timeout [ 76.401677][ T5228] Bluetooth: hci3: command tx timeout [ 76.408597][ T4608] Bluetooth: hci0: command tx timeout [ 76.470899][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.482260][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.492872][ T4608] Bluetooth: hci4: command tx timeout [ 76.492917][ T5228] Bluetooth: hci1: command tx timeout [ 76.529330][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.551485][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.683952][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.703469][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.716136][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.744003][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.781224][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.795489][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.832367][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.883815][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.891361][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.931621][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.938770][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.997397][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.011553][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.066887][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.073984][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.116457][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.145358][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.152586][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.222923][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.252778][ T5222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.312958][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.353449][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.360704][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.413756][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.416862][ T29] audit: type=1400 audit(1723042756.294:113): avc: denied { sys_module } for pid=5222 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.420997][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.469715][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.477640][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.546658][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.553860][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.652593][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.786938][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.828139][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.914461][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.921960][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.943608][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.981964][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.989195][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.130037][ T5222] veth0_vlan: entered promiscuous mode [ 78.234493][ T5222] veth1_vlan: entered promiscuous mode [ 78.291015][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.467403][ T5222] veth0_macvtap: entered promiscuous mode [ 78.486101][ T5228] Bluetooth: hci0: command tx timeout [ 78.491562][ T5228] Bluetooth: hci3: command tx timeout [ 78.493944][ T4608] Bluetooth: hci2: command tx timeout [ 78.519146][ T5222] veth1_macvtap: entered promiscuous mode [ 78.555853][ T4608] Bluetooth: hci4: command tx timeout [ 78.561319][ T4608] Bluetooth: hci1: command tx timeout [ 78.651697][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.704206][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.718661][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.750001][ T5229] veth0_vlan: entered promiscuous mode [ 78.759611][ T5222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.769724][ T5222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.779376][ T5222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.790938][ T5222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.819842][ T5229] veth1_vlan: entered promiscuous mode [ 78.843023][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.002013][ T5237] veth0_vlan: entered promiscuous mode [ 79.014705][ T5224] veth0_vlan: entered promiscuous mode [ 79.072407][ T5224] veth1_vlan: entered promiscuous mode [ 79.091752][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.101268][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.132044][ T5237] veth1_vlan: entered promiscuous mode [ 79.146551][ T5229] veth0_macvtap: entered promiscuous mode [ 79.173885][ T5229] veth1_macvtap: entered promiscuous mode [ 79.189506][ T5221] veth0_vlan: entered promiscuous mode [ 79.209647][ T5221] veth1_vlan: entered promiscuous mode [ 79.265354][ T2509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.276905][ T2509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.312859][ T29] audit: type=1400 audit(1723042758.194:114): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.YaF8Bf/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 79.314426][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.363906][ T29] audit: type=1400 audit(1723042758.234:115): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.371118][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.388125][ T29] audit: type=1400 audit(1723042758.234:116): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/root/syzkaller.YaF8Bf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.404328][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.439240][ T29] audit: type=1400 audit(1723042758.234:117): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.500359][ T29] audit: type=1400 audit(1723042758.244:118): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.503468][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.531441][ T29] audit: type=1400 audit(1723042758.314:119): avc: denied { mounton } for pid=5222 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.543363][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.557470][ T29] audit: type=1400 audit(1723042758.314:120): avc: denied { mount } for pid=5222 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.573121][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.598397][ T5221] veth0_macvtap: entered promiscuous mode [ 79.608067][ T5224] veth0_macvtap: entered promiscuous mode [ 79.619784][ T5237] veth0_macvtap: entered promiscuous mode [ 79.636546][ T5237] veth1_macvtap: entered promiscuous mode [ 79.659399][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.677499][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.686774][ T29] audit: