last executing test programs: 16m44.851357515s ago: executing program 1 (id=1583): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 16m44.398965114s ago: executing program 1 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44008015) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 16m42.846890105s ago: executing program 1 (id=1591): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(0x0, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4"], 0x10b8}, 0xff4c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x13, @local, 0x10}, r5}}, 0x30) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f00000001c0)="69be1199", 0x5ea}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0), 0x245}}, {{&(0x7f0000000b80)=@xdp={0x2c, 0xa, 0x0, 0xf}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8000) 16m39.554206768s ago: executing program 1 (id=1603): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x0, 0x1, @stop_pts=0x3}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000280)={0x0, 0x2, @raw_data=[0x3, 0x51e5, 0x9, 0x6, 0xab7, 0x10001, 0xfff, 0x0, 0xce3, 0x6, 0x4, 0x1, 0x8, 0xaa2d, 0xb, 0x10001]}) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = accept4$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x40800) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) 16m39.347484616s ago: executing program 1 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r2) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf251d00000008000300", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) getpeername$unix(r4, &(0x7f0000000200), &(0x7f0000000280)=0x6e) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 16m34.834969199s ago: executing program 1 (id=1618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020752500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10000000000000000000000000000000000000007600000000000a001c83e66ac76e2007000000000000006b99fbe36121fdb35785f438f72b1f82000000000000000000000000000000f3ff"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x4004c8c1) 16m19.808973228s ago: executing program 32 (id=1618): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020752500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10000000000000000000000000000000000000007600000000000a001c83e66ac76e2007000000000000006b99fbe36121fdb35785f438f72b1f82000000000000000000000000000000f3ff"], 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x4004c8c1) 13m16.624305044s ago: executing program 2 (id=2331): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) 13m13.735702307s ago: executing program 2 (id=2339): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x20, 0x3, 0x6, "ee1aa4639fe3"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r2, 0xd0b05000) pwrite64(r1, &(0x7f0000000c40)="962c835b7591ae9210", 0x9, 0x5) 13m11.685903108s ago: executing program 2 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m10.627636843s ago: executing program 2 (id=2357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x214, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xa9, 0xc, "e5ed816f3d8ca1f3aaffcfff6004a6d27795834949819ed425a2041b6ae03c45f3f989273c147af5de6a6505bdb3440c2a9d6e20df29511d9ff73a8129d18dbc74d92f9a3eca8d52de5b793e2b92342e174e7670d258bd80ddf0f407c0b415c2ab2ec14ebb6af0336caf5414f619b068ccf37cd4847916248a641908392f548066573ec695f4b0e0bb7183e99f07313006b456abcc4c4e377dd59947730ea5da4b688401d7"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x103, 0xc, "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"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}]}, @NFT_MSG_NEWSETELEM={0x31fc, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b98, 0x3, 0x0, 0x1, [{0x370, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x354, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "eb68132e8c8804b4270132dcff51a75205644ab0065c2a1042a686c9c203f68949fb9557af412ab12086f26427f6cdf4e45ac5c6a9e5fd6931e55dd6b11bf52dddd6c9d697992823"}, @NFTA_DATA_VALUE={0x9c, 0x1, "304815832aef26608cb430bccd31b685a48dde23382f840f0239f45eccd6f17bc39623d80b25606b72558b3c4b7e0f0ebbe020954b3b2ea2dc7bc0f159a2e8e91b44e528bba5f0e69d9d35b751f66d456aaa913e86e0fe216a8006c7e8fefc63ee235e607a462887467e2710503692112098d312400d562e9711145927905475eefffd07b47be3b2004e1dcacada7342ac38dc773487bdc3"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "be1bb8bec0eeb994f4c82f1919d81c41d2ef9e1ded09902f9a003f61124fb7216aa9bf6fa96ec737296b0d20495e738b5480d632af35755fe2ded2d92eab872e0e7b159dea53376ddb58319dfba23928dc4834866e7b7c00e404005ff0b54c2c1563f262cec5a7b46e8ae67e019ab0ac18163a371d2573754d73be1012eee25831dc79618340b21bf5a1b35d7511e3c9ab375440f60d314730573468279030e669aba75c543ca0f39b3bc6025a3bc408a612c033a2dd68094ff76269fb8b"}, @NFTA_DATA_VALUE={0xb4, 0x1, "904a2eccfdb89afa9ff966f7c79cf6d7075525bd551da10c69220f958c06162eee43fac16bcfbfc324785b2e64c4bd021ee58343a289689fe1ae562f94a2b0ee99b0246824e2e95dd776ca9bb7db0012bfdbc51bad0c1aeec08f28399c2a11ca8d9473f5104d79884d7a62e5aef3ad7497aaa0a3367b125f26ada92491b1aae77455bb3e22e6d45c222940dede4fa5c7be70469c95d2262681566700d1c1459eb753d852b2fffa2e3cc67f22c3ae8b15"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5d0}]}, {0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x92, 0x1, "7eabc93e060c51dbf27a6040a09548e230ed8833f7eca5e8fffa970e65b677053b64c4ec3ffe9e983aef6fdf33a748837353f1600d7df3e8e9cc831d3584ef9e0b711927048d07101920aaaa5224dd39d583feac46f77664358df3dec9078d4fe8e13e0f61ecba75f9515d9c182548333cb4579e03cad5e9f1cf076e57e8c5fa04cdc20258a5982f0e7f33c4cd82"}, @NFTA_DATA_VALUE={0xaa, 0x1, "74fbdd91430d3f84ca08687328ce7bbe1cd03cc81fe4748fd982315fd6b485cf65ca1062cbc79318f264e23c06c7dce318f98533d2e8d24a67e989f2ff55194d312bcd1fe5bb3407adc41a29c57bfe34d8856d0296c5436e2ddb8e00b2a75ae67cfeba05fd86f2ecdfa035704ccd41e6dced409b2a3284a50b88ec13300713691fb563816f952b4fda51bab00613d6e50b6eb6419fdbfba9ce407c92b3477fb2acce26d73464"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xbc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x54, 0x1, "e98195aa22ef6f84ecf2daac16f0809933c53f69ed45f2358d1e5b0cdae1b615c79a5822a67c77d650b53538fa25188a1fe7cb9bf0ee2c5f982fb4c218e76995b727486a3efde40802fdbd05f746f126"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}, {0x1578, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x42, 0x6, 0x1, 0x0, "1d40a7b4f2555e741ca919c0b77942601a4d4ea03aca1d60856da23e9ec48a869e8d29a6020b6c27688a1009e4ef4f4775583750d99398711440898ea9a7"}, @NFTA_SET_ELEM_EXPRESSIONS={0x1518, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ee}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x1440, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1430, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x12c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "18233e2ea7de35fea98df5e7019d562fa0b6778025dfd6a64c999eaa5207e43fe920fdbed251e5bee2199023e0cafabdfeb7f8124b8261d8eea6f3d00d5c54158b0684f3acef0892bed98331bc514a43e2a64b103f28726fc519"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "3324a97a0e934e8bb5cf8e15815d6d6670416c0552d202ee3a064f78377d9ca64adb3fea1b684c98af401f913750ce570babd91db07b86fea18c64629b51041dcf02fbe1733bba4d"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x228, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9, 0x1, "4310ab9e30"}, @NFTA_DATA_VALUE={0xbd, 0x1, "594283ae918d19a386ea8332e9731a5f6cc4afdf84c1bbd9d65b468526a42edb5dd38ce68154a3baf1478cd32b2d858f06097579af69d61d81b5bf01de3d464df9b4980f770a5449ae1ea649920a99d1f43d008e8bb984e36549ad2cc96687793f75468a587b676aad36a9e3d4dfaafd39eecfc11e8b0c2d6b6976a2f07589a0e3eae8627246e92fddfefd70b35c48930a6a7849fad5e74cb6d430d62830e6dac3d363dc3c260e149601f2a93f939f579ad00d70a039aabe04"}, @NFTA_DATA_VALUE={0xe4, 0x1, "cf19b0d15b81663a7b0078d4abdfbb6c44b9235e6e3a943a8330f582b585e9e5eeb89799513b5adaa4fb567c77bb8c926b2c8553a1395d2ab4762d3deb9fbcf5d52f859959f9b3bb1fc6e929173801922d661b7b5c47cf7d274d2080aca9d8e14492115a123f5ac984482625299dc8cd64ea627465bbf03e3ce3faaeae2a7597444e1ef41e5e88b42e3c0f894617686b558ffdc33c11887b296f1072dabc0a47c080a3b637d6ca80b66aa178455ed35b5a08837bb9808c683a847dad54d960c89b54b5bda7d5709c1a82d83219973ff24b7732843757f540d23e7e8d528b63e6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x10a0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x7e, 0x1, "351a1a214e37a82157d03d0a1533dc65754ee1cd3a2ef5ad5bb53ab2550256ca0c38f86dd919f33b239643b0d5b3e91e97e4608813ee16a28cf3ffd800b81c3425c64671c8e9ddd4fbe0ae606c7313140d42953fc706e9492b24d99b0a880e933995ef0e87b75026f4a0f027346afde567ce77fe40fbde867dca"}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x50}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1614, 0x3, 0x0, 0x1, [{0x12ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x1238, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "2e882b8d38aeceba317cf88a4d9677ed099657e5674a4fcda49974ff5e80517945ebe2e1935df1d9a8e8a95ab5e5cda5b87eeaf99bf826863e1d5dc6baa7db52515e895dae61a65c1841956d8de5fe76b951c423f9a8c8a9dd288e1cd2e81b4d52a2cc64c64c6082fa8864d9ae"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "3f6038a8a3fbcd829e1e34f4a10433faf736c0c7d26efef3632419a3207857d9bad2d17778c0645d49793cd4230cb87c513bae390e103fc6e71fe9c3ce9ec9a98c1638d066df7b1722c4229c39274c8261833d62eab2919a985050c3f4a3531be4bf0126af592c33457b0ff1ca3dc12deeaedbb1e57429118c61062af0e7a9abd983a79ebb2a46b58e7ca6d01ccc7a57e6e905a6cc39d5b6f92f2d912805a31e51be85651c32494eacbb8dec584993588310b8fc4b5ad63b2c8ed2b1c9cb94"}, @NFTA_DATA_VALUE={0x7, 0x1, "399865"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}, {0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x35}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xaf}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xba, 0x1, "96a2c76f66e22702cd41be8effc0720123cc1c222a754f5c8fc4f75b9024b067c11e620f7900451cbe37c4600e76a88bc2c97546de9c178fc6f39994b0041eb79a05b364d58daab339abf9f7f6647109a1ca88cebfd9fb0de4b518018bf6bce48bcc08d7302ab58fc678413ab253e88fa8199b063193e91e7dfbec8e1a7fdb7afcbcdbe84f2f07363e700ac858fcf1aa2c3b9f561db6e8fca184156662b9964e9d12c6275bc8e40d39e548ade474397c65f3847b3468"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x26, 0x1, "9de04d83effc301662f738d251a4f2978321641453bee8b89a08f44cc6456c2bc392"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x34c8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 13m10.509263746s ago: executing program 2 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7f) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x200000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x101008, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x120) getdents64(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x3, 0x7fff, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x65, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, {[@noop, @generic={0x7, 0x12, "0357853c754e9d45f1ebb9264ce6cc13"}]}}}}}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000200)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f9", 0x54}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x1, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=[0x100000001, 0x66], 0x0, 0xd00, 0x2, 0x0, r3}}, 0x40) 13m10.190862939s ago: executing program 2 (id=2360): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) syz_open_dev$video(&(0x7f00000000c0), 0x10, 0x900) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x5, [{0x6, 0xffff, 0x9}]}]}, {0x0, [0x61, 0x30, 0x61, 0x61, 0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002fc0)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500010a380000000c0a010300000000000000000a0000070900020073897a32000000000900010073797a30003e00000900020073797a3000000000140000001100010000000000000000000100000a01f3d99ddba7dc2f4a26a704a2d2910acf3df518"], 0x60}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000844) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0xffff}}], 0x24}}], 0x2, 0x54876) socket$netlink(0x10, 0x3, 0x4) 12m54.603820428s ago: executing program 33 (id=2360): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) syz_open_dev$video(&(0x7f00000000c0), 0x10, 0x900) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x5, [{0x6, 0xffff, 0x9}]}]}, {0x0, [0x61, 0x30, 0x61, 0x61, 0x5f, 0x2e]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000002fc0)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500010a380000000c0a010300000000000000000a0000070900020073897a32000000000900010073797a30003e00000900020073797a3000000000140000001100010000000000000000000100000a01f3d99ddba7dc2f4a26a704a2d2910acf3df518"], 0x60}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000844) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) sendmmsg$sock(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0xffff}}], 0x24}}], 0x2, 0x54876) socket$netlink(0x10, 0x3, 0x4) 1m47.383246991s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 1m27.970919861s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 1m5.241735902s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 46.137623708s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 29.298202334s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 21.44845257s ago: executing program 6 (id=4880): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000001c0)=""/116, 0x74, 0x1000000, &(0x7f0000000180)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) syz_usb_connect(0x3, 0x64, &(0x7f00000005c0)=ANY=[@ANYBLOB="b29f94"], 0x0) 17.883499123s ago: executing program 6 (id=4888): r0 = socket$inet6(0xa, 0x80003, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x51a}}, './file0\x00'}) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x8e}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x40001) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8841) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x0, 0xb0, 0x4e21, 0xfffc, 0xa, 0x0, 0x0, 0x33}, {0xc, 0x800000000000, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, {0x8, 0x259b, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x47, 0x200000, 0x200}}, 0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) 15.918396346s ago: executing program 6 (id=4893): prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000500000004000000", @ANYRES32=r0, @ANYBLOB="f8cd19cc06d2e21e657781a1a48c3970edbf330cdc3c8d064cddd91a13523e4e63b87d238c0402ee82714a8c0465be0e05cf62f5dc46a30d0ee704e748f87d00f2d7dc7f34adf7f13702e8032bdc848c695289e110fb4e4adc9da955fd831ae3e8e2ecf965f0d7d1f5a6192ed0b65e05718c1742c2fea4a5b66b4f2d04c126d33cc49a1df34b44371788f3be3fcca5621fc6e7f0f6e42349016c453169eb1022a15d40e554455f8cc0316fbd9062b6b0de3f2913cb105aaa9faf5846d096dd17e3977f634a87d800b2ff94e9ca1b042d0c2fba52d55e2fc7e79a5c2bc2073fc8a7e44446f56723129a29d36a20e137d61e2df47b544b2f0b80", @ANYRESOCT=r0], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000005c0)=0x111007) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x8, 0x9}, &(0x7f0000000000)=0x90) 13.679469406s ago: executing program 4 (id=4902): add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bf", 0x20, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000580), 0x0, 0x240400d5) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)}, 0x2a45}], 0x1, 0x40000043, 0x0) setrlimit(0x9, &(0x7f0000000400)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x3, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000d0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 12.716939543s ago: executing program 4 (id=4903): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x18, 0xca, 0x36, 0x8, 0x41e, 0x401d, 0xbb73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x6, 0x30, 0x5, "", [{{0x9, 0x4, 0x74, 0x81, 0x0, 0x8f, 0xb7, 0x84, 0xf}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0x8005}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) 12.553867668s ago: executing program 6 (id=4904): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x100fffe, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019340)=""/102399, 0x18fff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x14a82, 0x15) timer_create(0x0, 0x0, &(0x7f0000000300)) 10.0560519s ago: executing program 4 (id=4907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cb3b96167b87f950c460b13647d5d2b5816acc12454c84545a81e014e416b93d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21b8eaab7fb62551"}]}]}, 0x50}}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 8.599315759s ago: executing program 6 (id=4909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/240, 0xf0, 0x2, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x80, 0xf9}}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYBLOB="0100000000000000000006000009140002000000000000000000000000000000000108000500ac14142f14000300ff01000000000000000000000000000108000400ac1e00012700070073797374656d5f753a6f626a6563745f723a6c6972635f6465766963655f743a73300000"], 0x74}, 0x2, 0x34005, 0x0, 0x1}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000180), 