type=1400 audit(1723042758.574:121): avc: denied { read write } for pid=5222 comm="syz-executor" name="loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.711208][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.724847][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.738601][ T29] audit: type=1400 audit(1723042758.574:122): avc: denied { open } for pid=5222 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.768006][ T5224] veth1_macvtap: entered promiscuous mode [ 79.780966][ T5221] veth1_macvtap: entered promiscuous mode [ 79.804209][ T29] audit: type=1400 audit(1723042758.574:123): avc: denied { ioctl } for pid=5222 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.877549][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.888730][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.900764][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.917411][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.931337][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.942976][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.954022][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.965126][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.977190][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.987249][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.001323][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.013378][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.032590][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.043283][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.057752][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.069015][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.083080][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.102072][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.113669][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.123778][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.135111][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.145159][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.158906][ T5278] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.164461][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.179741][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.188038][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.199567][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.209781][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.220618][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.230680][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.242102][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.251976][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.264138][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.277570][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.310788][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.328255][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.338915][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.349664][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.359950][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.371372][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.377159][ T5278] usb 2-1: config 0 has no interfaces? [ 80.384790][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.394271][ T5278] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 80.408878][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.410458][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.424711][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.437081][ T5278] usb 2-1: config 0 descriptor?? [ 80.448681][ T5237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459135][ T5237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.470529][ T5237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.485494][ T5237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511954][ T5221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.521258][ T5221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.530551][ T5221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.540057][ T5221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.556047][ T55] Bluetooth: hci3: command tx timeout [ 80.556433][ T5228] Bluetooth: hci0: command tx timeout [ 80.561519][ T4608] Bluetooth: hci2: command tx timeout [ 80.596110][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.604858][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.613950][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.627180][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.636231][ T4608] Bluetooth: hci1: command tx timeout [ 80.636262][ T5228] Bluetooth: hci4: command tx timeout [ 80.722657][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.739069][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.898041][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.909909][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.977524][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.992870][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.055082][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.065255][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.085284][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.112937][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.337855][ T2509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.355833][ T2509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.393371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.437619][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.474415][ T5312] virtiofs: Unknown parameter ''!}:{$^(@]#!\}+-' [ 81.662787][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.716038][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.934047][ T5323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.165953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.216596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 82.226904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.572386][ T5329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.593224][ T5329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.623242][ T5329] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 82.625960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 82.651386][ T5329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.659372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 82.741675][ T942] usb 2-1: USB disconnect, device number 2 [ 83.366957][ T5340] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.970947][ T5353] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12'. [ 83.992692][ T5353] random: crng reseeded on system resumption [ 84.746007][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 84.746026][ T29] audit: type=1400 audit(1723042762.874:177): avc: denied { write } for pid=5350 comm="syz.4.12" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 84.774982][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.935424][ T29] audit: type=1400 audit(1723042762.874:178): avc: denied { open } for pid=5350 comm="syz.4.12" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.800405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.816888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.902834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.236373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.244607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.843715][ T5369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17'. [ 86.857405][ T5369] random: crng reseeded on system resumption [ 87.699017][ T940] cfg80211: failed to load regulatory.db [ 88.002323][ T29] audit: type=1400 audit(1723042766.804:179): avc: denied { watch } for pid=5371 comm="syz.4.18" path="/3" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.588018][ T29] audit: type=1400 audit(1723042766.824:180): avc: denied { watch_reads } for pid=5371 comm="syz.4.18" path="/3" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.297302][ T29] audit: type=1400 audit(1723042771.184:181): avc: denied { read } for pid=5366 comm="syz.3.15" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.484818][ T5225] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.565771][ T29] audit: type=1400 audit(1723042771.184:182): avc: denied { open } for pid=5366 comm="syz.3.15" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 93.874005][ T29] audit: type=1400 audit(1723042772.754:183): avc: denied { create } for pid=5391 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.071951][ T29] audit: type=1400 audit(1723042772.954:184): avc: denied { bind } for pid=5391 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.191068][ T29] audit: type=1400 audit(1723042772.974:185): avc: denied { name_bind } for pid=5391 comm="syz.2.21" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 94.313670][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.359598][ T29] audit: type=1400 audit(1723042772.974:186): avc: denied { node_bind } for pid=5391 comm="syz.2.21" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 94.485647][ T29] audit: type=1400 audit(1723042773.104:187): avc: denied { setopt } for pid=5391 comm="syz.2.21" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.510871][ T29] audit: type=1400 audit(1723042773.254:188): avc: denied { write } for pid=5391 comm="syz.2.21" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.667575][ T29] audit: type=1400 audit(1723042773.254:189): avc: denied { connect } for pid=5391 comm="syz.2.21" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.770567][ T29] audit: type=1400 audit(1723042773.254:190): avc: denied { name_connect } for pid=5391 comm="syz.2.21" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.352091][ T5276] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.368813][ T4608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.390626][ T4608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.399308][ T4608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.413937][ T4608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.423340][ T4608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.715178][ T5276] usb 4-1: config 0 has no interfaces? [ 95.735704][ T5276] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 95.746525][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.770480][ T5276] usb 4-1: config 0 descriptor?? [ 95.788563][ T4608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.807945][ T2552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.946499][ T4608] Bluetooth: hci0: command tx timeout [ 98.045800][ T5225] usb 4-1: USB disconnect, device number 2 [ 100.007365][ T4608] Bluetooth: hci0: command tx timeout [ 100.254347][ T2552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.433933][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 100.433971][ T29] audit: type=1400 audit(1723042779.314:204): avc: denied { read } for pid=5437 comm="syz.2.34" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.487454][ T29] audit: type=1400 audit(1723042779.314:205): avc: denied { open } for pid=5437 comm="syz.2.34" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.521884][ T5430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 100.522447][ T2552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.583417][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 100.752903][ T29] audit: type=1400 audit(1723042779.624:206): avc: denied { create } for pid=5431 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.903529][ T29] audit: type=1400 audit(1723042779.784:207): avc: denied { create } for pid=5431 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.958282][ T2552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.999765][ T29] audit: type=1400 audit(1723042779.884:208): avc: denied { getopt } for pid=5431 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.695689][ T29] audit: type=1400 audit(1723042780.494:209): avc: denied { create } for pid=5431 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 101.760136][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 101.795060][ T29] audit: type=1400 audit(1723042780.664:210): avc: denied { write } for pid=5431 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.124978][ T4608] Bluetooth: hci0: command tx timeout [ 102.230969][ T29] audit: type=1400 audit(1723042780.734:211): avc: denied { create } for pid=5457 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.303578][ T29] audit: type=1400 audit(1723042780.884:212): avc: denied { read write } for pid=5457 comm="syz.2.37" name="video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.525651][ T5460] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 102.595077][ T29] audit: type=1400 audit(1723042780.884:213): avc: denied { open } for pid=5457 comm="syz.2.37" path="/dev/video3" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 102.893758][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39'. [ 103.886184][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.893582][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.937399][ T5411] bridge_slave_0: entered allmulticast mode [ 103.966869][ T5411] bridge_slave_0: entered promiscuous mode [ 104.339010][ T4608] Bluetooth: hci0: command tx timeout [ 104.634126][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.703886][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.374738][ T5411] bridge_slave_1: entered allmulticast mode [ 105.386899][ T5411] bridge_slave_1: entered promiscuous mode [ 105.685302][ T2552] bridge_slave_1: left allmulticast mode [ 105.702978][ T2552] bridge_slave_1: left promiscuous mode [ 105.727613][ T2552] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.759797][ T2552] bridge_slave_0: left allmulticast mode [ 105.765488][ T2552] bridge_slave_0: left promiscuous mode [ 105.795896][ T2552] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.843314][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 105.843331][ T29] audit: type=1400 audit(1723042784.724:222): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 105.932113][ T940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.002120][ T29] audit: type=1400 audit(1723042784.874:223): avc: denied { read } for pid=5489 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.045983][ T942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.275743][ T940] usb 5-1: config 0 has no interfaces? [ 106.292636][ T940] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 106.474739][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.760002][ T940] usb 5-1: config 0 descriptor?? [ 106.933615][ T29] audit: type=1400 audit(1723042784.884:224): avc: denied { open } for pid=5489 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.995905][ T29] audit: type=1400 audit(1723042784.884:225): avc: denied { getattr } for pid=5489 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.045031][ T942] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 107.059753][ T942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.075383][ T942] usb 3-1: config 0 has no interface number 0 [ 107.088791][ T942] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 107.112466][ T942] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.115720][ T29] audit: type=1400 audit(1723042785.284:226): avc: denied { ioctl } for pid=5487 comm="syz.1.44" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.144443][ T942] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 107.185457][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.219841][ T29] audit: type=1400 audit(1723042785.974:227): avc: denied { write } for pid=5481 comm="syz.3.43" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.228665][ T942] usb 3-1: Product: syz [ 107.300663][ T942] usb 3-1: Manufacturer: syz [ 107.325657][ T942] usb 3-1: SerialNumber: syz [ 107.390254][ T942] usb 3-1: config 0 descriptor?? [ 107.553678][ T29] audit: type=1400 audit(1723042786.434:228): avc: denied { write } for pid=5484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.560647][ T5503] virtiofs: Unknown parameter ''!}:{$^(@]#!\}+-' [ 107.637075][ T29] audit: type=1400 audit(1723042786.434:229): avc: denied { add_name } for pid=5484 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.705077][ T29] audit: type=1400 audit(1723042786.434:230): avc: denied { create } for pid=5484 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.748910][ T29] audit: type=1400 audit(1723042786.434:231): avc: denied { write } for pid=5484 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.902816][ T2552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.908125][ T5276] usb 3-1: USB disconnect, device number 2 [ 107.981206][ T2552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.019145][ T2552] bond0 (unregistering): Released all slaves [ 108.068239][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.088332][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.282886][ T5513] capability: warning: `syz.1.46' uses deprecated v2 capabilities in a way that may be insecure [ 108.347932][ T5411] team0: Port device team_slave_0 added [ 108.378343][ T5411] team0: Port device team_slave_1 added [ 108.580541][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.592604][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.636549][ T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.662807][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.747754][ T942] usb 5-1: USB disconnect, device number 3 [ 108.817440][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.838249][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.890657][ T47] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 108.927868][ T47] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 108.929364][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.987041][ T47] usb 2-1: Product: syz [ 108.991248][ T47] usb 2-1: Manufacturer: syz [ 109.024119][ T47] usb 2-1: SerialNumber: syz [ 109.074190][ T47] usb 2-1: config 0 descriptor?? [ 109.205687][ T5272] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 109.224205][ T5411] hsr_slave_0: entered promiscuous mode [ 109.231993][ T5411] hsr_slave_1: entered promiscuous mode [ 109.255748][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.269905][ T5411] Cannot create hsr debugfs directory [ 109.295280][ T2552] hsr_slave_0: left promiscuous mode [ 109.305481][ T2552] hsr_slave_1: left promiscuous mode [ 109.311197][ T942] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.324936][ T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 109.340159][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.365167][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.366350][ T47] asix 2-1:0.0: probe with driver asix failed with error -71 [ 109.400217][ T5272] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 109.412773][ T2552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.430166][ T47] usb 2-1: USB disconnect, device number 3 [ 109.432671][ T2552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.455844][ T5272] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.489249][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.508060][ T942] usb 5-1: config 0 has no interfaces? [ 109.518529][ T942] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 109.528692][ T5272] usb 4-1: Product: 、 [ 109.541028][ T5272] usb 4-1: Manufacturer: ࠨᗂ謴s쐄뤩︺丹憋ᵵ蕁㲊뱬泪㽟쇼㌌ퟥ퐽Ⓓெꟗ픷뫇亊帾孃쓘䟐ᷲ꡴✠되⁤滎⡪ⰵ뉗쬊冻 [ 109.559297][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.587070][ T2552] veth1_macvtap: left promiscuous mode [ 109.592985][ T5272] usb 4-1: SerialNumber: 鑗띥蝈ዥ䒷 [ 109.603904][ T942] usb 5-1: config 0 descriptor?? [ 109.619168][ T2552] veth0_macvtap: left promiscuous mode [ 109.645343][ T2552] veth1_vlan: left promiscuous mode [ 109.660843][ T2552] veth0_vlan: left promiscuous mode [ 109.886020][ T5272] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 110.012719][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 110.072977][ T5272] usb 4-1: USB disconnect, device number 3 [ 113.339178][ T5548] virtiofs: Unknown parameter ''!