0x4) ioctl$TCFLSH(r9, 0x400455c8, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000280)=0x9) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0xffffffffffffffff, 0x2003) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000400)={&(0x7f0000000700)=[{0x4, 0x8c01, 0x5, &(0x7f0000000440)="253ae1ff09"}], 0x1}) 8.598511751s ago: executing program 4 (id=4910): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 8.149442465s ago: executing program 5 (id=4467): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 5.68742645s ago: executing program 4 (id=4914): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0014070000008c96f6bd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x80000026) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) 5.599507918s ago: executing program 0 (id=4915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="b4", 0x1}], 0x1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) close(r5) 5.124812292s ago: executing program 3 (id=4918): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000075a60701000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000300ebff8500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.806765268s ago: executing program 3 (id=4919): gettid() syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20800) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="198e000010000100000000000000000003595ee728000000110001000000000000000000029da808259679543a8a00000a"], 0x28}, 0x1, 0x0, 0x0, 0x64000010}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000640)={0xa, 0x4e24, 0x40000008, @private2, 0x3}, 0xffffff90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x11, 0x2, 0xb, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) fcntl$dupfd(r4, 0x0, r4) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4004081) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000124bd7000fcdbdf250300000005003302000000000000b72912100000e5b9e3b0b1c3847136b2a2f420ccfe5f0c73840d4298aedaef7a1f66377e0c7b91f932bed118681577f008c806b74afd4316b3b147440e9b46625c0f1613d5e312855f0490cec1a7aa1778ccfbfdbfec770e8512597b791b29c5d842cab223091918ea207d7065970eca938fe7b4eace40b8098c3a015406f9db5dd7276b79523cad6dbaab856902bb3087"], 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x20000880) r9 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r9}, 0x20) r10 = syz_open_dev$vim2m(&(0x7f0000000340), 0x3ffc000, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0xf0f014, 0x1}) 4.560159169s ago: executing program 0 (id=4920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xe8f4, 0x400, 0x3, 0x212}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_io_uring_submit$UBLK(r5, r6, r7, &(0x7f0000000480)=@ublk_get_params_sqe={0x2e, 0x40, 0x0, r8, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r4, 0x20, 0xd9db, 0x8, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000040)={0x10, 0x47, 0x40, 0x160, 0xcc3}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') 4.078554612s ago: executing program 3 (id=4921): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000100)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x5, 0x20000000, 0x9, 0x1c63}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f0000002380)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 4.062659561s ago: executing program 3 (id=4922): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x80000) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 2.971900473s ago: executing program 3 (id=4923): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x23a000, 0x1000, 0x0, 0x3}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0441, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2.631565579s ago: executing program 6 (id=4924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x160) r2 = eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472696e733d66b35d1ef90de2642c", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r5], 0x15) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000672000/0x1000)=nil) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100c5000000000000000000000a060905000000fdff010000025db07cb12b06e0d53326"], 0xa8}}, 0x4000) close(r0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) close(r1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) write(r0, &(0x7f00000001c0)="f279cab401a8aa60d569a864269b2f11ff4b5e622fe28fccad246c8cd6476567f6d4c0186c9a0dbd6fed08b7a29c31adf6bcff4fba1a283c0eb61d7990a1dd7c", 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.133769632s ago: executing program 0 (id=4925): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b0007000000000000000000080009000000000008000800000000000800"], 0x4c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.118220701s ago: executing program 0 (id=4926): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x810, &(0x7f00000021c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 1.520315971s ago: executing program 4 (id=4927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, 0x0) io_submit(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001640)=0x0) prlimit64(r3, 0x5, 0x0, &(0x7f00000016c0)) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x20, 0xfffffe00, 0x8, 0x1, 0x19a, 0x3, 0x5, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000d06050000000000000000000300000505001e0007000000120003006269746d"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x4, 0xb, 0x9, 0x1000}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x14000}, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r1, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, r8, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 878.005166ms ago: executing program 0 (id=4928): add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bf", 0x20, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000580), 0x0, 0x240400d5) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)}, 0x2a45}], 0x1, 0x40000043, 0x0) setrlimit(0x9, &(0x7f0000000400)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x3, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x20000d0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 604.250205ms ago: executing program 3 (id=4929): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000075a60701000000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000300ebff8500000086000000850000000e000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 0 (id=4930): creat(&(0x7f0000000180)='./file0\x00', 0x70) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000380)='5', 0x1, 0x20044855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000040)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x5, "fa000000f60000000000ffff0000000000000000f500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000300)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x80000000, "14e6498c270e00e2fff9cc808000000000000000040000002be8ffffffffffff", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r9}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40000) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r10) kernel console output (not intermixed with test programs): [ 1429.724095][ T30] audit: type=1400 audit(1685.501:5790): avc: denied { create } for pid=23389 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1429.750270][T12353] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1429.926881][ T30] audit: type=1400 audit(1685.501:5791): avc: denied { connect } for pid=23389 comm="syz.0.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1429.997799][ T30] audit: type=1400 audit(1685.501:5792): avc: denied { read write } for pid=23389 comm="syz.0.4584" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1430.048497][T23409] IPVS: Scheduler module ip_vs_ not found [ 1430.149558][ T30] audit: type=1400 audit(1685.501:5793): avc: denied { open } for pid=23389 comm="syz.0.4584" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1430.229719][ T30] audit: type=1400 audit(1685.501:5794): avc: denied { ioctl } for pid=23389 comm="syz.0.4584" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1430.335938][ T30] audit: type=1400 audit(1685.541:5795): avc: denied { search } for pid=23400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1430.432514][ T30] audit: type=1400 audit(1685.541:5796): avc: denied { search } for pid=23400 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1430.770163][T17099] Bluetooth: hci0: command tx timeout [ 1431.133386][ T24] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1431.374212][ T24] usb 5-1: USB disconnect, device number 48 [ 1431.762141][T12189] usb 7-1: new full-speed USB device number 84 using dummy_hcd [ 1431.944650][T12189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1431.972092][T12189] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1432.010300][T12189] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1432.085338][T12189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1432.113669][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4597'. [ 1432.130769][T12189] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1432.153631][T12189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.203001][T12189] usb 7-1: Product: syz [ 1432.221721][T12189] usb 7-1: Manufacturer: syz [ 1432.261083][T12189] usb 7-1: SerialNumber: syz [ 1432.292786][T23440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1432.482052][T12353] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1432.508302][T23468] tc_dump_action: action bad kind [ 1432.598680][T23440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1432.766197][T12353] usb 1-1: device descriptor read/64, error -71 [ 1432.850112][T17099] Bluetooth: hci0: command tx timeout [ 1433.361137][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1433.361153][ T30] audit: type=1400 audit(1689.381:5862): avc: denied { read } for pid=23438 comm="syz.6.4594" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1433.433653][ T30] audit: type=1400 audit(1689.401:5863): avc: denied { open } for pid=23438 comm="syz.6.4594" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1433.542595][T12353] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1433.611426][ T30] audit: type=1400 audit(1689.631:5864): avc: denied { read write } for pid=23478 comm="syz.4.4600" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1433.719578][T12353] usb 1-1: device descriptor read/64, error -71 [ 1433.782682][ T30] audit: type=1400 audit(1689.651:5865): avc: denied { open } for pid=23478 comm="syz.4.4600" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1433.881940][T12353] usb usb1-port1: attempt power cycle [ 1433.956466][ T30] audit: type=1400 audit(1689.651:5866): avc: denied { ioctl } for pid=23478 comm="syz.4.4600" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1434.270940][T12353] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1434.320883][ T30] audit: type=1400 audit(1689.651:5867): avc: denied { unlink } for pid=23478 comm="syz.4.4600" name="#cb" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1434.393141][T12353] usb 1-1: device descriptor read/8, error -71 [ 1434.553928][ T30] audit: type=1400 audit(1689.661:5868): avc: denied { mount } for pid=23478 comm="syz.4.4600" name="/" dev="overlay" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1434.681202][T12353] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1434.744190][ T30] audit: type=1800 audit(1689.661:5869): pid=23481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4600" name="file0" dev="overlay" ino=1440 res=0 errno=0 [ 1434.912499][ T30] audit: type=1400 audit(1690.651:5870): avc: denied { unmount } for pid=17718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1435.154874][ T30] audit: type=1400 audit(1690.851:5871): avc: denied { allowed } for pid=23490 comm="syz.4.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1435.360607][T23496] bond1: entered promiscuous mode [ 1435.372604][T23496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.556594][T23502] dummy0: entered allmulticast mode [ 1435.584682][T23502] dummy0: left allmulticast mode [ 1435.617391][T23335] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1435.759775][T23335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1435.833041][T23335] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1435.948644][T23335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1436.022225][T23335] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1436.078713][T23335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1436.121381][T23335] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1436.175581][T23335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1436.441157][T23513] FAULT_INJECTION: forcing a failure. [ 1436.441157][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.454707][T23513] CPU: 0 UID: 0 PID: 23513 Comm: syz.4.4604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.454737][T23513] Tainted: [L]=SOFTLOCKUP [ 1436.454743][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1436.454752][T23513] Call Trace: [ 1436.454759][T23513] [ 1436.454765][T23513] dump_stack_lvl+0x100/0x190 [ 1436.454786][T23513] should_fail_ex.cold+0x5/0xa [ 1436.454803][T23513] should_failslab+0xc2/0x120 [ 1436.454817][T23513] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1436.454836][T23513] ? __alloc_skb+0x5b7/0x710 [ 1436.454860][T23513] ? __alloc_skb+0x140/0x710 [ 1436.454887][T23513] __alloc_skb+0x140/0x710 [ 1436.454911][T23513] ? __alloc_skb+0x5b7/0x710 [ 1436.454936][T23513] ? __pfx___alloc_skb+0x10/0x10 [ 1436.454967][T23513] netlink_alloc_large_skb+0x69/0x150 [ 1436.454992][T23513] netlink_sendmsg+0x680/0xda0 [ 1436.455017][T23513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.455038][T23513] ? __might_fault+0x20/0x140 [ 1436.455059][T23513] ____sys_sendmsg+0xa4d/0xbe0 [ 1436.455072][T23513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1436.455089][T23513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1436.455110][T23513] ? irqentry_exit+0x24d/0xa00 [ 1436.455139][T23513] ___sys_sendmsg+0x190/0x1e0 [ 1436.455161][T23513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.455179][T23513] ? __lock_acquire+0x49f/0x1a40 [ 1436.455193][T23513] ? proc_fail_nth_write+0x16f/0x220 [ 1436.455224][T23513] __sys_sendmsg+0x160/0x210 [ 1436.455236][T23513] ? __pfx___sys_sendmsg+0x10/0x10 [ 1436.455265][T23513] do_syscall_64+0x115/0x870 [ 1436.455287][T23513] ? clear_bhb_loop+0x40/0x90 [ 1436.455312][T23513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.455326][T23513] RIP: 0033:0x7f77b4f9de59 [ 1436.455336][T23513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.455347][T23513] RSP: 002b:00007f77b5ef8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.455359][T23513] RAX: ffffffffffffffda RBX: 00007f77b5226180 RCX: 00007f77b4f9de59 [ 1436.455366][T23513] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1436.455372][T23513] RBP: 00007f77b5ef8090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.455380][T23513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.455390][T23513] R13: 00007f77b5226218 R14: 00007f77b5226180 R15: 00007ffeddf4dbc8 [ 1436.455414][T23513] [ 1436.969995][T12353] usb 1-1: device descriptor read/8, error -71 [ 1437.038824][T12189] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 1437.081934][T12353] usb usb1-port1: unable to enumerate USB device [ 1437.112769][T12189] cdc_ncm 7-1:1.0: bind() failure [ 1437.158880][T12189] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1437.178099][T12189] cdc_ncm 7-1:1.1: bind() failure [ 1437.195965][T12189] usb 7-1: USB disconnect, device number 84 [ 1438.407494][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1438.407527][ T30] audit: type=1400 audit(1693.331:5884): avc: denied { sys_admin } for pid=23524 comm="syz.4.4608" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1438.717024][ T30] audit: type=1400 audit(1693.941:5885): avc: denied { bind } for pid=23518 comm="syz.6.