}:{$^(@]#!\}+-' [ 113.371902][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 113.371919][ T29] audit: type=1400 audit(1723042792.254:238): avc: denied { write } for pid=5550 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 113.471993][ T5525] udevd[5525]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.749467][ T29] audit: type=1400 audit(1723042792.624:239): avc: denied { setattr } for pid=5550 comm="syz.3.52" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 113.781940][ T5551] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 114.536261][ T5272] usb 5-1: USB disconnect, device number 4 [ 114.802362][ T29] audit: type=1400 audit(1723042793.684:240): avc: denied { map } for pid=5563 comm="syz.4.56" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.859988][ T5565] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 114.891692][ T29] audit: type=1400 audit(1723042793.734:241): avc: denied { create } for pid=5554 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 115.060014][ T5571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.101003][ T29] audit: type=1400 audit(1723042793.984:242): avc: denied { write } for pid=5570 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.398739][ T940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.459351][ T2552] team0 (unregistering): Port device team_slave_1 removed [ 115.585718][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 115.635276][ T940] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 115.654496][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.663301][ T940] usb 4-1: Product: syz [ 115.676427][ T940] usb 4-1: Manufacturer: syz [ 115.681135][ T940] usb 4-1: SerialNumber: syz [ 115.682061][ T2552] team0 (unregistering): Port device team_slave_0 removed [ 115.734273][ T940] usb 4-1: config 0 descriptor?? [ 115.744927][ T940] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 115.961508][ T29] audit: type=1400 audit(1723042794.814:243): avc: denied { getopt } for pid=5563 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.989292][ T940] gspca_sn9c2028: read1 error -32 [ 116.026723][ T940] gspca_sn9c2028: read1 error -32 [ 116.347826][ T29] audit: type=1400 audit(1723042795.224:244): avc: denied { write } for pid=5570 comm="syz.3.57" name="udplite6" dev="proc" ino=4026533496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 116.676404][ T940] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.887010][ T5278] usb 4-1: USB disconnect, device number 4 [ 116.951351][ T940] usb 3-1: config 0 has no interfaces? [ 116.965682][ T940] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 116.995854][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.047301][ T940] usb 3-1: config 0 descriptor?? [ 118.061279][ T5597] overlayfs: failed to resolve './file1': -2 [ 118.139133][ T5595] virtiofs: Unknown parameter ''!}:{$^(@]#!\}+-' [ 118.253045][ T5600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 118.269248][ T5600] random: crng reseeded on system resumption [ 119.213754][ T5606] fuse: Unknown parameter 'oroup_id' [ 119.330690][ T29] audit: type=1400 audit(1723042798.084:245): avc: denied { create } for pid=5590 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.559167][ T5278] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.710157][ T29] audit: type=1400 audit(1723042798.594:246): avc: denied { setopt } for pid=5611 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.775899][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 119.789324][ T29] audit: type=1400 audit(1723042798.594:247): avc: denied { getopt } for pid=5611 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.820859][ T29] audit: type=1400 audit(1723042798.594:248): avc: denied { append } for pid=5611 comm="syz.1.62" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.844546][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 119.928371][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 119.949048][ T5278] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 119.964793][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.003503][ T5278] usb 5-1: config 0 descriptor?? [ 120.107756][ T29] audit: type=1400 audit(1723042798.934:249): avc: denied { bind } for pid=5613 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.145473][ T29] audit: type=1400 audit(1723042798.934:250): avc: denied { connect } for pid=5613 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.173719][ T5272] usb 3-1: USB disconnect, device number 3 [ 120.250060][ T29] audit: type=1400 audit(1723042799.084:251): avc: denied { accept } for pid=5613 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.279970][ T5599] dccp_invalid_packet: P.Data Offset(0) too small [ 121.004602][ T29] audit: type=1400 audit(1723042799.884:252): avc: denied { ioctl } for pid=5621 comm="syz.2.64" path="socket:[8623]" dev="sockfs" ino=8623 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.359686][ T5411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.449048][ T5411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.523477][ T5411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.622528][ T5278] usbhid 5-1:0.0: can't add hid device: -71 [ 121.774641][ T5278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.400946][ T5278] usb 5-1: USB disconnect, device number 5 [ 122.412031][ T5633] Zero length message leads to an empty skb [ 122.769799][ T29] audit: type=1400 audit(1723042801.644:253): avc: denied { mounton } for pid=5639 comm="syz.4.67" path="/proc/55/task" dev="proc" ino=8732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 122.777587][ T5411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.541117][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.625846][ T5309] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.637730][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.674919][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 123.735070][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.742260][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.811334][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.818615][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.865759][ T5309] usb 3-1: Using ep0 maxpacket: 8 [ 123.896070][ T5309] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.924027][ T5309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.945772][ T5309] usb 3-1: Product: syz [ 123.956611][ T5309] usb 3-1: Manufacturer: syz [ 123.963377][ T5309] usb 3-1: SerialNumber: syz [ 123.991485][ T5309] usb 3-1: config 0 descriptor?? [ 124.412878][ T29] audit: type=1400 audit(1723042803.294:254): avc: denied { sys_module } for pid=5411 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.854159][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 124.974986][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.188422][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 125.261399][ T5411] veth0_vlan: entered promiscuous mode [ 125.300480][ T5411] veth1_vlan: entered promiscuous mode [ 125.383651][ T5411] veth0_macvtap: entered promiscuous mode [ 125.427904][ T5411] veth1_macvtap: entered promiscuous mode [ 125.487574][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.525960][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.565230][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.587066][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.613494][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.658761][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.693515][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.719353][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.780945][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.814512][ T5278] usb 3-1: USB disconnect, device number 4 [ 125.873642][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.928609][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.990686][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.056254][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.135167][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.154366][ T29] audit: type=1400 audit(1723042805.034:255): avc: denied { create } for pid=5687 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.215725][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.234015][ T29] audit: type=1400 audit(1723042805.064:256): avc: denied { connect } for pid=5687 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.268403][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.321535][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.353644][ T29] audit: type=1400 audit(1723042805.194:257): avc: denied { read } for pid=5687 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.396079][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.508762][ T5411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.509844][ T29] audit: type=1400 audit(1723042805.204:258): avc: denied { write } for pid=5708 comm="syz.4.76" path="socket:[8808]" dev="sockfs" ino=8808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.564363][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 126.598528][ T29] audit: type=1400 audit(1723042805.324:259): avc: denied { write } for pid=5687 comm="syz.1.74" path="socket:[8813]" dev="sockfs" ino=8813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.611412][ T5411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.721361][ T5411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.032677][ T5411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.146781][ T29] audit: type=1400 audit(1723042805.674:260): avc: denied { read } for pid=5719 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.692014][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.719273][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.868916][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.063362][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.088944][ T29] audit: type=1400 audit(1723042806.954:261): avc: denied { getopt } for pid=5732 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.426568][ T29] audit: type=1400 audit(1723042807.094:262): avc: denied { bind } for pid=5732 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.697632][ T29] audit: type=1400 audit(1723042807.274:263): avc: denied { mount } for pid=5411 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.308140][ T29] audit: type=1400 audit(1723042811.194:264): avc: denied { write } for pid=5755 comm="syz.0.22" name="task" dev="proc" ino=9307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 132.319536][ T5760] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.404106][ T29] audit: type=1400 audit(1723042811.204:265): avc: denied { add_name } for pid=5755 comm="syz.0.22" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 132.426752][ T5278] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.492875][ T29] audit: type=1400 audit(1723042811.204:266): avc: denied { create } for pid=5755 comm="syz.0.22" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 132.584819][ T29] audit: type=1400 audit(1723042811.204:267): avc: denied { associate } for pid=5755 comm="syz.0.22" name="hugetlb.2MB.usage_in_bytes" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 132.648952][ T5278] usb 4-1: config index 0 descriptor too short (expected 38, got 36) [ 132.676927][ T29] audit: type=1400 audit(1723042811.254:268): avc: denied { getopt } for pid=5755 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.680681][ T5278] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.808945][ T5278] usb 4-1: config 33 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 132.835012][ T5278] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 23327, setting to 1024 [ 132.882724][ T5278] usb 4-1: config 33 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 132.933562][ T5278] usb 4-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 132.959849][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.019261][ T5278] usb 4-1: Product: syz [ 133.062388][ T5278] usb 4-1: Manufacturer: syz [ 133.092030][ T5278] usb 4-1: SerialNumber: syz [ 133.130793][ T5754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.168430][ T5278] pl2303 4-1:33.0: required interrupt-in endpoint missing [ 133.453781][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.470072][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.973153][ T942] usb 4-1: USB disconnect, device number 5 [ 136.290751][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 136.392643][ T29] audit: type=1400 audit(1723042815.274:269): avc: denied { connect } for pid=5797 comm="syz.1.92" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.608971][ T942] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.691608][ T5225] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.817932][ T942] usb 4-1: config 0 has no interfaces? [ 136.839107][ T942] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 136.883786][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.935660][ T942] usb 4-1: config 0 descriptor?? [ 136.945807][ T5225] usb 5-1: Using ep0 maxpacket: 32 [ 136.951487][ T5820] netlink: 'syz.2.95': attribute type 6 has an invalid length. [ 136.982285][ T5225] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 137.007307][ T5225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.022097][ T5225] usb 5-1: Product: syz [ 137.029518][ T5225] usb 5-1: Manufacturer: syz [ 137.036553][ T5225] usb 5-1: SerialNumber: syz [ 137.050586][ T5225] usb 5-1: config 0 descriptor?? [ 137.067973][ T5225] xillyusb 5-1:0.0: Failed to send quiesce request. Aborting. [ 137.130009][ T5225] xillyusb 5-1:0.0: probe with driver xillyusb failed with error -5 [ 137.196218][ T5820] tmpfs: Unknown parameter 'usrquotaP' [ 137.503946][ T5225] usb 5-1: USB disconnect, device number 6 [ 138.359511][ T5830] virtiofs: Unknown parameter ''!}:{$^(@]#!\}+-' [ 139.759180][ T9] usb 4-1: USB disconnect, device number 6 [ 139.882037][ T29] audit: type=1400 audit(1723042818.764:270): avc: denied { sqpoll } for pid=5831 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.964751][ T29] audit: type=1400 audit(1723042818.844:271): avc: denied { read } for pid=5848 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.406302][ T29] audit: type=1400 audit(1723042819.274:272): avc: denied { create } for pid=5850 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.461723][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 140.473693][ T29] audit: type=1400 audit(1723042819.284:273): avc: denied { write } for pid=5850 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.524195][ T29] audit: type=1400 audit(1723042819.404:274): avc: denied { create } for pid=5861 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 140.697730][ T29] audit: type=1400 audit(1723042819.564:275): avc: denied { name_connect } for pid=5861 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 140.910357][ T5864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'. [ 142.465967][ T29] audit: type=1326 audit(1723042821.344:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.3.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbebc5779f9 code=0x0 [ 142.565136][ T5892] netlink: 60 bytes leftover after parsing attributes in process `syz.2.113'. [ 142.579310][ T5892] random: crng reseeded on system resumption [ 143.365703][ T29] audit: type=1400 audit(1723042821.524:277): avc: denied { read write } for pid=5884 comm="syz.2.113" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.695922][ T29] audit: type=1400 audit(1723042821.524:278): avc: denied { open } for pid=5884 comm="syz.2.113" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.768422][ T5886] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 143.886630][ T29] audit: type=1400 audit(1723042822.244:279): avc: denied { ioctl } for pid=5884 comm="syz.2.113" path="/dev/raw-gadget" dev="devtmpfs" ino=734 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.093502][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 144.775994][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 144.871054][ T940] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.988692][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 145.049912][ T47] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 145.076079][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.088298][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 145.105187][ T47] usb 1-1: Product: syz [ 145.120252][ T940] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 145.140589][ T47] usb 1-1: Manufacturer: syz [ 145.152883][ T47] usb 1-1: SerialNumber: syz [ 145.162816][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.310062][ T47] usb 1-1: config 0 descriptor?? [ 145.315324][ T940] usb 2-1: Product: syz [ 145.334652][ T940] usb 2-1: Manufacturer: syz [ 145.361961][ T47] xillyusb 1-1:0.0: Failed to send quiesce request. Aborting. [ 145.369603][ T940] usb 2-1: SerialNumber: syz [ 145.402466][ T940] usb 2-1: config 0 descriptor?? [ 145.416326][ T47] xillyusb 1-1:0.0: probe with driver xillyusb failed with error -5 [ 145.460479][ T940] xillyusb 2-1:0.0: Failed to send quiesce request. Aborting. [ 145.504335][ T940] xillyusb 2-1:0.0: probe with driver xillyusb failed with error -5 [ 145.543671][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 145.543687][ T29] audit: type=1400 audit(1723042824.424:315): avc: denied { bind } for pid=5915 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 145.721602][ T29] audit: type=1400 audit(1723042824.464:316): avc: denied { name_bind } for pid=5917 comm="syz.2.123" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 145.728789][ T5276] usb 2-1: USB disconnect, device number 4 [ 145.866954][ T29] audit: type=1400 audit(1723042824.464:317): avc: denied { node_bind } for pid=5917 comm="syz.2.123" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 145.962622][ T9] usb 1-1: USB disconnect, device number 2 [ 146.025792][ T29] audit: type=1400 audit(1723042824.794:318): avc: denied { create } for pid=5917 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.277760][ T5923] tty tty3: ldisc open failed (-12), clearing slot 2 [ 146.316454][ T5924] tty tty3: ldisc open failed (-12), clearing slot 2 [ 146.645849][ T29] audit: type=1400 audit(1723042825.514:319): avc: denied { execmem } for pid=5929 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 146.687022][ T5935] netlink: 68 bytes leftover after parsing attributes in process `syz.1.126'. [ 146.765906][ T29] audit: type=1400 audit(1723042825.644:320): avc: denied { create } for pid=5927 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.925805][ T29] audit: type=1400 audit(1723042825.654:321): avc: denied { module_request } for pid=5927 comm="syz.1.126" kmod="net-pf-2-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 147.891303][ T29] audit: type=1400 audit(1723042826.774:322): avc: denied { create } for pid=5944 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.013999][ T29] audit: type=1400 audit(1723042826.804:323): avc: denied { create } for pid=5944 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.088938][ T29] audit: type=1400 audit(1723042826.814:324): avc: denied { read write } for pid=5944 comm="syz.4.131" name="vbi8" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 149.501475][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.607024][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.752116][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 149.806567][ T9] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 149.855872][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 149.858930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.875440][ T47] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=94.07 [ 