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1438.813963][ T30] audit: type=1400 audit(1694.191:5886): avc: denied { read write } for pid=23518 comm="syz.6.4606" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1439.555936][ T30] audit: type=1400 audit(1694.191:5887): avc: denied { open } for pid=23518 comm="syz.6.4606" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1439.823418][T23549] overlayfs: failed to clone upperpath [ 1439.870432][ T30] audit: type=1400 audit(1694.291:5888): avc: denied { ioctl } for pid=23518 comm="syz.6.4606" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1439.999063][ T30] audit: type=1400 audit(1694.581:5889): avc: denied { write } for pid=23518 comm="syz.6.4606" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1440.119709][ T30] audit: type=1400 audit(1694.771:5890): avc: denied { unmount } for pid=17718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1440.180165][ T30] audit: type=1400 audit(1694.921:5891): avc: denied { write } for pid=23539 comm="syz.4.4611" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1440.826403][ T30] audit: type=1804 audit(1695.571:5892): pid=23545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.4610" name="/newroot/295/file0/file1" dev="overlay" ino=1709 res=1 errno=0 [ 1440.867541][ T30] audit: type=1400 audit(1695.721:5893): avc: denied { write } for pid=23505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.401928][T23574] block device autoloading is deprecated and will be removed. [ 1441.444309][T23585] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1441.760139][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1441.867736][T23335] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1441.910121][ T24] usb 5-1: device descriptor read/64, error -71 [ 1441.948335][T23335] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1442.125440][T23335] wireguard: wg0: Could not create IPv4 socket [ 1442.188718][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1442.212847][T23335] wireguard: wg1: Could not create IPv4 socket [ 1442.310745][T23335] wireguard: wg2: Could not create IPv4 socket [ 1442.420128][ T24] usb 5-1: device descriptor read/64, error -71 [ 1442.541352][ T24] usb usb5-port1: attempt power cycle [ 1442.964917][T23604] tc_dump_action: action bad kind [ 1443.002998][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1443.064055][ T24] usb 5-1: device descriptor read/8, error -71 [ 1443.411114][T23611] IPVS: Scheduler module ip_vs_ not found [ 1443.886019][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1443.886033][ T30] audit: type=1400 audit(1699.901:5932): avc: denied { unmount } for pid=17098 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1443.925842][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1443.931526][ T30] audit: type=1400 audit(1699.941:5933): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1444.016530][ T24] usb 5-1: device descriptor read/8, error -71 [ 1444.076656][ T30] audit: type=1400 audit(1700.091:5934): avc: denied { read } for pid=23621 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.209254][ T24] usb usb5-port1: unable to enumerate USB device [ 1444.260477][ T30] audit: type=1400 audit(1700.111:5935): avc: denied { read open } for pid=23621 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1444.363259][ T30] audit: type=1400 audit(1700.241:5936): avc: denied { read write } for pid=23619 comm="syz.0.4624" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1444.428772][ T30] audit: type=1400 audit(1700.241:5937): avc: denied { open } for pid=23619 comm="syz.0.4624" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1444.476620][ T30] audit: type=1400 audit(1700.251:5938): avc: denied { perfmon } for pid=23619 comm="syz.0.4624" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1444.513844][ T30] audit: type=1400 audit(1700.251:5939): avc: denied { create } for pid=23619 comm="syz.0.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1444.550119][ T30] audit: type=1400 audit(1700.251:5940): avc: denied { read write } for pid=23619 comm="syz.0.4624" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1444.615805][ T30] audit: type=1400 audit(1700.261:5941): avc: denied { open } for pid=23619 comm="syz.0.4624" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1444.660097][ T24] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1444.846365][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1444.948138][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.018169][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1445.083422][ T24] usb 7-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 1445.123749][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.178865][ T24] usb 7-1: Product: syz [ 1445.203841][ T24] usb 7-1: Manufacturer: syz [ 1445.229013][ T24] usb 7-1: SerialNumber: syz [ 1445.698497][ T24] usb 7-1: unit 3 not found! [ 1445.882901][ T24] usb 7-1: USB disconnect, device number 85 [ 1446.025883][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1446.121647][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1446.218502][T23652] Failed to initialize the IGMP autojoin socket (err -2) [ 1446.274420][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1448.055706][T23647] Process accounting resumed [ 1448.075079][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1448.117116][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1448.254423][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1448.501895][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1448.521003][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1448.529706][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1448.542031][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1448.552745][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1448.800091][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1448.855082][T23662] Failed to initialize the IGMP autojoin socket (err -2) [ 1448.949737][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1448.949753][ T30] audit: type=1400 audit(1704.961:5988): avc: denied { bind } for pid=23692 comm="syz.3.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1448.961320][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.096142][ T30] audit: type=1400 audit(1705.021:5989): avc: denied { unmount } for pid=15026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1449.302607][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1449.326624][ T30] audit: type=1400 audit(1705.341:5990): avc: denied { create } for pid=23690 comm="syz.4.4637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1449.350113][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.524140][ T30] audit: type=1400 audit(1705.411:5991): avc: denied { setopt } for pid=23697 comm="syz.6.4639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1449.586881][ T24] usb 1-1: config 0 descriptor?? [ 1449.612701][ T30] audit: type=1400 audit(1705.631:5992): avc: denied { setopt } for pid=23690 comm="syz.4.4637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1449.848846][T23666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.869721][T23666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.889978][ T30] audit: type=1400 audit(1705.901:5993): avc: denied { write } for pid=23671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.194952][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1450.229691][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1450.309571][ T24] usb 1-1: USB disconnect, device number 62 [ 1450.570102][ T30] audit: type=1400 audit(1706.581:5994): avc: denied { write } for pid=23718 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1450.610321][T17099] Bluetooth: hci0: command tx timeout [ 1450.686794][T23724] overlayfs: failed to clone upperpath [ 1450.960354][ T5708] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1451.093482][T23735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4647'. [ 1451.142063][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1451.154691][ T30] audit: type=1400 audit(1707.111:5995): avc: denied { create } for pid=23731 comm="syz.6.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1451.194681][ T30] audit: type=1400 audit(1707.111:5996): avc: denied { write } for pid=23731 comm="syz.6.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1451.220519][ T30] audit: type=1400 audit(1707.111:5997): avc: denied { nlmsg_write } for pid=23731 comm="syz.6.4647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1451.221495][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 1451.292496][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1451.310081][ T24] usb 5-1: device descriptor read/64, error -71 [ 1451.425767][ T5708] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1451.461808][ T5708] usb 1-1: string descriptor 0 read error: -22 [ 1451.501765][ T5708] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1451.521588][ T5708] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1451.550404][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1451.579291][ T5708] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1451.630352][ T5708] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1451.656625][ T5708] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1451.678835][ T5708] usb 1-1: media controller created [ 1451.722842][ T24] usb 5-1: device descriptor read/64, error -71 [ 1451.741996][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1451.819253][T23754] fuse: fd is not a fuse device [ 1451.828353][T23728] syzkaller0: entered promiscuous mode [ 1451.833824][T23728] syzkaller0: entered allmulticast mode [ 1451.850301][ T24] usb usb5-port1: attempt power cycle [ 1451.854455][T23728] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1451.945403][T23728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.954085][T23728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.180158][T23763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23763 comm=syz.4.4652 [ 1452.237292][T23763] Failed to initialize the IGMP autojoin socket (err -2) [ 1452.304889][T23765] Failed to initialize the IGMP autojoin socket (err -2) [ 1452.336805][T23662] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1452.355770][T23662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1452.363682][T23662] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1452.370737][ T5708] zl10353_read_register: readreg error (reg=127, ret==0) [ 1452.382211][T23662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.392760][T23662] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1452.410922][T23662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.419520][T23662] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1452.423127][ T5708] usb 1-1: USB disconnect, device number 63 [ 1452.446757][T23662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1452.650150][T23014] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1452.690768][T17099] Bluetooth: hci0: command tx timeout [ 1452.773489][T23782] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1452.790967][T23782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1453.069288][T23014] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1453.099176][T23014] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.159610][T23797] FAULT_INJECTION: forcing a failure. [ 1453.159610][T23797] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.193039][T23014] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1453.212295][T23014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.228968][T23797] CPU: 0 UID: 0 PID: 23797 Comm: syz.0.4655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.228993][T23797] Tainted: [L]=SOFTLOCKUP [ 1453.228999][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1453.229009][T23797] Call Trace: [ 1453.229015][T23797] [ 1453.229022][T23797] dump_stack_lvl+0x100/0x190 [ 1453.229047][T23797] should_fail_ex.cold+0x5/0xa [ 1453.229064][T23797] should_failslab+0xc2/0x120 [ 1453.229078][T23797] __kmalloc_noprof+0xfc/0x820 [ 1453.229090][T23797] ? tomoyo_encode2+0xfb/0x3c0 [ 1453.229114][T23797] tomoyo_encode2+0xfb/0x3c0 [ 1453.229131][T23797] tomoyo_encode+0x29/0x50 [ 1453.229146][T23797] tomoyo_realpath_from_path+0x18c/0x690 [ 1453.229166][T23797] tomoyo_path_number_perm+0x23c/0x580 [ 1453.229180][T23797] ? tomoyo_path_number_perm+0x22e/0x580 [ 1453.229195][T23797] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1453.229223][T23797] ? find_held_lock+0x2b/0x80 [ 1453.229239][T23797] ? __fget_files+0x215/0x3d0 [ 1453.229255][T23797] ? hook_file_ioctl_common+0x140/0x440 [ 1453.229273][T23797] ? __fget_files+0x215/0x3d0 [ 1453.229292][T23797] ? __fget_files+0x21f/0x3d0 [ 1453.229311][T23797] security_file_ioctl+0xd3/0x230 [ 1453.229327][T23797] __x64_sys_ioctl+0xb7/0x210 [ 1453.229343][T23797] do_syscall_64+0x115/0x870 [ 1453.229359][T23797] ? clear_bhb_loop+0x40/0x90 [ 1453.229373][T23797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.229385][T23797] RIP: 0033:0x7fd76139de59 [ 1453.229395][T23797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.229407][T23797] RSP: 002b:00007fd7621ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.229418][T23797] RAX: ffffffffffffffda RBX: 00007fd761625fa0 RCX: 00007fd76139de59 [ 1453.229425][T23797] RDX: 00002000000001c0 RSI: 0000000000002286 RDI: 0000000000000003 [ 1453.229435][T23797] RBP: 00007fd7621ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.229445][T23797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.229455][T23797] R13: 00007fd761626038 R14: 00007fd761625fa0 R15: 00007ffd92ffb6a8 [ 1453.229479][T23797] [ 1453.229501][T23797] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1453.465787][T23014] usb 7-1: Product: syz [ 1453.469953][T23014] usb 7-1: Manufacturer: syz [ 1453.474542][T23014] usb 7-1: SerialNumber: syz [ 1453.506032][T23014] usb 7-1: config 0 descriptor?? [ 1453.637356][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'. [ 1453.667419][T23014] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 1453.673711][T23014] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 1453.932515][T23822] overlay: ./file0 is not a directory [ 1454.030769][ T24] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1454.040843][T18078] usb 7-1: USB disconnect, device number 86 [ 1454.051116][T23827] overlayfs: failed to clone upperpath [ 1454.177609][T23834] fuse: fd is not a fuse device [ 1454.212206][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1454.233675][T23662] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1454.250963][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.274107][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1454.287772][T23662] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1454.309997][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.330432][ T24] usb 1-1: config 0 descriptor?? [ 1454.341363][T23662] wireguard: wg0: Could not create IPv4 socket [ 1454.350161][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1454.350175][ T30] audit: type=1400 audit(1710.361:6022): avc: denied { write } for pid=23829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.362559][T23662] wireguard: wg1: Could not create IPv4 socket [ 1454.402419][T23662] wireguard: wg2: Could not create IPv4 socket [ 1454.491369][ T30] audit: type=1400 audit(1710.511:6023): avc: denied { allowed } for pid=23847 comm="syz.4.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1454.526481][ T30] audit: type=1400 audit(1710.531:6024): avc: denied { map } for pid=23847 comm="syz.4.4663" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1454.554624][ T30] audit: type=1400 audit(1710.531:6025): avc: denied { read write } for pid=23847 comm="syz.4.4663" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1454.579003][ T30] audit: type=1400 audit(1710.591:6026): avc: denied { write } for pid=23849 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1455.051991][T23859] tc_dump_action: action bad kind [ 1455.260679][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1455.329598][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1455.349469][ T30] audit: type=1400 audit(1711.361:6027): avc: denied { read write } for pid=15026 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1455.433149][ T24] usb 1-1: USB disconnect, device number 64 [ 1455.441469][ T30] audit: type=1400 audit(1711.361:6028): avc: denied { open } for pid=15026 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1455.597922][ T30] audit: type=1400 audit(1711.361:6029): avc: denied { ioctl } for pid=15026 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1455.628499][ T30] audit: type=1400 audit(1711.391:6030): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1455.655551][ T30] audit: type=1400 audit(1711.441:6031): avc: denied { allowed } for pid=23860 comm="syz.3.4666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1456.222636][T23874] tc_dump_action: action bad kind [ 1458.963327][T23908] bridge0: port 3(vlan2) entered blocking state [ 1458.998478][T23908] bridge0: port 3(vlan2) entered disabled state [ 1459.021487][T23908] vlan2: entered allmulticast mode [ 1459.047308][T23908] bridge0: entered allmulticast mode [ 1459.088172][T23908] vlan2: left allmulticast mode [ 1459.113870][T23908] bridge0: left allmulticast mode [ 1459.477524][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1459.477545][ T30] audit: type=1400 audit(1715.491:6102): avc: denied { create } for pid=23909 comm="syz.6.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1459.535821][ T30] audit: type=1400 audit(1715.541:6103): avc: denied { create } for pid=23917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1459.556413][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1459.556660][ T30] audit: type=1400 audit(1715.541:6104): avc: denied { read write } for pid=23917 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1459.590239][ T30] audit: type=1400 audit(1715.541:6105): avc: denied { open } for pid=23917 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1459.616514][ T30] audit: type=1400 audit(1715.551:6106): avc: denied { ioctl } for pid=23917 comm="syz-executor" path="socket:[88472]" dev="sockfs" ino=88472 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1459.652492][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1459.720069][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1459.742155][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1459.750518][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1459.920636][ T30] audit: type=1400 audit(1715.701:6107): avc: denied { write } for pid=23909 comm="syz.6.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1460.412257][ T30] audit: type=1400 audit(1715.701:6108): avc: denied { read } for pid=23909 comm="syz.6.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1460.544748][ T30] audit: type=1400 audit(1715.781:6109): avc: denied { mounton } for pid=23917 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1460.848878][ T30] audit: type=1400 audit(1715.861:6110): avc: denied { read } for pid=23921 comm="syz.0.4675" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1460.899601][ T30] audit: type=1400 audit(1715.861:6111): avc: denied { open } for pid=23921 comm="syz.0.4675" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1461.303091][T23938] tc_dump_action: action bad kind [ 1461.700166][T18078] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1461.810913][T17099] Bluetooth: hci0: command tx timeout [ 1461.872790][T18078] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.899438][T23917] Failed to initialize the IGMP autojoin socket (err -2) [ 1461.901820][T18078] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1461.916768][T18078] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1461.927411][T18078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.959202][T18078] usb 1-1: config 0 descriptor?? [ 1461.969774][T18078] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1461.977059][T18078] dvb-usb: bulk message failed: -22 (3/0) [ 1462.080118][ T3107] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1462.179112][T18078] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1462.299645][T18078] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1462.306886][T18078] usb 1-1: media controller created [ 1462.364379][T18078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.461325][T23966] fuse: fd is not a fuse device [ 1462.562369][T23969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62597 sclass=netlink_route_socket pid=23969 comm=syz.0.4679 [ 1462.587074][T18078] dvb-usb: bulk message failed: -22 (6/0) [ 1462.599224][T23944] wireguard: wireguard0: Could not create IPv4 socket [ 1462.681179][T18078] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1462.733079][T23971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62597 sclass=netlink_route_socket pid=23971 comm=syz.0.4679 [ 1462.776795][T23014] libceph: mon0 (1)[c::]:6789 connect error [ 1462.809570][T23014] libceph: mon0 (1)[c::]:6789 connect error [ 1463.077167][T18078] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input46 [ 1463.175920][T23014] libceph: mon0 (1)[c::]:6789 connect error [ 1463.176818][ T3107] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1463.190039][T23967] ceph: No mds server is up or the cluster is laggy [ 1463.194374][ T3107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.213005][T18078] dvb-usb: schedule remote query interval to 150 msecs. [ 1463.247437][ T3107] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1463.279545][T18078] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1463.319175][T23979] overlayfs: failed to clone upperpath [ 1463.345167][ T3107] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1463.371751][ T3107] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1463.427877][ T3107] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1463.441754][T23944] dvb-usb: bulk message failed: -22 (2/0) [ 1463.504842][ T24] usb 1-1: USB disconnect, device number 65 [ 1463.506519][T18078] dvb-usb: bulk message failed: -22 (1/0) [ 1463.526452][ T3107] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1463.554891][T18078] dvb-usb: error while querying for an remote control event. [ 1463.586530][ T3107] usb 7-1: string descriptor 0 read error: -22 [ 1463.599708][ T3107] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1463.651056][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.661932][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1463.891608][T17099] Bluetooth: hci0: command tx timeout [ 1464.681050][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 1464.681080][ T30] audit: type=1400 audit(1720.691:6193): avc: denied { write } for pid=23991 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1464.827325][ T30] audit: type=1400 audit(1720.751:6194): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1465.503437][T24011] netlink: 'syz.4.4691': attribute type 11 has an invalid length. [ 1465.790751][ T30] audit: type=1800 audit(1720.981:6195): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4690" name="file0" dev="overlay" ino=1834 res=0 errno=0 [ 1465.818145][ T30] audit: type=1400 audit(1721.281:6196): avc: denied { create } for pid=23954 comm="syz.6.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1465.981093][T17099] Bluetooth: hci0: command tx timeout [ 1466.013411][ T30] audit: type=1400 audit(1722.021:6197): avc: denied { bind } for pid=24013 comm="syz.3.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1466.229515][ T3107] usb 7-1: 2:0: failed to get current value for ch 1 (-71) [ 1466.413247][ T30] audit: type=1400 audit(1722.311:6198): avc: denied { execmem } for pid=24021 comm="syz.0.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1466.527873][ T3107] usb 7-1: USB disconnect, device number 87 [ 1467.471471][ T30] audit: type=1800 audit(1723.441:6199): pid=24029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4695" name="file0" dev="overlay" ino=1602 res=0 errno=0 [ 1467.915750][ T30] audit: type=1400 audit(1723.841:6200): avc: denied { read write } for pid=24031 comm="syz.0.4696" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1468.050211][T17099] Bluetooth: hci0: command tx timeout [ 1468.379683][ T30] audit: type=1400 audit(1723.921:6201): avc: denied { open } for pid=24031 comm="syz.0.4696" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1468.425572][ T30] audit: type=1400 audit(1723.991:6202): avc: denied { write } for pid=24001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1468.673699][T24045] IPVS: Scheduler module ip_vs_ not found [ 1468.820340][T18078] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1468.830094][ T3107] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1469.263110][T18078] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1469.319790][T18078] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.322029][ T3107] usb 7-1: config 0 has no interfaces? [ 1469.380114][ T3107] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1469.425808][T18078] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1469.426458][ T3107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.434784][T18078] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1469.434821][T18078] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1469.440547][T24060] overlay: ./file0 is not a directory [ 1469.475893][T18078] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1469.494789][T18078] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1469.575749][ T3107] usb 7-1: config 0 descriptor?? [ 1469.909255][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1469.909273][ T30] audit: type=1400 audit(1725.921:6215): avc: denied { create } for pid=24036 comm="syz.6.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1469.993966][T23917] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1470.007066][ T30] audit: type=1400 audit(1725.921:6216): avc: denied { mount } for pid=24036 comm="syz.6.4698" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1470.030645][T24037] netlink: 'syz.6.4698': attribute type 2 has an invalid length. [ 1470.038401][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4698'. [ 1470.065139][T18078] usb 5-1: string descriptor 0 read error: -22 [ 1470.072469][ T30] audit: type=1400 audit(1726.011:6217): avc: denied { read } for pid=24036 comm="syz.6.4698" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1470.101195][ T30] audit: type=1400 audit(1726.011:6218): avc: denied { open } for pid=24036 comm="syz.6.4698" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1470.126747][ T30] audit: type=1400 audit(1726.011:6219): avc: denied { create } for pid=24036 comm="syz.6.4698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1470.223526][ T30] audit: type=1800 audit(1726.241:6220): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4704" name="file0" dev="overlay" ino=1876 res=0 errno=0 [ 1470.509860][T23917] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1470.550986][T23917] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1470.887177][T18078] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1470.904100][ T24] usb 7-1: USB disconnect, device number 88 [ 1470.920394][T18078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.934990][T23917] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1470.969229][T23917] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1471.140740][T23917] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1471.164097][T23917] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1471.196965][ T30] audit: type=1400 audit(1727.201:6221): avc: denied { write } for pid=24058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.336594][ T30] audit: type=1400 audit(1727.251:6222): avc: denied { create } for pid=24075 comm="syz.3.4705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1471.474164][T23917] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1471.580129][T24082] tc_dump_action: action bad kind [ 1471.692959][ T30] audit: type=1400 audit(1727.711:6223): avc: denied { write } for pid=24085 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.842664][ T30] audit: type=1400 audit(1727.851:6224): avc: denied { unmount } for pid=15026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1473.694714][T18078] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1474.113541][T24130] tc_dump_action: action bad kind [ 1474.165348][T24128] tc_dump_action: action bad kind [ 1474.318692][T24138] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1474.318738][T24138] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1474.319016][T24138] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1474.627607][T24151] overlay: ./file0 is not a directory [ 1474.811043][T23917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1475.038084][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 1475.038099][ T30] audit: type=1400 audit(1731.051:6299): avc: denied { mounton } for pid=24152 comm="syz.4.4715" path="/283/bus" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1475.072644][T23917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1475.088692][ T30] audit: type=1400 audit(1731.051:6300): avc: denied { unlink } for pid=24152 comm="syz.4.4715" name="#e8" dev="tmpfs" ino=1625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1475.115436][T23917] wireguard: wg0: Could not create IPv4 socket [ 1475.125474][T23917] wireguard: wg1: Could not create IPv4 socket [ 1475.135928][T23917] wireguard: wg2: Could not create IPv4 socket [ 1475.147160][ T30] audit: type=1400 audit(1731.051:6301): avc: denied { mount } for pid=24152 comm="syz.4.4715" name="/" dev="overlay" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1475.211454][ T30] audit: type=1400 audit(1731.191:6302): avc: denied { write } for pid=23917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1475.295644][ T30] audit: type=1400 audit(1731.191:6303): avc: denied { read } for pid=23917 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1475.432725][ T30] audit: type=1400 audit(1731.451:6304): avc: denied { read } for pid=24160 comm="syz.6.4716" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1475.466097][T24137] Process accounting resumed [ 1475.548232][T18078] usb 5-1: USB disconnect, device number 56 [ 1475.597048][ T30] audit: type=1400 audit(1731.451:6305): avc: denied { open } for pid=24160 comm="syz.6.4716" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1475.649327][T24167] overlayfs: failed to clone upperpath [ 1475.697459][T24162] IPVS: Scheduler module ip_vs_ not found [ 1475.791738][ T30] audit: type=1400 audit(1731.511:6306): avc: denied { ioctl } for pid=24160 comm="syz.6.4716" path="socket:[89092]" dev="sockfs" ino=89092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1475.931001][ T30] audit: type=1400 audit(1731.531:6307): avc: denied { read } for pid=24160 comm="syz.6.4716" dev="nsfs" ino=4026533094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1476.836746][T24177] IPVS: Scheduler module ip_vs_ not found [ 1476.993403][ T30] audit: type=1400 audit(1731.531:6308): avc: denied { open } for pid=24160 comm="syz.6.4716" path="net:[4026533094]" dev="nsfs" ino=4026533094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1478.864683][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.872605][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.676934][T24231] fuse: Bad value for 'fd' [ 1480.122669][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1480.122684][ T30] audit: type=1400 audit(1736.131:6338): avc: denied { read write } for pid=24225 comm="syz.4.4727" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1480.169915][ T30] audit: type=1400 audit(1736.131:6339): avc: denied { open } for pid=24225 comm="syz.4.4727" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1480.222528][ T30] audit: type=1400 audit(1736.241:6340): avc: denied { read append } for pid=24237 comm="syz.6.4730" name="cec6" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1480.247102][ T30] audit: type=1400 audit(1736.241:6341): avc: denied { ioctl open } for pid=24237 comm="syz.6.4730" path="/dev/cec6" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1480.405617][ T30] audit: type=1400 audit(1736.271:6342): avc: denied { read write } for pid=24237 comm="syz.6.4730" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1480.431420][ T30] audit: type=1400 audit(1736.271:6343): avc: denied { open } for pid=24237 comm="syz.6.4730" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1480.439391][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1480.472196][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1480.485867][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1480.495451][ T30] audit: type=1400 audit(1736.291:6344): avc: denied { write } for pid=24235 comm="syz.0.4729" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1480.547825][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1480.560748][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1480.645729][T24248] tc_dump_action: action bad kind [ 1480.729384][ T30] audit: type=1400 audit(1736.291:6345): avc: denied { write } for pid=24235 comm="syz.0.4729" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1480.927029][ T30] audit: type=1400 audit(1736.391:6346): avc: denied { read } for pid=24241 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1481.100416][ T30] audit: type=1400 audit(1736.391:6347): avc: denied { open } for pid=24241 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1481.552456][T24258] IPVS: Scheduler module ip_vs_ not found [ 1481.651397][T24259] vlan2: entered promiscuous mode [ 1481.656444][T24259] batadv0: entered promiscuous mode [ 1481.694326][T24266] IPVS: Scheduler module ip_vs_ not found [ 1481.796557][T24274] overlayfs: failed to clone upperpath [ 1482.694656][ T50] Bluetooth: hci0: command tx timeout [ 1483.159191][T24241] Failed to initialize the IGMP autojoin socket (err -2) [ 1483.704279][T24310] tc_dump_action: action bad kind [ 1484.041668][ T5708] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1484.242506][ T5708] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1484.292150][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.345194][ T5708] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1484.421853][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.429829][ T5708] usb 5-1: Product: syz [ 1484.460648][ T5708] usb 5-1: Manufacturer: syz [ 1484.480113][ T5708] usb 5-1: SerialNumber: syz [ 1484.609192][ T5708] usb 5-1: config 0 descriptor?? [ 1484.772032][ T50] Bluetooth: hci0: command tx timeout [ 1484.824113][ T5708] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 1484.824157][ T5708] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 1485.173892][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1485.173921][ T30] audit: type=1400 audit(1741.191:6423): avc: denied { create } for pid=24325 comm="syz.0.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1485.216495][ T30] audit: type=1400 audit(1741.231:6424): avc: denied { create } for pid=24326 comm="syz.3.4746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1485.324068][T24330] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1485.332559][T24330] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1485.342901][T24330] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1485.468097][ T5785] usb 5-1: USB disconnect, device number 57 [ 1485.709347][T24338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4747'. [ 1485.933453][T24328] IPVS: Scheduler module ip_vs_ not found [ 1486.647972][ T30] audit: type=1400 audit(1741.261:6425): avc: denied { write } for pid=24326 comm="syz.3.4746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1486.672607][ T30] audit: type=1400 audit(1741.261:6426): avc: denied { read } for pid=24326 comm="syz.3.4746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1486.692414][ T30] audit: type=1400 audit(1741.321:6427): avc: denied { ioctl } for pid=24326 comm="syz.3.4746" path="socket:[89338]" dev="sockfs" ino=89338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1486.717613][ T30] audit: type=1400 audit(1741.331:6428): avc: denied { create } for pid=24325 comm="syz.0.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1486.737797][ T30] audit: type=1400 audit(1741.361:6429): avc: denied { firmware_load } for pid=24325 comm="syz.0.4745" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1486.833750][T24341] batadv_slave_1: entered promiscuous mode [ 1486.850303][ T50] Bluetooth: hci0: command tx timeout [ 1487.219376][ T30] audit: type=1400 audit(1741.401:6430): avc: denied { append } for pid=24325 comm="syz.0.4745" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1487.233045][T24330] Process accounting resumed [ 1487.243912][ T30] audit: type=1400 audit(1741.401:6431): avc: denied { mount } for pid=24325 comm="syz.0.4745" name="/" dev="hugetlbfs" ino=89346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1487.259356][T24341] batadv_slave_1: left promiscuous mode [ 1487.330718][ T30] audit: type=1400 audit(1741.451:6432): avc: denied { create } for pid=24325 comm="syz.0.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1487.660375][ T5708] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1488.448294][T24360] tc_dump_action: action bad kind [ 1488.453650][ T5708] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1488.453705][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.453740][ T5708] usb 1-1: Product: syz [ 1488.453770][ T5708] usb 1-1: Manufacturer: syz [ 1488.453799][ T5708] usb 1-1: SerialNumber: syz [ 1488.471014][ T5708] usb 1-1: config 0 descriptor?? [ 1488.623164][T24367] overlayfs: failed to clone upperpath [ 1488.710742][ T5708] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1488.923363][ T5708] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1488.930268][ T50] Bluetooth: hci0: command tx timeout [ 1490.292993][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1490.293011][ T30] audit: type=1400 audit(1745.421:6496): avc: denied { read } for pid=24372 comm="syz.6.4755" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1490.413513][ T30] audit: type=1400 audit(1745.421:6497): avc: denied { open } for pid=24372 comm="syz.6.4755" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1490.436449][ T30] audit: type=1400 audit(1746.411:6498): avc: denied { read } for pid=24377 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1490.458275][ T30] audit: type=1400 audit(1746.411:6499): avc: denied { open } for pid=24377 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1490.520124][ T3107] usb 1-1: USB disconnect, device number 66 [ 1490.758460][ T30] audit: type=1400 audit(1746.771:6500): avc: denied { read write } for pid=24384 comm="syz.6.4757" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1491.092469][ T30] audit: type=1400 audit(1746.771:6501): avc: denied { open } for pid=24384 comm="syz.6.4757" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1491.208354][ T30] audit: type=1400 audit(1746.821:6502): avc: denied { ioctl } for pid=24388 comm="syz.0.4758" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=930 ioctlcmd=0x6f2f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1491.238588][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4760'. [ 1491.308377][ T30] audit: type=1400 audit(1746.821:6503): avc: denied { create } for pid=24383 comm="syz.3.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.568111][ T30] audit: type=1400 audit(1746.821:6504): avc: denied { ioctl } for pid=24383 comm="syz.3.4756" path="socket:[89425]" dev="sockfs" ino=89425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.701665][ T30] audit: type=1400 audit(1746.851:6505): avc: denied { write } for pid=24383 comm="syz.3.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.753135][T24403] overlay: ./file0 is not a directory [ 1492.377151][T24412] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1492.385730][T24412] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1492.395635][T24412] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1492.973334][T24241] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1493.081973][T24241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.110221][T24241] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1493.168325][T24241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.928325][T24241] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1493.976564][T24241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1493.984162][T24413] Process accounting resumed [ 1494.004431][T24241] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1494.051979][T24241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1495.577812][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1495.577824][ T30] audit: type=1400 audit(1751.591:6556): avc: denied { create } for pid=24453 comm="syz.6.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1495.696316][T24452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1495.746838][ T30] audit: type=1400 audit(1751.691:6557): avc: denied { ioctl } for pid=24453 comm="syz.6.4769" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1496.215000][ T30] audit: type=1400 audit(1751.741:6558): avc: denied { write } for pid=24453 comm="syz.6.4769" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1496.645430][ T30] audit: type=1400 audit(1751.821:6559): avc: denied { connect } for pid=24453 comm="syz.6.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1496.697597][T24473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4773'. [ 1496.763795][ T30] audit: type=1400 audit(1752.211:6560): avc: denied { write } for pid=24426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.969885][ T30] audit: type=1400 audit(1752.851:6561): avc: denied { write } for pid=24472 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1498.086471][ T30] audit: type=1400 audit(1754.101:6562): avc: denied { write } for pid=24483 comm="syz.6.4776" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1498.120738][ T30] audit: type=1400 audit(1754.101:6563): avc: denied { create } for pid=24481 comm="syz.4.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1498.142188][ T30] audit: type=1400 audit(1754.141:6564): avc: denied { bind } for pid=24481 comm="syz.4.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1498.173054][ T30] audit: type=1400 audit(1754.141:6565): avc: denied { accept } for pid=24481 comm="syz.4.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1498.303075][T24489] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1498.311862][T24489] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1498.320589][T24489] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1498.350136][ T3107] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1498.511719][ T3107] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1498.537802][ T3107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.566652][ T3107] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1498.623196][ T3107] usb 7-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 1498.649085][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.679128][ T3107] usb 7-1: Product: syz [ 1498.707315][ T3107] usb 7-1: Manufacturer: syz [ 1498.721410][ T3107] usb 7-1: SerialNumber: syz [ 1498.969509][ T3107] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1499.003779][ T3107] usb 7-1: MIDIStreaming interface descriptor not found [ 1499.136692][T24489] Process accounting resumed [ 1499.203340][T24511] overlayfs: failed to clone upperpath [ 1499.241343][ T3107] usb 7-1: USB disconnect, device number 89 [ 1499.463969][T24241] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1499.501356][T24241] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1499.559781][T24241] wireguard: wg0: Could not create IPv4 socket [ 1499.587523][T24241] wireguard: wg1: Could not create IPv4 socket [ 1499.600845][T24241] wireguard: wg2: Could not create IPv4 socket [ 1501.336722][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1501.336749][ T30] audit: type=1400 audit(1757.351:6576): avc: denied { mount } for pid=24534 comm="syz.3.4780" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1501.521489][T24537] overlayfs: failed to clone upperpath [ 1501.567592][ T30] audit: type=1400 audit(1757.581:6577): avc: denied { create } for pid=24539 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1501.609380][T17099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1501.626815][ T30] audit: type=1400 audit(1757.601:6578): avc: denied { read write } for pid=24539 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1501.650294][T17099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1501.663375][ T30] audit: type=1400 audit(1757.601:6579): avc: denied { open } for pid=24539 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1501.664493][T17099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1501.688656][ T30] audit: type=1400 audit(1757.621:6580): avc: denied { ioctl } for pid=24539 comm="syz-executor" path="socket:[90363]" dev="sockfs" ino=90363 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1501.720057][ T30] audit: type=1400 audit(1757.621:6581): avc: denied { write } for pid=24524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1501.743659][T17099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1501.751139][T17099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1501.779560][ T30] audit: type=1400 audit(1757.781:6582): avc: denied { mounton } for pid=24539 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1502.007821][T24550] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1502.016528][T24550] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1502.026205][T24550] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1502.229182][ T30] audit: type=1400 audit(1758.121:6583): avc: denied { append } for pid=24546 comm="syz.0.4782" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1502.505308][ T30] audit: type=1400 audit(1758.521:6584): avc: denied { write } for pid=24548 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.841098][ T30] audit: type=1400 audit(1758.831:6585): avc: denied { getopt } for pid=24555 comm="syz.6.4784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1503.107840][T24550] Process accounting resumed [ 1503.175323][T24562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4786'. [ 1503.452741][T24539] Failed to initialize the IGMP autojoin socket (err -2) [ 1503.510169][ T3107] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1503.597849][T24580] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1503.606016][T24580] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1503.614476][T24580] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1503.923299][ T50] Bluetooth: hci0: command tx timeout [ 1504.773936][ T3107] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1504.793807][ T3107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.829548][ T3107] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1504.875193][ T3107] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1504.914907][ T3107] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1504.957882][ T3107] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1505.000468][ T3107] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1505.030980][ T3107] usb 1-1: string descriptor 0 read error: -22 [ 1505.052584][ T3107] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1505.083343][ T3107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.480917][T24594] tc_dump_action: action bad kind [ 1505.592261][T24575] Process accounting resumed [ 1505.973167][ T50] Bluetooth: hci0: command tx timeout [ 1506.352841][T24607] IPVS: Scheduler module ip_vs_ not found [ 1506.660998][ T3107] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 1506.821728][ T3107] usb 1-1: USB disconnect, device number 67 [ 1506.855880][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1506.855895][ T30] audit: type=1400 audit(1762.871:6589): avc: denied { write } for pid=24618 comm="syz.3.4794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1506.913880][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1507.147268][T24628] overlayfs: failed to clone upperpath [ 1507.967881][ T30] audit: type=1400 audit(1763.981:6590): avc: denied { write } for pid=24616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1508.050663][ T50] Bluetooth: hci0: command tx timeout [ 1508.151378][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1508.159514][ T30] audit: type=1400 audit(1763.981:6591): avc: denied { mount } for pid=24634 comm="syz.3.4797" name="/" dev="ramfs" ino=90523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1508.262242][ T30] audit: type=1400 audit(1764.271:6592): avc: denied { mount } for pid=24634 comm="syz.3.4797" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1508.358668][ T30] audit: type=1400 audit(1764.311:6593): avc: denied { write } for pid=24640 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.150118][T23014] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1509.258276][T24659] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4799'. [ 1509.495622][ T30] audit: type=1400 audit(1765.511:6594): avc: denied { write } for pid=24648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.613977][ T30] audit: type=1400 audit(1765.631:6595): avc: denied { write } for pid=24667 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.644424][T24539] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1509.672144][T24670] FAULT_INJECTION: forcing a failure. [ 1509.672144][T24670] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.680023][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1509.684734][T24670] CPU: 0 UID: 0 PID: 24670 Comm: syz.4.4803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.684760][T24670] Tainted: [L]=SOFTLOCKUP [ 1509.684766][T24670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1509.684775][T24670] Call Trace: [ 1509.684781][T24670] [ 1509.684787][T24670] dump_stack_lvl+0x100/0x190 [ 1509.684811][T24670] should_fail_ex.cold+0x5/0xa [ 1509.684831][T24670] should_failslab+0xc2/0x120 [ 1509.684850][T24670] __kmalloc_noprof+0xfc/0x820 [ 1509.684866][T24670] ? rcu_is_watching+0x12/0xc0 [ 1509.684887][T24670] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1509.684915][T24670] tomoyo_realpath_from_path+0xb6/0x690 [ 1509.684942][T24670] tomoyo_path_number_perm+0x23c/0x580 [ 1509.684960][T24670] ? tomoyo_path_number_perm+0x22e/0x580 [ 1509.684985][T24670] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1509.685026][T24670] ? find_held_lock+0x2b/0x80 [ 1509.685047][T24670] ? __fget_files+0x215/0x3d0 [ 1509.685069][T24670] ? hook_file_ioctl_common+0x140/0x440 [ 1509.685092][T24670] ? __fget_files+0x215/0x3d0 [ 1509.685119][T24670] ? __fget_files+0x21f/0x3d0 [ 1509.685145][T24670] security_file_ioctl+0xd3/0x230 [ 1509.685167][T24670] __x64_sys_ioctl+0xb7/0x210 [ 1509.685190][T24670] do_syscall_64+0x115/0x870 [ 1509.685211][T24670] ? clear_bhb_loop+0x40/0x90 [ 1509.685230][T24670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.685246][T24670] RIP: 0033:0x7f77b4f9de59 [ 1509.685259][T24670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.685274][T24670] RSP: 002b:00007f77b5f3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.685290][T24670] RAX: ffffffffffffffda RBX: 00007f77b5225fa0 RCX: 00007f77b4f9de59 [ 1509.685300][T24670] RDX: 0000200000000580 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 1509.685310][T24670] RBP: 00007f77b5f3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.685319][T24670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.685329][T24670] R13: 00007f77b5226038 R14: 00007f77b5225fa0 R15: 00007ffeddf4dbc8 [ 1509.685351][T24670] [ 1509.685357][T24670] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1509.710722][T24539] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1509.949659][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1509.967632][T24539] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1509.995620][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1510.004329][T24539] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1510.112985][ T30] audit: type=1400 audit(1766.131:6596): avc: denied { write } for pid=24676 comm="syz.0.4805" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1510.152059][ T50] Bluetooth: hci0: command tx timeout [ 1510.176546][T24539] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1510.444653][ T30] audit: type=1400 audit(1766.431:6597): avc: denied { create } for pid=24673 comm="syz.4.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1510.444697][ T30] audit: type=1400 audit(1766.431:6598): avc: denied { setopt } for pid=24673 comm="syz.4.4804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1510.604932][T23014] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1511.055382][T23014] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.065565][T23014] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1511.074521][T23014] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1511.086407][T23014] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1511.569653][T24714] tc_dump_action: action bad kind [ 1511.980893][T23014] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1511.988930][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1511.988947][ T30] audit: type=1400 audit(1768.001:6635): avc: denied { read write } for pid=15026 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1511.993878][T23014] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1512.157227][T24718] overlayfs: failed to clone upperpath [ 1512.184315][T23014] usb 7-1: string descriptor 0 read error: -71 [ 1512.208408][T23014] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1512.215203][ T30] audit: type=1400 audit(1768.001:6636): avc: denied { open } for pid=15026 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1512.253324][T24721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1512.302498][T23014] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.309802][ T30] audit: type=1400 audit(1768.001:6637): avc: denied { ioctl } for pid=15026 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1512.402458][T23014] usb 7-1: can't set config #1, error -71 [ 1512.462035][ T30] audit: type=1400 audit(1768.041:6638): avc: denied { search } for pid=24715 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.471435][T23014] usb 7-1: USB disconnect, device number 90 [ 1512.907439][T24742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1513.616827][ T30] audit: type=1400 audit(1768.041:6639): avc: denied { search } for pid=24715 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.703465][ T30] audit: type=1400 audit(1768.041:6640): avc: denied { search } for pid=24715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.851415][ T30] audit: type=1400 audit(1768.041:6641): avc: denied { read } for pid=24715 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.874497][ T30] audit: type=1400 audit(1768.041:6642): avc: denied { read open } for pid=24715 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1513.915204][ T30] audit: type=1400 audit(1768.041:6643): avc: denied { getattr } for pid=24715 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.023013][ T30] audit: type=1400 audit(1768.171:6644): avc: denied { mounton } for pid=24716 comm="syz.3.4808" path="/481/bus" dev="tmpfs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1514.884148][T24539] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1514.924062][T24539] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1515.366794][T24539] wireguard: wg0: Could not create IPv4 socket [ 1515.375262][T24539] wireguard: wg1: Could not create IPv4 socket [ 1515.385196][T24539] wireguard: wg2: Could not create IPv4 socket [ 1515.951379][T12189] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1515.969439][T24782] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1515.977997][T24782] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1515.987187][T24782] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1516.153027][T12189] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1516.177589][T12189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.204376][T12189] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1516.232123][T12189] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1516.246636][T12189] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1516.273999][T12189] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1516.286056][T12189] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1516.297632][T12189] usb 5-1: string descriptor 0 read error: -22 [ 1516.308057][T12189] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1516.310205][T12353] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1516.340571][T12189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.525859][T12353] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1516.550825][T12353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.576588][T12353] usb 7-1: config 0 has no interface number 0 [ 1516.609486][T12353] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1516.625934][T12353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.643914][T12353] usb 7-1: Product: syz [ 1516.657658][T12353] usb 7-1: Manufacturer: syz [ 1516.673352][T12353] usb 7-1: SerialNumber: syz [ 1516.696937][T12353] usb 7-1: config 0 descriptor?? [ 1516.721247][T12353] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1516.744519][T12353] uvcvideo 7-1:0.64: No valid video chain found. [ 1516.812093][T24782] Process accounting resumed [ 1517.019143][ T24] usb 7-1: USB disconnect, device number 91 [ 1517.317656][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1517.317712][ T30] audit: type=1400 audit(1773.331:6700): avc: denied { read write } for pid=24802 comm="syz.6.4823" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1517.628810][ T30] audit: type=1400 audit(1773.371:6701): avc: denied { open } for pid=24802 comm="syz.6.4823" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1517.866092][T12189] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1517.957595][ T30] audit: type=1400 audit(1773.371:6702): avc: denied { ioctl } for pid=24802 comm="syz.6.4823" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1518.155020][ T30] audit: type=1400 audit(1773.381:6703): avc: denied { unlink } for pid=24802 comm="syz.6.4823" name="#f6" dev="tmpfs" ino=2575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1518.191529][T12189] usb 5-1: USB disconnect, device number 58 [ 1518.233868][ T30] audit: type=1400 audit(1773.391:6704): avc: denied { mount } for pid=24802 comm="syz.6.4823" name="/" dev="overlay" ino=2569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1518.279765][ T30] audit: type=1800 audit(1773.421:6705): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4823" name="file0" dev="overlay" ino=2577 res=0 errno=0 [ 1518.356073][ T30] audit: type=1400 audit(1773.491:6706): avc: denied { create } for pid=24775 comm="syz.4.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1518.429536][ T30] audit: type=1400 audit(1773.491:6707): avc: denied { bind } for pid=24775 comm="syz.4.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1518.490105][ T30] audit: type=1400 audit(1774.081:6708): avc: denied { unmount } for pid=15026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1518.547903][ T30] audit: type=1400 audit(1774.441:6709): avc: denied { write } for pid=24812 comm="syz.6.4825" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1519.123551][T24826] tc_dump_action: action bad kind [ 1519.358315][T24831] tc_dump_action: action bad kind [ 1520.872443][T24868] overlayfs: failed to clone upperpath [ 1521.402703][T24870] Failed to initialize the IGMP autojoin socket (err -2) [ 1521.554768][ T3107] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1521.603390][T17099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1521.631849][T17099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1521.640177][T17099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1521.649620][T17099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1521.660581][T17099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1521.711588][ T3107] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1521.738016][ T3107] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.813299][ T3107] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1521.850113][ T3107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.883669][ T3107] usb 7-1: Product: syz [ 1521.905698][ T3107] usb 7-1: Manufacturer: syz [ 1521.929279][ T3107] usb 7-1: SerialNumber: syz [ 1521.959983][ T3107] usb 7-1: config 0 descriptor?? [ 1521.993372][ T3107] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 1522.022015][ T3107] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 1522.189576][ T5708] usb 7-1: USB disconnect, device number 92 [ 1522.501954][T24881] Failed to initialize the IGMP autojoin socket (err -2) [ 1522.728186][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 1522.728202][ T30] audit: type=1400 audit(1778.741:6781): avc: denied { write } for pid=24888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1522.850452][ T5785] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1522.884018][ T30] audit: type=1400 audit(1778.901:6782): avc: denied { ioctl } for pid=24911 comm="syz.6.4835" path="socket:[91526]" dev="sockfs" ino=91526 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1523.016255][ T30] audit: type=1400 audit(1779.031:6783): avc: denied { write } for pid=24913 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.058708][ T5785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1523.088271][ T5785] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.115702][ T30] audit: type=1400 audit(1779.101:6784): avc: denied { prog_run } for pid=24914 comm="syz.6.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1523.134497][ T5785] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1523.174278][ T5785] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1523.265188][ T5785] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1523.353330][ T5785] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1523.459229][ T5785] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1523.550199][ T5785] usb 5-1: string descriptor 0 read error: -22 [ 1523.564368][ T5785] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1523.593217][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.742035][T17099] Bluetooth: hci0: command tx timeout [ 1524.683365][ T30] audit: type=1400 audit(1780.701:6785): avc: denied { read } for pid=24925 comm="syz.0.4839" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1524.768205][ T30] audit: type=1400 audit(1780.721:6786): avc: denied { open } for pid=24925 comm="syz.0.4839" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1524.879786][ T30] audit: type=1400 audit(1780.891:6787): avc: denied { create } for pid=24923 comm="syz.6.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1525.311380][ T30] audit: type=1400 audit(1780.931:6788): avc: denied { create } for pid=24905 comm="syz.4.4834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1525.367778][ T5785] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1525.389004][ T30] audit: type=1400 audit(1780.961:6789): avc: denied { read write } for pid=24923 comm="syz.6.4838" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1525.470153][ T30] audit: type=1400 audit(1780.961:6790): avc: denied { open } for pid=24923 comm="syz.6.4838" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1525.470284][T24936] IPVS: Scheduler module ip_vs_ not found [ 1525.525556][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1525.576107][T24941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1525.596912][ T5785] usb 5-1: USB disconnect, device number 59 [ 1525.823835][T17099] Bluetooth: hci0: command tx timeout [ 1526.080491][T24955] tc_dump_action: action bad kind [ 1526.942766][T24962] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1526.951204][T24962] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1526.961126][T24962] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1527.821218][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1527.821234][ T30] audit: type=1400 audit(1783.831:6820): avc: denied { write } for pid=24967 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1527.927991][T17099] Bluetooth: hci0: command tx timeout [ 1528.255744][T24962] Process accounting resumed [ 1528.265565][ T30] audit: type=1400 audit(1783.831:6821): avc: denied { remove_name } for pid=24967 comm="rm" name="resolv.conf.virt_wifi0.link" dev="tmpfs" ino=19361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1528.396927][ T30] audit: type=1400 audit(1783.831:6822): avc: denied { unlink } for pid=24967 comm="rm" name="resolv.conf.virt_wifi0.link" dev="tmpfs" ino=19361 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1528.483461][ T30] audit: type=1400 audit(1783.871:6823): avc: denied { read } for pid=24960 comm="syz.0.4844" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1528.492976][T24881] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1528.579234][ T30] audit: type=1400 audit(1783.871:6824): avc: denied { open } for pid=24960 comm="syz.0.4844" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1528.581388][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1528.634792][ T30] audit: type=1400 audit(1783.971:6825): avc: denied { read write } for pid=24960 comm="syz.0.4844" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1528.642166][T24881] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1528.664778][ T30] audit: type=1400 audit(1783.981:6826): avc: denied { open } for pid=24960 comm="syz.0.4844" path="/dev/video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1528.707056][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1528.716365][ T30] audit: type=1400 audit(1784.081:6827): avc: denied { prog_load } for pid=24960 comm="syz.0.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1528.735469][T24881] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1528.750673][ T30] audit: type=1400 audit(1784.111:6828): avc: denied { bpf } for pid=24960 comm="syz.0.4844" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1528.790090][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1528.802847][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1528.823630][T24881] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1528.831501][ T30] audit: type=1400 audit(1784.121:6829): avc: denied { perfmon } for pid=24960 comm="syz.0.4844" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1528.877968][T24881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1528.953394][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1528.966914][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.988842][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1529.018884][ T5785] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1529.065799][ T24] usb 5-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 1529.094295][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.118908][ T24] usb 5-1: Product: syz [ 1529.135550][ T24] usb 5-1: Manufacturer: syz [ 1529.147410][ T24] usb 5-1: SerialNumber: syz [ 1529.176562][ T5785] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1529.208870][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.262122][ T5785] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1529.275610][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.303950][ T5785] usb 1-1: Product: syz [ 1529.318290][ T5785] usb 1-1: Manufacturer: syz [ 1529.332843][ T5785] usb 1-1: SerialNumber: syz [ 1529.360182][ T5785] usb 1-1: config 0 descriptor?? [ 1529.385902][ T5785] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 1529.403527][ T5785] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1529.442576][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1529.469505][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 1529.588300][ T5785] usb 1-1: USB disconnect, device number 68 [ 1529.647807][ T24] usb 5-1: USB disconnect, device number 60 [ 1529.970845][T17099] Bluetooth: hci0: command tx timeout [ 1531.101144][T12353] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1531.560106][T12353] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1531.650812][T12353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.738171][T12353] usb 1-1: config 0 has no interface number 0 [ 1531.781984][T12353] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1531.792529][T12353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.919519][T12353] usb 1-1: Product: syz [ 1531.961532][T12353] usb 1-1: Manufacturer: syz [ 1531.983016][T12353] usb 1-1: SerialNumber: syz [ 1532.007883][T12353] usb 1-1: config 0 descriptor?? [ 1532.086960][T12353] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1532.105182][T12353] uvcvideo 1-1:0.64: No valid video chain found. [ 1532.193691][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4852'. [ 1533.092405][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1533.092421][ T30] audit: type=1400 audit(1789.111:6866): avc: denied { allowed } for pid=25041 comm="syz.6.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1533.474378][ T30] audit: type=1400 audit(1789.491:6867): avc: denied { map_read map_write } for pid=25041 comm="syz.6.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1533.694988][ T30] audit: type=1400 audit(1789.521:6868): avc: denied { create } for pid=25041 comm="syz.6.4853" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1533.849571][ T30] audit: type=1400 audit(1789.521:6869): avc: denied { map } for pid=25041 comm="syz.6.4853" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1534.057527][ T30] audit: type=1400 audit(1789.521:6870): avc: denied { read write } for pid=25041 comm="syz.6.4853" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1534.092592][T24881] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1534.116466][T24881] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1534.136551][ T30] audit: type=1400 audit(1789.701:6871): avc: denied { mount } for pid=25041 comm="syz.6.4853" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1534.183252][T24881] wireguard: wg0: Could not create IPv4 socket [ 1534.315419][T24881] wireguard: wg1: Could not create IPv4 socket [ 1534.322061][ T30] audit: type=1400 audit(1789.701:6872): avc: denied { read write } for pid=25041 comm="syz.6.4853" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1534.346451][ T30] audit: type=1400 audit(1789.701:6873): avc: denied { open } for pid=25041 comm="syz.6.4853" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1534.348930][T24881] wireguard: wg2: Could not create IPv4 socket [ 1534.379919][ T30] audit: type=1400 audit(1790.031:6874): avc: denied { unmount } for pid=15026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1535.050152][T25053] tc_dump_action: action bad kind [ 1535.219661][ T30] audit: type=1400 audit(1790.451:6875): avc: denied { create } for pid=25050 comm="syz.3.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1535.259531][ T24] usb 1-1: USB disconnect, device number 69 [ 1535.331513][T25058] 9p: Bad value for 'wfdno' [ 1537.462321][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4863'. [ 1537.733575][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1537.754930][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1537.765213][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1538.022593][T25124] tc_dump_action: action bad kind [ 1538.114194][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1538.114226][ T30] audit: type=1400 audit(1794.011:6896): avc: denied { create } for pid=25118 comm="syz.6.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1538.125334][ T30] audit: type=1400 audit(1794.131:6897): avc: denied { write } for pid=25121 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1538.129240][ T30] audit: type=1400 audit(1794.131:6898): avc: denied { read } for pid=25121 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1538.142794][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1538.146718][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1538.162848][ T30] audit: type=1400 audit(1794.181:6899): avc: denied { ioctl } for pid=25121 comm="syz-executor" path="socket:[91058]" dev="sockfs" ino=91058 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1538.169335][ T30] audit: type=1400 audit(1794.181:6900): avc: denied { read } for pid=25121 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1538.170491][ T30] audit: type=1400 audit(1794.181:6901): avc: denied { open } for pid=25121 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1538.188038][ T30] audit: type=1400 audit(1794.181:6902): avc: denied { mounton } for pid=25121 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1538.243177][ T30] audit: type=1400 audit(1794.241:6903): avc: denied { search } for pid=25099 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.246352][ T30] audit: type=1400 audit(1794.241:6904): avc: denied { module_request } for pid=25121 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1538.347503][ T30] audit: type=1400 audit(1794.351:6905): avc: denied { sys_module } for pid=25121 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1538.783544][T25134] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4865'. [ 1539.470342][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1539.988547][T25158] loop5: detected capacity change from 0 to 7 [ 1540.009516][T25121] Failed to initialize the IGMP autojoin socket (err -2) [ 1540.024191][T25158] Dev loop5: unable to read RDB block 7 [ 1540.039779][T25158] loop5: unable to read partition table [ 1540.052765][T25158] loop5: partition table beyond EOD, truncated [ 1540.065668][T25158] loop_reread_partitions: partition scan of loop5 (þ被x ) failed (rc=-5) [ 1540.301071][T17099] Bluetooth: hci0: command tx timeout [ 1540.311585][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.319848][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1540.543050][T25174] CIFS mount error: No usable UNC path provided in device string! [ 1540.543050][T25174] [ 1540.553101][T25174] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1540.888724][T25186] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1540.897092][T25186] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1540.911085][T25186] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1542.500294][T17099] Bluetooth: hci0: command tx timeout [ 1542.579497][T25186] Process accounting resumed [ 1542.598798][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1542.779037][T25205] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1542.787670][T25205] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1542.796324][T25205] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1544.260770][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 1544.260786][ T30] audit: type=1400 audit(1800.281:7035): avc: denied { read write } for pid=25214 comm="syz.0.4878" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1544.419312][T25201] Process accounting resumed [ 1544.429604][ T30] audit: type=1400 audit(1800.281:7036): avc: denied { open } for pid=25214 comm="syz.0.4878" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1544.560364][T17099] Bluetooth: hci0: command tx timeout [ 1544.606962][ T30] audit: type=1400 audit(1800.321:7037): avc: denied { ioctl } for pid=25214 comm="syz.0.4878" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1544.721986][ T30] audit: type=1400 audit(1800.481:7038): avc: denied { create } for pid=25212 comm="syz.6.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1544.841984][ T30] audit: type=1400 audit(1800.511:7039): avc: denied { connect } for pid=25212 comm="syz.6.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1544.862670][ T30] audit: type=1400 audit(1800.581:7040): avc: denied { write } for pid=25212 comm="syz.6.4880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1544.882758][ T30] audit: type=1400 audit(1800.611:7041): avc: denied { create } for pid=25214 comm="syz.0.4878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1544.904215][ T5708] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1545.080650][ T5708] usb 7-1: device descriptor read/64, error -71 [ 1545.125385][T25223] overlay: ./file0 is not a directory [ 1545.126353][ T30] audit: type=1400 audit(1801.121:7042): avc: denied { mounton } for pid=25222 comm="syz.4.4883" path="/319/file0" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1546.110097][ T5708] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1546.250200][ T5708] usb 7-1: device descriptor read/64, error -71 [ 1546.371367][ T5708] usb usb7-port1: attempt power cycle [ 1546.556460][T25234] overlay: ./file0 is not a directory [ 1546.610760][T17099] Bluetooth: hci0: command tx timeout [ 1546.670706][ T3107] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1546.770519][ T5708] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1547.035030][T25238] overlayfs: failed to clone upperpath [ 1547.052557][T25121] netdevsim netdevsim5 netdevsim0: renamed from eth9 [ 1547.097962][T25121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1547.105338][ T3107] usb 1-1: Using ep0 maxpacket: 32 [ 1547.124817][ T3107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.139470][T25121] netdevsim netdevsim5 netdevsim1: renamed from eth10 [ 1547.182369][ T3107] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1547.202727][T25121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1547.229311][ T3107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.244322][ T5708] usb 7-1: device descriptor read/8, error -71 [ 1547.273584][T25121] netdevsim netdevsim5 netdevsim2: renamed from eth11 [ 1547.288645][ T3107] usb 1-1: Product: syz [ 1547.302015][ T3107] usb 1-1: Manufacturer: syz [ 1547.317137][T25121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1547.327830][ T3107] usb 1-1: SerialNumber: syz [ 1547.338649][T25121] netdevsim netdevsim5 netdevsim3: renamed from eth12 [ 1547.348419][ T3107] usb 1-1: config 0 descriptor?? [ 1547.370618][ T3107] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1547.389233][T25121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1548.084863][ T3107] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 1548.257805][ T30] audit: type=1400 audit(1804.271:7043): avc: denied { read } for pid=25246 comm="syz.4.4891" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1548.513410][ T3107] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 1548.526272][ T3107] usb 1-1: USB disconnect, device number 70 [ 1548.537388][ T30] audit: type=1400 audit(1804.271:7044): avc: denied { open } for pid=25246 comm="syz.4.4891" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1549.151899][T25252] IPVS: Scheduler module ip_vs_ not found [ 1549.826719][T25269] tc_dump_action: action bad kind [ 1550.140985][T25280] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1550.149236][T25280] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1550.157799][T25280] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1550.703869][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1550.703885][ T30] audit: type=1400 audit(1806.711:7046): avc: denied { mounton } for pid=25286 comm="syz.0.4899" path="/359/file0" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1551.233200][T25280] Process accounting resumed [ 1552.654094][ T30] audit: type=1400 audit(1808.671:7047): avc: denied { setopt } for pid=25286 comm="syz.0.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1552.780110][ T3107] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1552.900180][ T5708] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1552.951089][ T3107] usb 5-1: Using ep0 maxpacket: 8 [ 1552.970980][ T3107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1553.002367][ T3107] usb 5-1: config 5 has an invalid interface number: 116 but max is 0 [ 1553.029801][ T3107] usb 5-1: config 5 has no interface number 0 [ 1553.058217][ T3107] usb 5-1: config 5 interface 116 has no altsetting 0 [ 1553.088542][ T3107] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=bb.73 [ 1553.126525][ T3107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.152660][ T3107] usb 5-1: Product: syz [ 1553.163318][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.166253][ T3107] usb 5-1: Manufacturer: syz [ 1553.198369][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.207048][ T3107] usb 5-1: SerialNumber: syz [ 1553.208093][ T5708] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1553.225482][ T5708] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1553.273102][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.317895][ T5708] usb 7-1: config 0 descriptor?? [ 1553.434232][T25304] netlink: 'syz.4.4903': attribute type 5 has an invalid length. [ 1553.473236][ T3107] gspca_main: spca505-2.14.0 probing 041e:401d [ 1553.506094][ T3107] gspca_spca505: reg write: error -71 [ 1553.522320][ T3107] spca505 5-1:5.116: probe with driver spca505 failed with error -5 [ 1553.558902][ T3107] usb 5-1: USB disconnect, device number 61 [ 1553.599808][T25121] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1553.672912][T25121] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1553.690653][T25121] wireguard: wg0: Could not create IPv4 socket [ 1553.699224][T25121] wireguard: wg1: Could not create IPv4 socket [ 1553.707281][T25121] wireguard: wg2: Could not create IPv4 socket [ 1554.043805][ T30] audit: type=1400 audit(1810.061:7048): avc: denied { remount } for pid=25307 comm="syz.6.4904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1555.011131][ T5708] usbhid 7-1:0.0: can't add hid device: -71 [ 1555.044611][T25331] IPVS: Scheduler module ip_vs_ not found [ 1555.047274][ T5708] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1555.077090][ T5708] usb 7-1: USB disconnect, device number 97 [ 1555.140093][ T30] audit: type=1400 audit(1810.101:7049): avc: denied { create } for pid=25307 comm="syz.6.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1556.144900][ T30] audit: type=1400 audit(1812.121:7050): avc: denied { write } for pid=25339 comm="syz.4.4907" name="igmp" dev="proc" ino=4026533241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1556.215169][T25344] dlm: non-version read from control device 40 [ 1556.224849][ T30] audit: type=1400 audit(1812.211:7051): avc: denied { mount } for pid=25336 comm="syz.3.4906" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1556.280239][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1556.366396][T25347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1557.317440][ T30] audit: type=1400 audit(1813.261:7052): avc: denied { mmap_zero } for pid=25350 comm="syz.3.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1557.496148][ T30] audit: type=1400 audit(1813.441:7053): avc: denied { create } for pid=25350 comm="syz.3.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1557.545059][T25355] 9p: Bad value for 'wfdno' [ 1557.683794][ T30] audit: type=1400 audit(1813.591:7054): avc: denied { write } for pid=25350 comm="syz.3.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1558.529930][ T30] audit: type=1400 audit(1814.541:7055): avc: denied { write } for pid=25367 comm="syz.4.4910" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1558.650288][ T30] audit: type=1400 audit(1814.551:7056): avc: denied { read write } for pid=25366 comm="syz.6.4909" name="vbi5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1558.696227][ T30] audit: type=1400 audit(1814.551:7057): avc: denied { open } for pid=25366 comm="syz.6.4909" path="/dev/vbi5" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1558.722113][ T30] audit: type=1400 audit(1814.551:7058): avc: denied { ioctl } for pid=25366 comm="syz.6.4909" path="/dev/vbi5" dev="devtmpfs" ino=982 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1558.862310][T25373] tc_dump_action: action bad kind [ 1558.896500][ T30] audit: type=1400 audit(1814.551:7059): avc: denied { create } for pid=25366 comm="syz.6.4909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1559.533360][T12353] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1559.663146][T25386] overlayfs: failed to clone upperpath [ 1559.713378][T12353] usb 7-1: Using ep0 maxpacket: 32 [ 1559.728987][T18122] Bluetooth: Error in BCSP hdr checksum [ 1559.737981][T12353] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1559.758179][T12353] usb 7-1: config 0 has no interface number 0 [ 1559.777543][T12353] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1559.801210][T12353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.812879][T21973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1559.821563][ T3107] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1559.840894][T21973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1559.851415][T21973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1559.861321][T21973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1559.869856][T21973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1559.881438][T12353] usb 7-1: Product: syz [ 1559.885606][T12353] usb 7-1: Manufacturer: syz [ 1559.890194][T12353] usb 7-1: SerialNumber: syz [ 1559.901082][T12353] usb 7-1: config 0 descriptor?? [ 1559.996921][ T3107] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1560.020648][ T3107] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.032741][ T3107] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1560.059428][ T3107] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1560.090827][T19916] Bluetooth: Error in BCSP hdr checksum [ 1560.098286][T12353] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1560.107150][T12353] usb 7-1: selecting invalid altsetting 1 [ 1560.112864][T12353] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1560.131159][T12353] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1560.141529][T12353] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1560.149779][T12353] usb 7-1: media controller created [ 1560.163213][T12353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1560.249910][T25402] IPVS: Scheduler module ip_vs_ not found [ 1560.286428][ T3107] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1560.300664][ T3107] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1560.311683][ T3107] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1560.323511][ T3107] usb 5-1: string descriptor 0 read error: -22 [ 1560.331126][ T3107] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1560.341847][ T3107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.430627][T12353] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1560.448223][T12353] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1560.464081][T12353] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1560.542548][T12353] usb 7-1: USB disconnect, device number 98 [ 1560.649007][T25417] No fuse device found [ 1560.694242][T21973] Bluetooth: hci0: command 0x1003 tx timeout [ 1560.700641][T17099] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1560.719642][T25388] Failed to initialize the IGMP autojoin socket (err -2) [ 1561.296000][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1561.296016][ T30] audit: type=1400 audit(1817.311:7115): avc: denied { mounton } for pid=25416 comm="syz.0.4920" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1561.328811][T25433] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1561.339782][T25433] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1561.348890][T25433] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1561.356947][T25433] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1561.551854][ T30] audit: type=1400 audit(1817.571:7116): avc: denied { create } for pid=25380 comm="syz.4.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1562.088924][T17099] Bluetooth: hci5: command tx timeout [ 1562.140457][ T30] audit: type=1400 audit(1817.631:7117): avc: denied { bind } for pid=25380 comm="syz.4.4914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1562.162136][ T30] audit: type=1400 audit(1818.121:7118): avc: denied { read } for pid=25380 comm="syz.4.4914" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1562.190321][ T30] audit: type=1400 audit(1818.121:7119): avc: denied { open } for pid=25380 comm="syz.4.4914" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1562.591779][ T3107] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 1562.741410][ T3107] usb 5-1: USB disconnect, device number 62 [ 1562.811947][ T30] audit: type=1400 audit(1818.821:7120): avc: denied { create } for pid=25441 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1562.866306][T12189] usb 7-1: new low-speed USB device number 99 using dummy_hcd [ 1562.937884][ T30] audit: type=1400 audit(1818.951:7121): avc: denied { setopt } for pid=25441 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1563.071179][T12189] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1563.087894][T12189] usb 7-1: config 179 has no interface number 0 [ 1563.117990][T12189] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1563.132010][ T30] audit: type=1400 audit(1819.121:7122): avc: denied { write } for pid=25451 comm="syz.0.4926" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1563.292058][T12189] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1563.640864][T12189] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1563.640901][T12189] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1563.640931][T12189] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1563.640975][T12189] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1563.640998][T12189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.657634][T25444] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1563.753238][ T30] audit: type=1400 audit(1819.751:7123): avc: denied { create } for pid=25441 comm="syz.3.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1563.796701][ T30] audit: type=1400 audit(1819.821:7124): avc: denied { ioctl } for pid=25440 comm="syz.6.4924" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1563.918305][T12189] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1564.037086][T12189] xpad 7-1:179.65: probe with driver xpad failed with error -90 [ 1564.142412][T17099] Bluetooth: hci5: command tx timeout [ 1564.183959][T25456] tc_dump_action: action bad kind [ 1670.189948][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1670.196910][ C1] rcu: 0-...!: (1 GPs behind) idle=68c4/1/0x4000000000000000 softirq=154755/154756 fqs=0 [ 1670.208200][ C1] rcu: (detected by 1, t=10502 jiffies, g=173681, q=410 ncpus=2) [ 1670.215996][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1670.216021][ C0] NMI backtrace for cpu 0 [ 1670.216035][ C0] CPU: 0 UID: 0 PID: 4978 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.216055][ C0] Tainted: [L]=SOFTLOCKUP [ 1670.216060][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1670.216068][ C0] RIP: 0010:lock_is_held_type+0xf1/0x140 [ 1670.216092][ C0] Code: 19 00 00 ba ff ff ff ff 65 0f c1 15 19 d5 aa 08 83 fa 01 8b 44 24 04 75 2d 9c 5a 80 e6 02 75 47 41 f7 c5 00 02 00 00 74 01 fb <48> 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7c 3f 03 00 c3 cc cc [ 1670.216104][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00000046 [ 1670.216117][ C0] RAX: 0000000000000001 RBX: ffff8880273ee2c0 RCX: 0000000000000001 [ 1670.216126][ C0] RDX: 0000000000000046 RSI: ffffffff8e17cd3b RDI: ffffffff8c400c80 [ 1670.216134][ C0] RBP: ffff88807e6f2540 R08: 0000000000000005 R09: 0000000000000000 [ 1670.216143][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 1670.216151][ C0] R13: 0000000000000046 R14: ffff88807e6f3130 R15: 0000000000000002 [ 1670.216160][ C0] FS: 00007ff2c6585880(0000) GS:ffff888123dec000(0000) knlGS:0000000000000000 [ 1670.216177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1670.216186][ C0] CR2: 0000001b32923ffc CR3: 0000000026d48000 CR4: 00000000003526f0 [ 1670.216195][ C0] Call Trace: [ 1670.216200][ C0] [ 1670.216207][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1670.216221][ C0] advance_sched+0x838/0xd20 [ 1670.216234][ C0] ? find_held_lock+0x2b/0x80 [ 1670.216254][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1670.216270][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1670.216282][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1670.216304][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1670.216328][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1670.216348][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1670.216365][ C0] [ 1670.216369][ C0] [ 1670.216374][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1670.216389][ C0] RIP: 0010:lock_release+0x1b/0x310 [ 1670.216404][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 54 55 53 48 89 fb 48 83 ec 18 65 48 8b 2d bd d9 7d 12 <48> 89 6c 24 10 48 89 f5 0f 1f 44 00 00 65 8b 05 d5 d9 7d 12 83 f8 [ 1670.216416][ C0] RSP: 0018:ffffc900032ef600 EFLAGS: 00000286 [ 1670.216427][ C0] RAX: 0000000000000001 RBX: ffffffff8ebe6100 RCX: 0000000000000000 [ 1670.216435][ C0] RDX: 0000000000000000 RSI: ffffffff81f318a8 RDI: ffffffff8ebe6100 [ 1670.216444][ C0] RBP: 857fd6e03d054c00 R08: 000000001ddcebda R09: 0000000000000007 [ 1670.216453][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f3dda0 [ 1670.216461][ C0] R13: ffffc900032ef768 R14: 0000000000000000 R15: ffff88807e6f2540 [ 1670.216471][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1670.216493][ C0] ? is_module_text_address+0x148/0x220 [ 1670.216513][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1670.216533][ C0] is_module_text_address+0x14d/0x220 [ 1670.216549][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1670.216568][ C0] kernel_text_address+0x81/0x100 [ 1670.216582][ C0] __kernel_text_address+0xd/0x30 [ 1670.216595][ C0] unwind_get_return_address+0x59/0xa0 [ 1670.216616][ C0] arch_stack_walk+0xa6/0xf0 [ 1670.216638][ C0] stack_trace_save+0x8e/0xc0 [ 1670.216657][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1670.216679][ C0] kasan_save_stack+0x30/0x50 [ 1670.216692][ C0] ? kasan_save_stack+0x30/0x50 [ 1670.216704][ C0] ? kasan_save_track+0x14/0x30 [ 1670.216716][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1670.216728][ C0] ? __kmalloc_noprof+0x322/0x820 [ 1670.216741][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1670.216759][ C0] ? tomoyo_path_perm+0x276/0x460 [ 1670.216773][ C0] ? security_inode_getattr+0x116/0x280 [ 1670.216790][ C0] ? vfs_fstat+0x4b/0xe0 [ 1670.216803][ C0] ? __do_sys_newfstat+0x8b/0x110 [ 1670.216816][ C0] ? do_syscall_64+0x115/0x870 [ 1670.216833][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.216859][ C0] kasan_save_track+0x14/0x30 [ 1670.216872][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1670.216885][ C0] __kmalloc_noprof+0x322/0x820 [ 1670.216898][ C0] ? rcu_is_watching+0x12/0xc0 [ 1670.216916][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1670.216935][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 1670.216956][ C0] tomoyo_path_perm+0x276/0x460 [ 1670.216970][ C0] ? tomoyo_path_perm+0x262/0x460 [ 1670.216987][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1670.217012][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1670.217030][ C0] ? putname+0xb1/0x110 [ 1670.217042][ C0] ? kmem_cache_free+0x127/0x6b0 [ 1670.217060][ C0] security_inode_getattr+0x116/0x280 [ 1670.217077][ C0] vfs_fstat+0x4b/0xe0 [ 1670.217090][ C0] __do_sys_newfstat+0x8b/0x110 [ 1670.217104][ C0] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1670.217127][ C0] do_syscall_64+0x115/0x870 [ 1670.217144][ C0] ? clear_bhb_loop+0x40/0x90 [ 1670.217158][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.217171][ C0] RIP: 0033:0x7ff2c5f11ad7 [ 1670.217188][ C0] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 1670.217200][ C0] RSP: 002b:00007ffd97e1d878 EFLAGS: 00000202 ORIG_RAX: 0000000000000005 [ 1670.217212][ C0] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007ff2c5f11ad7 [ 1670.217220][ C0] RDX: 0000000000090800 RSI: 00007ffd97e1d880 RDI: 000000000000000d [ 1670.217229][ C0] RBP: 00007ffd97e1d880 R08: 0000000000000000 R09: 0000000000000001 [ 1670.217237][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005556138e0170 [ 1670.217246][ C0] R13: 00000000000000ff R14: 00005555e3378be0 R15: 00007ffd97e1dba0 [ 1670.217260][ C0] [ 1670.218017][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g173681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1670.780565][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1670.790521][ C1] rcu: RCU grace-period kthread stack dump: [ 1670.796391][ C1] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1670.809870][ C1] Call Trace: [ 1670.813134][ C1] [ 1670.816055][ C1] __schedule+0x125c/0x6730 [ 1670.820569][ C1] ? __pfx___schedule+0x10/0x10 [ 1670.825412][ C1] ? find_held_lock+0x2b/0x80 [ 1670.830083][ C1] ? schedule+0x225/0x2c0 [ 1670.834410][ C1] schedule+0xdd/0x2c0 [ 1670.838472][ C1] schedule_timeout+0x127/0x280 [ 1670.843315][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1670.848682][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1670.853966][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1670.859762][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1670.865213][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1670.869968][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1670.875243][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1670.880174][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1670.885367][ C1] rcu_gp_kthread+0x179/0x230 [ 1670.890032][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1670.895217][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1670.901017][ C1] ? __kthread_parkme+0x18c/0x230 [ 1670.906038][ C1] ? kthread+0x13a/0x450 [ 1670.910276][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1670.915460][ C1] kthread+0x370/0x450 [ 1670.919523][ C1] ? __pfx_kthread+0x10/0x10 [ 1670.924109][ C1] ret_from_fork+0x72b/0xd50 [ 1670.928694][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1670.933799][ C1] ? __switch_to+0x800/0x10f0 [ 1670.938472][ C1] ? __pfx_kthread+0x10/0x10 [ 1670.943060][ C1] ret_from_fork_asm+0x1a/0x30 [ 1670.947832][ C1] [ 1670.950836][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1670.957145][ C1] CPU: 1 UID: 0 PID: 25458 Comm: syz.4.4927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1670.968066][ C1] Tainted: [L]=SOFTLOCKUP [ 1670.972372][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1670.982412][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 1670.987684][ C1] Code: e9 4e fe ff ff 48 8b 7c 24 08 e8 0b 81 70 00 e9 6d fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <65> 8b 05 39 77 59 12 49 89 f8 49 89 f1 49 89 d2 65 48 8b 3d 10 77 [ 1671.007275][ C1] RSP: 0018:ffffc900038cf8a0 EFLAGS: 00000202 [ 1671.013327][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 1671.021283][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 1671.029241][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1671.037197][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1671.045152][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1671.053108][ C1] FS: 0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000 [ 1671.062026][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1671.068595][ C1] CR2: 00007ffba1b88fc0 CR3: 00000000863b0000 CR4: 00000000003526f0 [ 1671.076554][ C1] Call Trace: [ 1671.079819][ C1] [ 1671.082734][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 1671.088621][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1671.093816][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 1671.098744][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1671.105069][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1671.110261][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1671.115362][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1671.120473][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1671.125574][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1671.131116][ C1] tlb_finish_mmu+0x3fe/0x810 [ 1671.135789][ C1] exit_mmap+0x454/0xa00 [ 1671.140029][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1671.144782][ C1] ? rcu_is_watching+0x12/0xc0 [ 1671.149544][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1671.154473][ C1] ? find_held_lock+0x2b/0x80 [ 1671.159142][ C1] ? uprobe_clear_state+0x5f/0x260 [ 1671.164253][ C1] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1671.169889][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 1671.175522][ C1] __mmput+0x12a/0x410 [ 1671.179586][ C1] mmput+0x67/0x80 [ 1671.183300][ C1] do_exit+0x8b1/0x2ae0 [ 1671.187457][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1671.192818][ C1] ? __pfx_do_exit+0x10/0x10 [ 1671.197401][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1671.202767][ C1] do_group_exit+0xd5/0x2a0 [ 1671.207268][ C1] __x64_sys_exit_group+0x3e/0x50 [ 1671.212287][ C1] x64_sys_call+0x102c/0x1530 [ 1671.216957][ C1] do_syscall_64+0x115/0x870 [ 1671.221541][ C1] ? clear_bhb_loop+0x40/0x90 [ 1671.226208][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.232088][ C1] RIP: 0033:0x7f77b4f9de59 [ 1671.236492][ C1] Code: Unable to access opcode bytes at 0x7f77b4f9de2f. [ 1671.243496][ C1] RSP: 002b:00007ffeddf4df08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1671.251897][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f77b4f9de59 [ 1671.259853][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.267810][ C1] RBP: 00007ffeddf4df6c R08: 0000000000000000 R09: 00000000000927c0 [ 1671.275769][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000014c [ 1671.283726][ C1] R13: 00000000000927c0 R14: 000000000017d9cf R15: 00007ffeddf4dfc0 [ 1671.291696][ C1]