149.885375][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.456225][ T9] usb 3-1: Product: syz [ 150.466094][ T9] usb 3-1: Manufacturer: syz [ 150.478016][ T9] usb 3-1: SerialNumber: syz [ 150.551414][ T9] usb 3-1: config 0 descriptor?? [ 150.705640][ T47] usb 1-1: Product: syz [ 150.709851][ T47] usb 1-1: Manufacturer: syz [ 150.714460][ T47] usb 1-1: SerialNumber: syz [ 150.768245][ T47] usb 1-1: config 0 descriptor?? [ 150.773216][ T9] xillyusb 3-1:0.0: Failed to send quiesce request. Aborting. [ 150.773262][ T9] xillyusb 3-1:0.0: probe with driver xillyusb failed with error -5 [ 150.787154][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 150.787169][ T29] audit: type=1400 audit(1723042829.674:363): avc: denied { unmount } for pid=5222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.790824][ T45] [ 150.816695][ T45] ============================================ [ 150.822818][ T45] WARNING: possible recursive locking detected [ 150.828961][ T45] 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 Not tainted [ 150.836228][ T45] -------------------------------------------- [ 150.842445][ T45] kworker/0:1H/45 is trying to acquire lock: [ 150.848400][ T45] ffff88802e958548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x6e/0x120 [ 150.858659][ T45] [ 150.858659][ T45] but task is already holding lock: [ 150.866001][ T45] ffff88802e958548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 150.876165][ T45] [ 150.876165][ T45] other info that might help us debug this: [ 150.884228][ T45] Possible unsafe locking scenario: [ 150.884228][ T45] [ 150.891657][ T45] CPU0 [ 150.894916][ T45] ---- [ 150.898175][ T45] lock((wq_completion)xillyusb); [ 150.903307][ T45] lock((wq_completion)xillyusb); [ 150.908401][ T45] [ 150.908401][ T45] *** DEADLOCK *** [ 150.908401][ T45] [ 150.916523][ T45] May be due to missing lock nesting notation [ 150.916523][ T45] [ 150.924820][ T45] 2 locks held by kworker/0:1H/45: [ 150.929910][ T45] #0: ffff88802e958548 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 150.940507][ T45] #1: ffffc90000b57d80 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 150.952578][ T45] [ 150.952578][ T45] stack backtrace: [ 150.958461][ T45] CPU: 0 UID: 0 PID: 45 Comm: kworker/0:1H Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 150.969112][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 150.979155][ T45] Workqueue: xillyusb wakeup_all [ 150.984086][ T45] Call Trace: [ 150.987348][ T45] [ 150.990263][ T45] dump_stack_lvl+0x116/0x1f0 [ 150.994936][ T45] __lock_acquire+0x2167/0x3cb0 [ 150.999774][ T45] ? __pfx___lock_acquire+0x10/0x10 [ 151.004956][ T45] lock_acquire+0x1b1/0x560 [ 151.009512][ T45] ? touch_wq_lockdep_map+0x6e/0x120 [ 151.014779][ T45] ? __pfx_lock_acquire+0x10/0x10 [ 151.019792][ T45] ? lock_acquire+0x1b1/0x560 [ 151.024475][ T45] ? lockdep_init_map_type+0x16d/0x7d0 [ 151.029924][ T45] ? lockdep_init_map_type+0x16d/0x7d0 [ 151.035370][ T45] ? touch_wq_lockdep_map+0x6e/0x120 [ 151.040639][ T45] touch_wq_lockdep_map+0x78/0x120 [ 151.045733][ T45] ? touch_wq_lockdep_map+0x6e/0x120 [ 151.051009][ T45] __flush_workqueue+0x129/0x1200 [ 151.056018][ T45] ? rcu_is_watching+0x12/0xc0 [ 151.060852][ T45] ? trace_contention_end+0xea/0x140 [ 151.066124][ T45] ? __pfx___flush_workqueue+0x10/0x10 [ 151.071570][ T45] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.077534][ T45] drain_workqueue+0x18f/0x3d0 [ 151.082282][ T45] destroy_workqueue+0xc2/0xaa0 [ 151.087117][ T45] cleanup_dev+0xc5/0x150 [ 151.091435][ T45] wakeup_all+0x28c/0x300 [ 151.095750][ T45] process_one_work+0x9c5/0x1b40 [ 151.100672][ T45] ? __pfx_lock_acquire+0x10/0x10 [ 151.105679][ T45] ? __pfx_process_one_work+0x10/0x10 [ 151.111037][ T45] ? assign_work+0x1a0/0x250 [ 151.115609][ T45] worker_thread+0x6c8/0xf20 [ 151.120185][ T45] ? __kthread_parkme+0x148/0x220 [ 151.125195][ T45] ? __pfx_worker_thread+0x10/0x10 [ 151.130288][ T45] kthread+0x2c1/0x3a0 [ 151.134339][ T45] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.139520][ T45] ? __pfx_kthread+0x10/0x10 [ 151.144090][ T45] ret_from_fork+0x45/0x80 [ 151.148499][ T45] ? __pfx_kthread+0x10/0x10 [ 151.153074][ T45] ret_from_fork_asm+0x1a/0x30 [ 151.157861][ T45] [ 151.177405][ T9] usb 3-1: USB disconnect, device number 5 [ 151.252249][ T47] comedi comedi0: Wrong number of endpoints [ 151.320429][ T47] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 151.492148][ T29] audit: type=1400 audit(1723042830.374:364): avc: denied { create } for pid=5972 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.523635][ T29] audit: type=1400 audit(1723042830.374:365): avc: denied { bind } for pid=5972 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.548658][ T29] audit: type=1400 audit(1723042830.374:366): avc: denied { name_bind } for pid=5972 comm="syz.0.137" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 151.571080][ T5278] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.582398][ T9] usb 1-1: USB disconnect, device number 3 [ 151.592316][ T29] audit: type=1400 audit(1723042830.374:367): avc: denied { node_bind } for pid=5972 comm="syz.0.137" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 151.618645][ T29] audit: type=1400 audit(1723042830.374:368): avc: denied { listen } for pid=5972 comm="syz.0.137" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.640802][ T29] audit: type=1400 audit(1723042830.394:369): avc: denied { connect } for pid=5972 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.665420][ T29] audit: type=1400 audit(1723042830.394:370): avc: denied { name_connect } for pid=5972 comm="syz.0.137" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 151.690944][ T29] audit: type=1400 audit(1723042830.394:371): avc: denied { ioctl } for pid=5972 comm="syz.0.137" path="socket:[9701]" dev="sockfs" ino=9701 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.725649][ T29] audit: type=1400 audit(1723042830.394:372): avc: denied { accept } for pid=5972 comm="syz.0.137" laddr=127.0.0.1 lport=45870 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 151.787591][ T5278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 151.801938][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.811473][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.819761][ T5278] usb 2-1: Product: 、 [ 151.823967][ T5278] usb 2-1: Manufacturer: ࠨᗂ謴s쐄뤩︺丹憋ᵵ蕁㲊뱬泪㽟쇼㌌ퟥ퐽Ⓓெꟗ픷뫇亊帾孃쓘䟐ᷲ꡴✠되⁤滎⡪ⰵ뉗쬊冻 [ 151.840078][ T5278] usb 2-1: SerialNumber: 鑗띥蝈ዥ䒷 [ 152.081501][ T5278] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.099583][ T5278] usb 2-1: USB disconnect, device number 5 [ 152.349071][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory