last executing test programs: 3m28.500646169s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 3m11.704030648s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 2m50.350264737s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 2m28.963126235s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 1m40.7919912s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 50.457788767s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611224000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x84, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="b0"], 0xb0) 13.230673684s ago: executing program 4 (id=678): r0 = fsopen(&(0x7f0000002f80)='rpc_pipefs\x00', 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4080) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 11.932270477s ago: executing program 4 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000040)=@udp}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b000100000000090400"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000ffe4608a679d0d283887c85c5ccdc3e98d00000000000000000000000000000400"/50], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000095ddff81edff00"/24], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000), 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000007c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendto$inet(r1, &(0x7f0000000040)="1e76db4208c6475a562ec3518bfeff61483c", 0x12, 0x20044010, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) 11.545121954s ago: executing program 0 (id=682): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xc, &(0x7f0000000340)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) fchdir(r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) 10.819802997s ago: executing program 2 (id=683): ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="20000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.879055055s ago: executing program 0 (id=685): openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = accept$ax25(r0, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x600}, @void, @mpls={[{0x2, 0x0, 0x1}, {}, {0x4}, {0x5, 0x0, 0x1}, {0x260, 0x0, 0x1}, {0x3}], @ipv4=@dccp={{0x18, 0x4, 0x2, 0x2, 0x10e, 0x64, 0x0, 0x4, 0x21, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x0, 0x9, "32fab7672ecd23"}, {0x7, 0xe, "3f8c929f61d1c8347f064b4c"}]}, @timestamp_prespec={0x44, 0x2c, 0x60, 0x3, 0x2, [{@remote, 0x1}, {@remote, 0x25}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@rand_addr=0x64010102, 0x7}]}]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x7, "ff4894", 0xc, "ae4eba"}, "36c8a85db16f80172dcf7aa9e41e7e5d111a6aeb00391c191316414de758f129c443bee489d156c32000e78aa09124166f2204fad0c0fe9643fe6f29049ec6b7048b6161a15346349b5bf12eeecace5f199773c6a55dd4ff32e4d541567a5ab45329908a2e7ed4d12dfee0c8bf858662fdaee040b2591ee3363f872f76247aae9460f9b21af4db029adc5eec9642b65662d0a861ca2460352e510baf5cc5"}}}}, 0x12a) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) prlimit64(r4, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x6}, &(0x7f00000002c0)) (async) prlimit64(r4, 0x0, &(0x7f0000000280)={0xfffffffffffffffe, 0x6}, &(0x7f00000002c0)) socket$inet6(0xa, 0x7, 0x8) (async) r5 = socket$inet6(0xa, 0x7, 0x8) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000340)={0x1, 0x5, @start={0x0, 0x0, "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", "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"}, [0x4, 0x41f, 0x7, 0x8000000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd66c, 0x4, 0x5, 0x7, 0xfffffffffffffffa, 0x63b5, 0x4, 0x3ff, 0x398e3e05, 0x6, 0xb, 0x3, 0x6, 0x5, 0x3, 0x8c, 0x1, 0x7fffffff, 0x9, 0x5889, 0x100000000, 0x5, 0xf, 0xfbf, 0x10, 0x100000000, 0xc17, 0x4, 0x6, 0x7, 0x6d5e, 0x5, 0x7ff, 0x3, 0x1, 0x100000000, 0x1800000000000, 0x2, 0x1, 0x9, 0x5, 0x9, 0x80000001, 0x5, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0x8, 0x3, 0x6, 0x1, 0x5, 0x100000001]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000d80)=r6) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000dc0), 0x10) (async) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000dc0), 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f00)={'pimreg1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f00)={'pimreg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001080)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xe0, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x64b}, @ETHTOOL_A_CHANNELS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa2d}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) bind$inet6(r0, &(0x7f00000011c0)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r11, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ethtool\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x40800) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001380)=@canfd={{0x4}, 0x2b, 0x3, 0x0, 0x0, "c74a393628821f225b67e3a726b5b1b16638429a8c4abfda757feabc5d7626bf99f07cdb89e16564e8982594dcfbe1f839548481082ffc8dc7d0d1be823a8f4f"}, 0x48}, 0x1, 0x0, 0x0, 0xdd42b0531d7302b1}, 0x0) r12 = socket(0x28, 0x800, 0x0) clock_gettime(0x0, &(0x7f0000001480)) (async) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f00000014c0)={r13, r14/1000+10000}, 0x10) tkill(r4, 0x13) (async) tkill(r4, 0x13) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001500)={@mcast1, r2}, 0x14) io_setup(0x5, &(0x7f0000001540)=0x0) io_submit(r15, 0x4, &(0x7f00000017c0)=[&(0x7f00000015c0)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000001580)="9b462e52b136891e0699c5e820cd32", 0xf, 0x5, 0x0, 0x2, r0}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xfffc, r12, &(0x7f0000001600)='\x00', 0x1, 0x0, 0x0, 0x1, r0}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x2, 0x5660, r12, &(0x7f0000001680)="ab12cf8540315c062c4513efd1594d2982af64b61c6d9cd39f4369e8e6d7100f628c1e1925e1b31e0191da1df915d74cbe3187c60318f62420905cfed417bc347ae7fd656bbfb08e2ebdbc0996f184f2508ffad6e4e4c280e497e1616f7a3ba3c693", 0x62, 0x9, 0x0, 0x2, r0}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x9, r3, &(0x7f0000001740)="6d67074f6aee4d42b1f4c6bb766aa1999b56615e695327a180777faa5de942f7e442c4265acf48d02a4a5117da92c517af83138f4b628b615616361e142f", 0x3e, 0x1, 0x0, 0x2}]) 9.20364707s ago: executing program 2 (id=686): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r3 = socket(0x40000000002, 0x3, 0x2) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) recvfrom$inet6(r3, 0x0, 0x0, 0x20, 0x0, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68060200) 8.50917605s ago: executing program 0 (id=687): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.386741215s ago: executing program 3 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x1f) read$dsp(r1, &(0x7f0000000200)=""/168, 0xa8) 7.798245003s ago: executing program 4 (id=689): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000000000000ff000040001c0000060000baffa8d951994408291f7d8f83e776cc4ee4e2e4c6a4e7e98551220f49969600"]) add_key(&(0x7f0000001080)='cifs.idmap\x00', 0x0, &(0x7f0000000d80), 0x0, r0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r8, 0x0, 0x0, 0x80000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x4, 0x6, 0x4080, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) 6.930480673s ago: executing program 3 (id=690): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r1, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0105303, &(0x7f0000000440)) tkill(r0, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000001100), &(0x7f0000001140)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x184, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x1d}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @device_a, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7e, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x184}}, 0xc094) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.716013216s ago: executing program 4 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async, rerun: 32) chdir(&(0x7f0000000140)='./file1\x00') (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (rerun: 64) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x5b81, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0xde}) (async) setns(r3, 0x0) (async, rerun: 32) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0xb5, 0x0, 0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ff9000/0x4000)=nil}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x5}) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x240c0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000000)={0x1b, "2d6c8bc7024135d1b1596ff52fd24db516592b7815077cd84b9da02ecbf267713aa10784206ce380cc520c69e890b793bf27b6f0145014446500f3076776c428f34d02249445283d7ad26301ac439a44245814ad9004bc34661c18127e468b6a101c9feaa9a12c91a59123e55e801ccd96985482c54948a0d9a254751961c119"}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_normal', 0x42, 0x0) (async) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x9, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='tlb_flush\x00', r6, 0x0, 0x3ff}, 0x18) (async, rerun: 64) socket(0x22, 0xa, 0x8000) (rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000001000)={0x2, 0x7ff, {0x0}, {}, 0x0, 0x1000}) prlimit64(r9, 0x3, 0x0, &(0x7f0000001040)) 5.09009299s ago: executing program 0 (id=692): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) fremovexattr(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a73657400000000050005000000000005000100070000000500040000000000090002007379"], 0x5c}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) 4.801436637s ago: executing program 3 (id=693): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) getsockname$tipc(r0, 0x0, &(0x7f0000000a00)) 4.375831573s ago: executing program 4 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000100)=0x7fffffff, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000180)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x2800}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) (fail_nth: 4) 4.304663172s ago: executing program 2 (id=695): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xc, &(0x7f0000000340)=0x0) io_getevents(r5, 0x4, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f0000000040)={0x77359400}) fchdir(r1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) 4.072182964s ago: executing program 3 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_link_settings={0x4c, 0x6291, 0x2, 0x9c, 0x0, 0x3, 0xd9, 0x6, 0x8, 0x6, [0x5, 0xfffffff8, 0x8, 0x4, 0x5, 0x0, 0x7a, 0x9]}}) 2.724330644s ago: executing program 4 (id=697): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_robust_list(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) lseek(r0, 0xfff, 0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_setup(0x4, &(0x7f00000000c0)=0x0) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x8836, r0, &(0x7f0000000100)="97f4dbec7a0e94fa00c4e594328467667710ccfd2659db3e99107d9a01a91795276c8e126cab4f8e4aec74e917705ddfaf71d1e2f6b819bc", 0x38, 0x6, 0x0, 0x2}, &(0x7f0000000240)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000040)) 2.564781308s ago: executing program 0 (id=698): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000004c0)={{r1}, 0x0, 0x0, @inherit={0x48, &(0x7f0000000280)={0x1, 0x0, 0x3, 0x1, {0x20, 0xd, 0xfffffffffffffffa, 0x2, 0x2}}}, @subvolid=0x98ec}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x9, 0x2, 0x4, 0x7fffffffffffffff, 0x800}]}}}}}}}}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000800000000000000000000a0595df1abbe048cd48fda0ded7d170000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r4}, 0x20) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) chroot(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) userfaultfd(0x801) shutdown(r4, 0x1) 2.477973846s ago: executing program 2 (id=699): io_setup(0x5f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1cb, 0x38f}, 0x0, 0x0, 0xb7, 0xda, 0x4, 0x2, 0x8, 0x2, 0x101a, 0xd7df}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000700)={0x6, 0xe118, 0x2, {0x2, @vbi={0x88, 0x2969, 0xfff, 0x34343452, [0xae6b, 0x3], [0x0, 0x7ff], 0x13a}}, 0x6}) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.204321412s ago: executing program 3 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x1f) read$dsp(r1, &(0x7f0000000200)=""/168, 0xa8) 1.392943042s ago: executing program 0 (id=701): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000000000000ff000040001c0000060000baffa8d951994408291f7d8f83e776cc4ee4e2e4c6a4e7e98551220f49969600"]) add_key(&(0x7f0000001080)='cifs.idmap\x00', 0x0, &(0x7f0000000d80), 0x0, r0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r8, 0x0, 0x0, 0x80000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x4, 0x6, 0x4080, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) 837.880065ms ago: executing program 3 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mm_migrate_pages\x00', r0, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 718.015961ms ago: executing program 2 (id=703): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x1000, "de326cab45157979c2baa2a86684573fc18070a199e8882ea4c6e55e2333a19d8432828037c44958881e4e325c2a6743a46cf18d82138a66cada47c672d3a1e6d9d7f4d33294511e82f5c3947d559fbe54afaf4c39c14df971c18a8c153d493836c846c99195a2cb621645f17068d44071bb1f85d3b41d6bf88417daf99cd8a533174aa394646a5e8cd81f38b9f1924c71def44f165530a1a9a8ccf8db21b3ccf03ffeae75773ab11712cc895d18276ef5859ae7de0c2d19f7fadb5d724c14bde4aec053b0b6f9e49730c825026ee6c408020c1a39462c4f7b1525372dfdd76f92c0c7c0d35fae39e1dda327b13c86d2a6629f0ae5b74da3563bf33d33ef80a6624760fc4b9a10a9b34313334afa9761acc1136e71a3df2828b9d3a118f4686990d11e3a21ab664872e50e8f21b01fb46768ec0b755dc2099a87aa2952d1cec1b649c5df596f9b94503b019ead5428f9304fc61e8e734276ab094f8b40034b0449262d12ebafda8adc02511109635477f3d58828c23be0c9dcb561824cdf2ced92df8ba7cc463adba138b1935af441aefffe8cf9bcc7ccd545bcb149f4df0c62389518067cfaa2edbc5f77e97d72ed6bbc2c07c8a9059e9b9301826985a33a27df7a26599248e46b769a21b5e62c34efefb70c71d4a9f8d648af47d506fa08d97007426720685634647301f0eb62137702817580b312cefe921cdf50bff94c26d73a59d2afd5ff07638b8b96e24f5f96a885563d02c36075012ced197bce25c8de2e476c1bde4604f7bf0819a5042a35d330d2ec2195ac0373028cd33fe5c34b0a21fa9ad7f150ea298a141d38c35eedfb29de29bb1c938571701dafbba8c8072c9cfa0c3407ed04304db2b61098420c84b9c8c7fa74de7f51c2607444aa01d8a97556c0ed0b9468e72be7beacb322d059846d0dba56ad05b6e8ff2467fcda1b86f3d1be8d0de64ecb08512e9e939d6012e7e252c7caf413ae47eb8d27c6aa233302f5995e4bd001b1d8f2f3d15ae3ace3fe00f90dafb3ddf08d741a52bfd26807395aa0d53e0884ae68e700c6994679b8645759bd510900dc306bdd119f2e03b70030eaf7eec4e6105ea53d69e66842ac722238dfddeff7013ee8fde2f70c434568d907f4fca7f7a5c952f08761932ecaeb4981b2482ec11a1cf736177d74bcf59bf0a54ccfcf8de016293d10c5b76aada92be0522594a7251cc8480db969c1345b2529c4cbc547c984a367a9530a74c8400b6caf133015be04efcbaa7801d3dea2f4e97260bd51645f528125645f68409581cc1daf142fef92543a907b75d91a1e63c77c56ebfe40b887ac788ff50a6a4d115f32cf8491581b949132e997e78740face01a254d116ff58f4f17b3d9ef9bc2bb7d53e14adb6135b3fd2fd47768b6ea6cc40488b5515a220ce0e946dd16693321768a2144e4160b1dcdfd3fc7f0fd16bd3545f3ec6605419e94fff0aeb2fbfc9d9ef968a58e793c82be0a40e48bdd2cbb480c448659123f4cf2a16e6fbfa52d9adb1ecd2efa7ec9e59ea903b04350c5269ea097c92351b0de3992af4763e6a1ba4b81acd62aac066e9375dec8fa4077cdbb6522cf732b1b2ab976d5011478b9828ec2440c673b79e1e35cf1be8a210ac274bf61727d5c71e94d0d4add503b18f157f1f643054f1329166e9b06a893a2f59bd6e993eba03b08cfdef687002f8481ee310dc5c6e5d674355419621a7655a45671fd4b4df0bd1a42a74f61ba14f07f542e021a59476749c9ff253e6134f7c18c36aa6fcd89ed207f3f5cda1faf97b6123ee4d423e15c687cae9aff4c53752c0254ef1df57928f4f6f7d330f67f123339e4873ec0d4ce141affa233eee25582724c0973c30da879985c350f146bdccd96434a139f3063d468efd7eee3555f2afebba7181588eed65f33109f3698c660fbaf40a58c2a1f91f83c72eab776e5513937c01dec14ffdd0d0a09f9801c73f5bb8a5492e361aaf94a2a4b0957a20938c24931ce690c6a72680c9fde5d3eb925f6f79b83244ccfd35114490a370f456dbe54fad44467e2f43571d535d14b51b827e5215bf5b824bbd4567b09dcb28210deaa857a5e012c411965fb65f61b3d10959973493b9ced67b1d2c47d5be95397955ff328604e6f89a01ff5a947c951c99c8d899968e2cd8628268cee7c05ec0f8b70eec8dfac5c13f17c0f41a42d7978490a9e049faec24c1390765bb4f61bf25d6f31a89ec6541d3bced981cfa19dd2e65396d4e4f8b195996cd3adc5fed8a0c21f08ab7db13d54cdbfccee481686c5b52ff08b2e2096bcd39efb019c4d460ba6ff9ba6aacdc8a491e8eb25e6b404745aa1dd4e972897bdd74dee85d6acd7bbf1f010bdb512aeadaab88a0abe754ce4479f783c3d32e1f91b6bccd33f226557d68ec0bed4e52b0975f06bace0e8c980ef6b3b15704ad6767a043adf8649090d1d4aa4947700d2de32a9579f72964500d312a6fcb5c7e31fae1b24858700eda1d0071bf0a5ad762a650cb014b864daab999ba2f867737785f83b169e4cfabeed907611653993eb8d651ebd8d0df087da309936a5aeb62081680aee29b7f9c1dffa4645ebf55cc904f362f23060a56560205f798ae006002e0c510d4ac6c7632a1980b3645ed22930c4e646e35d5db4eadfa6e32c8cca29b9f368af0941cd42992a943df5f457259db4a6cfe170be707fe02e2e6c8b68e1e3a4341cca183c4676b05425a05c3f92200a1c5d02f1a37a6e0f4c03afee28e7078d72a77d500da03bafeea79db52c09412c3c0af36bf593610717244ce8f4771335e8eb2313d63a02c8bf79272a7017d370740dbaebfa4ec48771ed87f621fa2d087db2bf418bcf075a14e11009204a5b1c3de981c44036d4a96b8a304d6580c74eae06e723fdd29900847fe7605a67acf7dd60f7d99ea2e6d2b1c2071d6e5fcfe3e0289a4f90115674c61394b6daf739f76360e444e51a57696d9f7178e2b48ae7b7e04e19c44d0ac01387e9d94f8fb04df20a450418810fb7932a2c472c58516741d4c2e9395d405bce7fc2c8e8de1b3602aa4326bb459b93c8a8dda4c6a3392e2b0274d79ca0cdef11d6bd22df761da27dc5dc7ba61f2cca57390aa91dd53b9cedba1301ca443c7d07e781612b7db4b74a60ff83e6d3556b9069d5be5bd8dcd0273d9740b1f13a5092cdcf1ab199090c111ec1d7184a84a4a60e004fb23dff216f09d467b3b640c4982fa29aa4cf94e5927871348e6006a6c2511e42fb1965b6d91118a429a80d536a2a6f15686ef6c7aa5af7cffd7ec1f43ba9f03236c0e1b122acf740e29bb03177564917f04c92793b7fab208490f4792bc2d96ca9eaa5451be8f7f52296ea6e756e352eef0d298797dc98b2f47fe696631bef6d50d577eb5490573fc3061175c90853b032b9cd7024dee2c371039de992642e78e97a4626242c624cf88b3fd1e9a49e2a6dcb96ac206b632a4cfcd12d68acb6b3330d827ebfb88ca3ded028bd8dbb97dcc24e9a21d3c10760c6a523e36024744b8ae5711d6653a2bcd6800df999966e3cd3f98d83a008be45c131e1687eff4937fc953d4d18db270e1d9f0ae8ca466a4fe1e2480b7e61fb87e211b58cc8480dcb81ac4d178d0fd87ed4ca0ff54e50163a4c3c4591b1dc7d1e378aaf1487b713539c8ba4efa2cd6ece09f047717d52c4604a0a4155beed88e18fa713221f0f5c6b122d45003beac126ff9beb095a3bcbf9a6f506e33e9dad482bf74045e8b5abaaafb65bc79e7ef086858d707b164a7c49d4fdcd455c5c69e5d2a9d8d347d025b210029dad98bf1e72d4c77853fd272af9702371a997086147574ff4ad716b2d70dee8b34e8c7e85377747bce4a542860642e34b8488f4cca524de87cbd7aa02b43513a5ebf6a6ba40ce0700e26322fd5d29a61b73b7b98a6df26213c692773b24d01d17b88624e04af68f11033f3c2228ae1a47bb02f546dd1d3a595211d4ef78152d7f25c58163c5dc1e9ecd7449a92939466397788c83cf522a25a05f241e6213191c6cdf491d2f0f71eb41e256c1c4ec9587b5fe649487188ea4ed8f8da2869e393ba06f83554ca7c06bbb51b1a9f12ab712d788ad1f4f96f632bd5a787eb7130cabeff45741d6e0295aba6047db1419a67df612864eee054781ac15067ca31ab6beffe2439d5c7192db403980f8260ea28bc92d43efa313c9409416c693c4e415788d929efd83ee31be7a0ba69a1c8df8604b1b252179a75dee200094afd6dbcacea014e0248fab465450c42b6a456e0283cabae96a2b445be0935681abe6d76fdc3f9019f672f932440d6b209198f066c94813f95f3d47c7bc79afe5ff5526209907739f9925bd45e7e70da9b1a1b6bf5f52e6dcf22a7af001fef1e895341eaa53d9fb2b496a4f5023cf36cd50f26b909cbc758d9ede50f0da5a412b8ece6a29d2a0912562a21613677f23e9cd9468e644aa126b1b376e5d5d33f35f8d3bad77ceafd7512bf409a6eb811d70b2baf358ae6dcc717589619f4de26183ab67afbe8620b3815448de4cc8ff0ed976c6bd5c0c6ded7b351cf394c4fa5f85fc0a5343b2b7b3ee7aef3efed29acfe2c03ac9faf8b72b4fd7298b2e87972fb75149c2d9cffeca1bbbb70717c8f47a7cde74d4a9002afc8ec607397419ac30e9ed8a47fbb02c89d95c4ee2ccbfedca718b1c0a4919734801614dc2eddfb57898a17071a3b555b69920c68504bc61bc25fc424871b521fc3034ce044501cf91106df6c56c9b5609911dc0317be26521ff45beea2a1e0b8375894bcc6326b63671f2211f734912e165d8956d71f4199663443ce8b1d4e5a5e8028fec7f6589441351e2c1e80c1a3b7620e755fd2ac18dac88c672111f472c6b208e2e3f574aa52bd2c5d40fc57db6d9a084fb4cd12039335887fd2774849558086cd7733a588ca160150fe90c7bf132c7dced6f4016bbf98726b1662b4b54d33e01d571bc3d034e99d34765daed1e7d26c742e5d8e7eefacb6ae040cfd28518f9b10e88c3edfaf72fe92b8398f26e89db47aa14c4432d291fec2cc3c4ed60797c60082350d6b45e366f2182d6ac0245955f7f7167db5c02a52f78e1fed07ad812c8247324bd066bfcc80d1711ca0220cfe0046895c5eafb55cbf95927563f63bc522c221f38f6cdd61d1eb669be2579e8827e007091e6c80af297d8cb6d0c30a3206d29eb93ff85c87a6d81b948754f1dbfc5d456732305b51892114af2e73da0abe767fc1caa12e09760c5eb0a6265c56fee41fe9e17f62e3e5670cc4b0b45b80175d5a7225bc801c2b1dfd805b9f7fa1e804ee26e425a45d8fb54831ed70c7a363a3aa343763925249e800602ac80d737b8c0f2c9adc6098d3be5c3976e83f6885690c84a7b8a626b2976618353e951d80dd777c2b771bddd4537e1767da3a6dedc7f0f23d91933633fef8b88cbeb58bb6eeace20b97498f05a1a3a01fbe96f108df7089782bd4c680938d0c8fc269f19effd679f39d4d0c1711d320e48d827f9642e04d6bfd8759dc7b985b13f9bb2af1edc1fe9aa71d9e0663839b1cf86c7bb704db5e92a98388ca65d2e71f62d072825198b97c9fbc810ec12b3b578ba0d1204d793f783910c8a753d674483f4fde217c9dd1e0bffc1cac18ed16e8ffba191d3050825001a273db1af93ada0e3eb257369ef3d95aff4ea7486b58dedbc87e69de5c83671a43d07c0f76ece94f7e3d03354fc20f00effa735bdc7326dcd0ef567001ba7e5808bdd9cf1638a710f08f1d537b1017dc4125f929dfb06db6c46395b482004742786cdc651a3d2b945708"}, &(0x7f0000001080)=0x1024) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='ext4_insert_range\x00', r0, 0x0, 0xff}, 0x18) (async, rerun: 32) syz_open_dev$MSR(&(0x7f0000001140), 0xd5, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001180)='ns/uts\x00') (async) getsockname$packet(r0, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x8, 0x68b0, 0xb0000000, 0xfffffffa, 0x40005, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x400, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000012c0)={0x2b, 0x2}) r3 = getpid() timer_create(0x0, &(0x7f0000001300)={0x0, 0x24, 0x1, @tid=r3}, &(0x7f0000001340)=0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20010040) (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000014c0), 0x2000, 0x0) (async, rerun: 32) socket(0x10, 0xa, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={r2, 0x58, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)="52902e90066d48834e26a0c259e0e320e3f8f716d67688724af695db3226aff75e62420ad55b5c26318baed0c8", 0x2d}, {&(0x7f0000001540)="e6d582cb17735a7a32c34ff02cce56c2961daf6c7da9b7f06752ff347e4da1d71255eebfc8c48b1320c70507e4aea27bb85154d7d9615ab67ff3e8f48254", 0x3e}], 0x2, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0xcccee31, @broadcast}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001600)="68bb1b16981180572c303aeffbb02600af3e9ba9c4c01cb946028a8b62ab7ca3613467d9539b45d74d577703f03d02f2e84445bcf9e2137db956d292da52eeaba5b01fd64e81939d2b4b33118d6d8799a9b27fc6fcccd715cceb17485bd821fbfa0c157802cf5bdf2c6187bcb2d2cf209e764e099f5b5301fa786d57904657f6a3", 0x81}], 0x1, &(0x7f0000001700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2ae}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @noop, @rr={0x7, 0x1f, 0x94, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @local, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_retopts={{0xac, 0x0, 0x7, {[@generic={0x44, 0x7, "ed5e94e94d"}, @rr={0x7, 0xb, 0xd2, [@loopback, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0x1b, 0x32, [@rand_addr=0x64010101, @remote, @local, @rand_addr=0x64010100, @remote, @loopback]}, @ssrr={0x89, 0x27, 0xa8, [@empty, @empty, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @rand_addr=0x64010100, @local]}, @lsrr={0x83, 0x13, 0xa7, [@loopback, @broadcast, @loopback, @loopback]}, @end, @ssrr={0x89, 0x17, 0xbc, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}, @generic={0x86, 0x12, "ea49e64b0946a7319889034a7816c92d"}, @generic={0x86, 0x8, "ef6c319081af"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x168}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)="1497f81c6d2eedd1c4ac6c8258626323940b90fd165a6839e325e973a0a6c48d3df16c35301008773d7c29d1b278d2045375d0dfdfe3c434983be17fa5013253edf12161ee77038b317e481c6bf603ab5cd60f", 0x53}, {&(0x7f0000001900)="c914edaad706588d9ae6018cceda6063c62048f9a4f09d5e911d8190005575b2dc211fe72d223511bdef75bec0953855aacaae3c3c13fbfa9029c1b2f758776edbedb4fe5093cf5a688dd5808b09368bee4a4a6c97f1835faec3df9667c36a55edae5cb60ed5f2d1508edd0b5da05f8cd99289ecd472adb5c34b93ccf1dc9d145ba17a7ab0dfc5f1a9bb6134b1ee8963c2e4089d106baa12eda51a4c59ead1d3ce95213768db2f8461c95a7ec4c9079a337f5efbd4b1e8904a5b4d21ac711f3d8acdfe253328352b3283c20a59999d", 0xcf}, {&(0x7f0000001a00)="345b934103e7febb308bff402451b94e121b812d3cbe90e5d615245cf344db4b267b9900d93488bb3758047b61bde549a270f35485d2978bbe4b487360a5b35bd10eba4f3ade5c42d0e8973e207fc05e2936b225adcb3b7f7c157a4e3e7623680c402bed4ab4a353eaa5", 0x6a}, {&(0x7f0000001a80)="fcac26d4e4d2b04b8ee30cbe6af777315f8d2e0223382ec138b33d6b488eef9ad886461728b408c3d81bb3b015431398a8c63260c59acbbc08e6b498f351ca56a6e6797e9ec3d557f39a202be3263e49b79da309d0be9fa956fa43a5b6bced55bd96c2ba6e5c67d8eb89c7f1c71f9d5727035569072f8904bcb22d8a51189185e1dd1ec94547ddf790c2e2e5516b2587e86aad06dafae8cffea521f0f49bdb4904c1f4a80d2b5340fd5c9af4450e517b1d47a683dbbd97066b6f5b2bd921f2b85dd7ec0790085129", 0xc8}], 0x4, &(0x7f0000001c80)=[@ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0xd, "f24cb7e9f62c964f495fce"}, @rr={0x7, 0x23, 0x9f, [@remote, @loopback, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1}}}, @ip_tos_int={{0x14}}], 0x78}}], 0x3, 0x810) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000001dc0)={0xb7da, 0x7, [{0x8, 0x1}, {0xf, 0x1}, {0x9}, {0x2, 0x1}, {0xa}, {0xa}, {0x3, 0x1}]}) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001e00)={{0x3, 0x3, 0x5, 0x1, 0x3}, 0x9, 0x7, 0x9}) socket$netlink(0x10, 0x3, 0xb) (async) clock_gettime(0x0, &(0x7f0000001e80)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000001ec0)={{r7, r8+10000000}}, &(0x7f0000001f00)) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000002040)={0x63e6, 0x2, &(0x7f0000001f40)=[0x7, 0x8], &(0x7f0000001f80)=[0x2], &(0x7f0000001fc0)=[0x3, 0x1, 0x4, 0x0], &(0x7f0000002000)=[0xa33, 0xa00, 0x83, 0x9, 0xa, 0x1, 0x1, 0x0]}) mq_notify(r0, &(0x7f00000021c0)={0x0, 0x32, 0x2, @thr={&(0x7f0000002080)="6c2432ba773725a643992a4108e3828ab2481e04d8f305ce720fe82ddb0639d51577c0d78693b5e6576416d4bc5fbc118e37e2d4cea439ee2152c2eef6933e06ec8707299f1d700d75bbaace95bf1bf281280a6b0aa67b2eb93982a35679262a26287c19e32368c91207261d0b5cadd2cb32ea9370db201e673d829e8eaee13484f86060aefae5d7f386b1928a917fc60c614576f95661408e18d18d148c705dbc", &(0x7f0000002140)="920c3841e5296f086a7047d58b0f6e8492d6010bee2063dbb2d22cbb29c66c64119a760e568147ed32c9bea71932acd9a681c4e6166aaf8d0f12ed09a3e61e0dabcb637bc7114b86f3d8aa0cc9e26773b52d819f6b4481e5621a893c"}}) (async) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) (async, rerun: 32) r10 = eventfd2(0x8, 0x0) (rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000002240)={0x1, r10}) (async, rerun: 64) epoll_create(0x2) (rerun: 64) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000002280)={0x5, 0x0, [{0xac516f7c53dab1db, 0x0, 0xd}, {0x20c, 0x0, 0x4e6}, {0xbfd, 0x0, 0x5b86}, {0x3a9, 0x0, 0x5}, {0xb6d, 0x0, 0x8000}]}) (async, rerun: 32) execveat(r0, &(0x7f0000002300)='./file0\x00', &(0x7f00000023c0)={[&(0x7f0000002340)='!\\-)](&\xe1&)\x8c$\x00', &(0x7f0000002380)='{[(\\\x00']}, &(0x7f0000002580)={[&(0x7f0000002400)='-\xd8.\x00', &(0x7f0000002440)='/dev/vhost-net\x00', &(0x7f0000002480)='/sys/kernel/debug/sync/sw_sync\x00', &(0x7f00000024c0)='ns/uts\x00', &(0x7f0000002500)='/sys/kernel/debug/sync/sw_sync\x00', &(0x7f0000002540)=']\'@-/{/\x00']}, 0x400) (rerun: 32) setresgid(0x0, 0x0, 0xee00) 0s ago: executing program 2 (id=704): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000240)=0x154, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') preadv(r1, 0x0, 0x0, 0x76, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x9, 0x2, 0x80000, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000060000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900014873797a3000000000080005400000000d080003400000011005000d407700000008000c400001"], 0x9c}}, 0x20050800) syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x75, {0x75, 0x6, "8fd4fcb3ad31a443397b99d5605e66ddc0fadf8c242c8b6b4aecf634d5ff37bba6ba0580339be2414801a7e307859975408971b9b1c1828a74ee12d31768212a96e0bc19ba4f7dd1429e59e3aaf4ff29f7be00127d5ad73d5b7f0d07d874de3cd7b7af2cebe5c30db701e730447a6251b46e7c"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, 0x0, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x0, 0xff, "f06a976c", "0b6a6cac"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x2, 0x1, 0xb, 0x40, 0x5}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x20, 0x13, 0x9, "01b4abb2137f2f3f55"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "77d9"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, 'MC'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x7}}) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000940)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) kernel console output (not intermixed with test programs): 1124][ T8359] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.208323][ T8359] bridge_slave_1: entered allmulticast mode [ 222.214431][ T29] audit: type=1400 audit(1738552889.300:1177): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 222.299041][ T8359] bridge_slave_1: entered promiscuous mode [ 222.374978][ T29] audit: type=1400 audit(1738552889.300:1178): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 222.490543][ T29] audit: type=1400 audit(1738552889.340:1179): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.566735][ T8359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.610544][ T29] audit: type=1400 audit(1738552889.340:1180): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.670254][ T8359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.709837][ T29] audit: type=1400 audit(1738552889.340:1181): avc: denied { append open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.867162][ T29] audit: type=1400 audit(1738552889.340:1182): avc: denied { getattr } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 222.992382][ T29] audit: type=1400 audit(1738552889.490:1183): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 223.054967][ T8359] team0: Port device team_slave_0 added [ 223.126965][ T8359] team0: Port device team_slave_1 added [ 223.143253][ T29] audit: type=1400 audit(1738552889.500:1184): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 223.250781][ T825] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 223.260504][ T29] audit: type=1400 audit(1738552889.500:1185): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 223.447994][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.461831][ T825] usb 1-1: Using ep0 maxpacket: 16 [ 223.470641][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.513851][ T825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.581056][ T825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.586340][ T8359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.640601][ T825] usb 1-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 223.649839][ T825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.676910][ T8359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.707297][ T825] usb 1-1: config 0 descriptor?? [ 223.797253][ T8359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.058904][ T8359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.289959][ T825] thrustmaster 0003:044F:B65A.0006: unknown main item tag 0x2 [ 224.499535][ T825] thrustmaster 0003:044F:B65A.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65a] on usb-dummy_hcd.0-1/input0 [ 224.546305][ T825] thrustmaster 0003:044F:B65A.0006: no inputs found [ 224.621995][ T825] usb 1-1: USB disconnect, device number 24 [ 224.733590][ T8359] hsr_slave_0: entered promiscuous mode [ 224.793413][ T8359] hsr_slave_1: entered promiscuous mode [ 224.879545][ T8359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.958284][ T8359] Cannot create hsr debugfs directory [ 225.809808][ T8512] new mount options do not match the existing superblock, will be ignored [ 226.204678][ T8509] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 226.361486][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 226.560694][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 226.632225][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 226.660592][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 226.708398][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.785721][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.820797][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.854918][ T8] usb 4-1: Product: Ђ [ 226.859023][ T8] usb 4-1: Manufacturer: 뫈麿켸 [ 226.882642][ T8] usb 4-1: SerialNumber: à Š [ 227.053815][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 227.053835][ T29] audit: type=1400 audit(1738552894.300:1633): avc: denied { read } for pid=8500 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.083033][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.144966][ T29] audit: type=1400 audit(1738552894.300:1634): avc: denied { read open } for pid=8500 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.170464][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.370164][ T29] audit: type=1400 audit(1738552894.300:1635): avc: denied { getattr } for pid=8500 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.401042][ T29] audit: type=1400 audit(1738552894.300:1636): avc: denied { recv } for pid=8359 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 227.428707][ T29] audit: type=1400 audit(1738552894.310:1637): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.452955][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.465784][ T8] usb 4-1: 0:2 : does not exist [ 227.486098][ T8518] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 227.584767][ T8525] tc_dump_action: action bad kind [ 227.961124][ T8] usb 4-1: USB disconnect, device number 15 [ 228.058414][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.065356][ C0] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 228.073152][ C0] audit: backlog limit exceeded [ 228.083116][ T8518] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.089655][ T8518] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 228.259929][ T8518] tipc: Enabling of bearer rejected, failed to enable media [ 228.355163][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8518 comm=syz.0.467 [ 228.891507][ T8359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.988179][ T8359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.020569][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.180675][ T8359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.210686][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 229.250033][ T8359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.290593][ T8] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 229.298829][ T8] usb 5-1: config 0 has no interface number 0 [ 229.360609][ T8] usb 5-1: config 0 interface 106 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 229.414405][ T8] usb 5-1: config 0 interface 106 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 229.473230][ T8] usb 5-1: config 0 interface 106 has no altsetting 0 [ 229.571512][ T8] usb 5-1: New USB device found, idVendor=0846, idProduct=9042, bcdDevice=98.46 [ 229.614784][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.650727][ T8] usb 5-1: Product: syz [ 229.655300][ T8] usb 5-1: Manufacturer: syz [ 229.687760][ T8] usb 5-1: SerialNumber: syz [ 229.710817][ T8] usb 5-1: config 0 descriptor?? [ 229.790608][ T825] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 229.827512][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 229.874465][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 230.182330][ T825] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 230.254937][ T825] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.324128][ T825] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 230.393085][ T825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.393811][ T8] usb 5-1: USB disconnect, device number 17 [ 230.423309][ T825] usb 1-1: SerialNumber: syz [ 231.032756][ T825] usb 1-1: 0:2 : does not exist [ 231.069769][ T825] usb 1-1: unit 5 not found! [ 231.180703][ T825] usb 1-1: USB disconnect, device number 25 [ 231.308383][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.535633][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 231.723153][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 231.799308][ T7980] udevd[7980]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.960014][ T8359] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.103671][ T8561] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 232.116196][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 232.116210][ T29] audit: type=1400 audit(1738552899.340:1980): avc: denied { recv } for pid=5818 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.150811][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.163114][ T8561] bridge0: port 3(erspan0) entered disabled state [ 232.170573][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.179156][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.333119][ T29] audit: type=1400 audit(1738552899.350:1981): avc: denied { recv } for pid=5818 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.480549][ T29] audit: type=1400 audit(1738552899.350:1982): avc: denied { recv } for pid=5818 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.502141][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.513090][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.595911][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.603060][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.651215][ T29] audit: type=1400 audit(1738552899.350:1983): avc: denied { recv } for pid=5818 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.830587][ T29] audit: type=1400 audit(1738552899.360:1984): avc: denied { recv } for pid=5818 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 232.928928][ T8567] FAULT_INJECTION: forcing a failure. [ 232.928928][ T8567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.937470][ T8569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 232.957101][ T8569] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 232.967060][ T8569] audit: backlog limit exceeded [ 232.979922][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.0.479 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 232.979948][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 232.979959][ T8567] Call Trace: [ 232.979964][ T8567] [ 232.979985][ T8567] dump_stack_lvl+0x16c/0x1f0 [ 232.980010][ T8567] should_fail_ex+0x50a/0x650 [ 232.980037][ T8567] _copy_from_user+0x2e/0xd0 [ 232.980061][ T8567] kstrtouint_from_user+0xd7/0x1c0 [ 232.980082][ T8567] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 232.980109][ T8567] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 232.980136][ T8567] proc_fail_nth_write+0x84/0x250 [ 232.980159][ T8567] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.980179][ T8567] ? ksys_write+0x12b/0x250 [ 232.980209][ T8567] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.980229][ T8567] vfs_write+0x24c/0x1150 [ 232.980256][ T8567] ? __fget_files+0x1fc/0x3a0 [ 232.980274][ T8567] ? __pfx___mutex_lock+0x10/0x10 [ 232.980293][ T8567] ? __pfx_vfs_write+0x10/0x10 [ 232.980326][ T8567] ? __fget_files+0x206/0x3a0 [ 232.980352][ T8567] ksys_write+0x12b/0x250 [ 232.980376][ T8567] ? __pfx_ksys_write+0x10/0x10 [ 232.980411][ T8567] do_syscall_64+0xcd/0x250 [ 232.980432][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.980458][ T8567] RIP: 0033:0x7f4843d8b85f [ 232.980472][ T8567] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 232.980487][ T8567] RSP: 002b:00007f4844c22030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 232.980503][ T8567] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4843d8b85f [ 232.980513][ T8567] RDX: 0000000000000001 RSI: 00007f4844c220a0 RDI: 0000000000000005 [ 232.980523][ T8567] RBP: 00007f4844c22090 R08: 0000000000000000 R09: 0000000000000000 [ 232.980532][ T8567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 232.980541][ T8567] R13: 0000000000000001 R14: 00007f4843fa6080 R15: 00007ffdd00cdfa8 [ 232.980564][ T8567] [ 233.112542][ T8574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.125127][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.140690][ T8569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.472504][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 233.657685][ T936] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 233.691276][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 233.750774][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 233.795402][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 233.865524][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.958095][ T936] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 233.966269][ T936] usb 3-1: config 0 has no interface number 0 [ 233.984145][ T936] usb 3-1: config 0 interface 4 has no altsetting 0 [ 234.037250][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.094091][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.102462][ T936] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 234.129515][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.137957][ T8] usb 4-1: Product: Ђ [ 234.152907][ T8] usb 4-1: Manufacturer: 뫈麿켸 [ 234.178322][ T936] usb 3-1: Product: syz [ 234.188415][ T8] usb 4-1: SerialNumber: à Š [ 234.206196][ T936] usb 3-1: Manufacturer: syz [ 234.245742][ T936] usb 3-1: SerialNumber: syz [ 234.301698][ T936] usb 3-1: config 0 descriptor?? [ 234.352617][ T936] i2c-tiny-usb 3-1:0.4: version 6d.cc found at bus 003 address 013 [ 234.765193][ T8] usb 4-1: 0:2 : does not exist [ 234.806839][ T936] i2c i2c-1: connected i2c-tiny-usb device [ 234.911261][ T8] usb 4-1: USB disconnect, device number 16 [ 234.982055][ T25] usb 3-1: USB disconnect, device number 13 [ 235.153774][ T8580] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 235.278399][ T8580] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 235.408964][ T8580] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 236.349338][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.925367][ T8590] new mount options do not match the existing superblock, will be ignored [ 237.009672][ T8590] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 237.134966][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 237.134981][ T29] audit: type=1400 audit(1738552904.390:2297): avc: denied { prog_load } for pid=8591 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.452218][ T29] audit: type=1400 audit(1738552904.420:2298): avc: denied { create } for pid=8592 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.706211][ T8597] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 237.715408][ T8597] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.055160][ T29] audit: type=1400 audit(1738552904.430:2299): avc: denied { bpf } for pid=8591 comm="syz.2.485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.176617][ T29] audit: type=1400 audit(1738552904.430:2300): avc: denied { perfmon } for pid=8591 comm="syz.2.485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.320623][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.350616][ T29] audit: type=1400 audit(1738552904.440:2301): avc: denied { perfmon } for pid=8591 comm="syz.2.485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.582980][ T29] audit: type=1400 audit(1738552904.440:2302): avc: denied { map_create } for pid=8592 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.750663][ T29] audit: type=1400 audit(1738552904.440:2303): avc: denied { perfmon } for pid=8591 comm="syz.2.485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.872738][ T29] audit: type=1400 audit(1738552904.450:2304): avc: denied { map_read map_write } for pid=8592 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.970539][ T29] audit: type=1400 audit(1738552904.450:2305): avc: denied { perfmon } for pid=8591 comm="syz.2.485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.043654][ T8602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 239.048356][ T8603] syz.0.488: attempt to access beyond end of device [ 239.048356][ T8603] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 239.079852][ T8603] EXT4-fs (loop0): unable to read superblock [ 239.184108][ T8603] syz.0.488: attempt to access beyond end of device [ 239.184108][ T8603] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 239.231055][ T8603] EXT4-fs (loop0): unable to read superblock [ 239.302579][ T8603] syz.0.488: attempt to access beyond end of device [ 239.302579][ T8603] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 239.364810][ T8603] EXT4-fs (loop0): unable to read superblock [ 239.446489][ T8603] syz.0.488: attempt to access beyond end of device [ 239.446489][ T8603] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 239.582807][ T8603] EXT4-fs (loop0): unable to read superblock [ 239.745632][ T8603] syz.0.488: attempt to access beyond end of device [ 239.745632][ T8603] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 240.380619][ T8603] EXT4-fs (loop0): unable to read superblock [ 242.103881][ T8626] fuse: Bad value for 'user_id' [ 242.122495][ T8626] fuse: Bad value for 'user_id' [ 242.142877][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 242.142891][ T29] audit: type=1400 audit(1738552909.400:2500): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 242.228966][ T29] audit: type=1400 audit(1738552909.410:2501): avc: denied { recv } for pid=8625 comm="syz.4.494" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 242.407813][ T29] audit: type=1400 audit(1738552909.440:2502): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.522897][ T29] audit: type=1400 audit(1738552909.450:2503): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.654405][ T29] audit: type=1400 audit(1738552909.470:2504): avc: denied { append open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.792703][ T29] audit: type=1400 audit(1738552909.470:2505): avc: denied { getattr } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 242.922768][ T29] audit: type=1400 audit(1738552909.530:2506): avc: denied { setcheckreqprot } for pid=8625 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 243.013404][ T29] audit: type=1400 audit(1738552909.580:2507): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.091163][ T8632] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 243.259433][ T29] audit: type=1400 audit(1738552909.580:2508): avc: denied { mount } for pid=8629 comm="syz.2.495" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 243.275607][ T8638] new mount options do not match the existing superblock, will be ignored [ 243.348888][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.395687][ T8638] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 244.473131][ T8650] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 244.482150][ T8650] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 245.011863][ T8359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.681712][ T8359] veth0_vlan: entered promiscuous mode [ 245.760045][ T8359] veth1_vlan: entered promiscuous mode [ 245.920655][ T25] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 246.090650][ T8359] veth0_macvtap: entered promiscuous mode [ 246.145708][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 246.187274][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.200771][ T8359] veth1_macvtap: entered promiscuous mode [ 246.236015][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.300526][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 246.309595][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.421377][ T25] usb 4-1: config 0 descriptor?? [ 246.446894][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.530730][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.570509][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.620534][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.630410][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.682909][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.700494][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.720519][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.132665][ T25] wacom 0003:056A:00D5.0007: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 247.143366][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.151068][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 247.151081][ T29] audit: type=1400 audit(1738552914.300:2752): avc: denied { prog_load } for pid=8668 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 247.292327][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.318143][ T25] wacom 0003:056A:00D5.0007: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.3-1/input0 [ 247.320831][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.414860][ T29] audit: type=1400 audit(1738552914.300:2753): avc: denied { bpf } for pid=8668 comm="syz.4.505" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.433727][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.454956][ T25] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D5.0007/input/input14 [ 247.527619][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.537389][ T29] audit: type=1400 audit(1738552914.310:2754): avc: denied { read } for pid=8668 comm="syz.4.505" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.558828][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.595403][ T29] audit: type=1400 audit(1738552914.310:2755): avc: denied { read open } for pid=8668 comm="syz.4.505" path="net:[4026533082]" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 247.623839][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.649658][ T25] usb 4-1: USB disconnect, device number 17 [ 247.690299][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.720759][ T29] audit: type=1400 audit(1738552914.310:2756): avc: denied { create } for pid=8668 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 247.741418][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.771860][ T8359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.820501][ T29] audit: type=1400 audit(1738552914.330:2757): avc: denied { prog_load } for pid=8668 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 247.846068][ T8359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.860737][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 247.867311][ C0] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 247.875100][ C0] audit: backlog limit exceeded [ 247.890557][ T29] audit: type=1400 audit(1738552914.330:2758): avc: denied { bpf } for pid=8668 comm="syz.4.505" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.934022][ T8359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.985262][ T8673] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 248.034814][ T8359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.090524][ T8359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.099254][ T8359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.180614][ T8359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.305370][ T8697] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.510'. [ 250.379209][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.420598][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.639732][ T367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.708959][ T367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.810589][ T825] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 250.811520][ T8710] overlayfs: conflicting options: userxattr,redirect_dir=on [ 251.054138][ T825] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 251.093149][ T8713] Bluetooth: MGMT ver 1.23 [ 251.104622][ T8713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8713 comm=syz.4.514 [ 251.160557][ T825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.210519][ T825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.230807][ T936] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 251.272450][ T825] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 251.335312][ T825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.389351][ T825] usb 1-1: config 0 descriptor?? [ 251.447531][ T936] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 251.501769][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.618231][ T936] usb 3-1: config 0 descriptor?? [ 251.685239][ T936] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 252.147724][ T936] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 252.163753][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 252.163767][ T29] audit: type=1400 audit(2000000000.359:3074): avc: denied { create } for pid=8707 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.330182][ T29] audit: type=1400 audit(2000000000.359:3075): avc: denied { create } for pid=8707 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.460543][ T29] audit: type=1400 audit(2000000000.359:3076): avc: denied { map } for pid=8719 comm="syz.4.516" path="socket:[22953]" dev="sockfs" ino=22953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 252.560561][ T825] ath6kl: Failed to submit usb control message: -110 [ 252.567823][ T825] ath6kl: unable to send the bmi data to the device: -110 [ 252.578696][ T8710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28998 sclass=netlink_route_socket pid=8710 comm=syz.2.513 [ 252.660946][ T29] audit: type=1400 audit(2000000000.399:3077): avc: denied { create } for pid=8707 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 252.681607][ T825] ath6kl: Unable to send get target info: -110 [ 252.704104][ T936] gspca_cpia1: usb_control_msg 02, error -71 [ 252.710128][ T936] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 252.727072][ T29] audit: type=1400 audit(2000000000.409:3078): avc: denied { create } for pid=8707 comm="syz.0.512" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.749429][ T825] ath6kl: Failed to init ath6kl core: -110 [ 252.756713][ T825] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 252.809802][ T825] usb 1-1: USB disconnect, device number 26 [ 252.809988][ T936] usb 3-1: USB disconnect, device number 14 [ 252.870627][ T29] audit: type=1400 audit(2000000000.419:3079): avc: denied { recv } for pid=8719 comm="syz.4.516" saddr=fe80::1c src=16385 daddr=fe80::c dest=41540 netif=teql0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 252.970514][ T29] audit: type=1400 audit(2000000000.419:3080): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.077625][ T29] audit: type=1400 audit(2000000000.449:3081): avc: denied { read write open } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.195369][ T29] audit: type=1400 audit(2000000000.449:3082): avc: denied { create } for pid=8707 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.298526][ T29] audit: type=1400 audit(2000000000.449:3083): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.423326][ T8735] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 254.436368][ T367] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.405457][ T8745] overlayfs: missing 'lowerdir' [ 255.741828][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.748150][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.953802][ T6909] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.413616][ T6909] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.434380][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 256.905171][ T6909] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.183290][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 257.183306][ T29] audit: type=1400 audit(2000000005.369:3514): avc: denied { recv } for pid=8752 comm="syz.4.527" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 257.278096][ T6909] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.720662][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.979270][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 258.038028][ T8] usb 3-1: config 150 has an invalid interface number: 204 but max is 0 [ 258.046711][ T29] audit: type=1400 audit(2000000005.379:3515): avc: denied { search } for pid=8739 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.162334][ T8] usb 3-1: config 150 has no interface number 0 [ 258.430575][ T8] usb 3-1: config 150 interface 204 has no altsetting 0 [ 258.471091][ T29] audit: type=1400 audit(2000000005.389:3516): avc: denied { search } for pid=8739 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.506338][ T8760] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.512959][ T8760] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 258.520767][ T8760] audit: backlog limit exceeded [ 258.528903][ T8761] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.535897][ T8] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 258.551431][ T8761] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 258.560564][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.592188][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 258.598731][ C0] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 258.608390][ T8] usb 3-1: Product: syz [ 258.630608][ T8] usb 3-1: Manufacturer: syz [ 258.635766][ T8] usb 3-1: SerialNumber: syz [ 259.520893][ T8758] block nbd4: shutting down sockets [ 259.620677][ T8755] block nbd4: NBD_DISCONNECT [ 259.671082][ T8755] block nbd4: Send disconnect failed -32 [ 259.706456][ T6909] bridge_slave_1: left allmulticast mode [ 259.819082][ T6909] bridge_slave_1: left promiscuous mode [ 260.016722][ T8769] new mount options do not match the existing superblock, will be ignored [ 260.052944][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.437189][ T8] usb 3-1: USB disconnect, device number 15 [ 260.470545][ T6909] bridge_slave_0: left allmulticast mode [ 260.485649][ T6909] bridge_slave_0: left promiscuous mode [ 260.502915][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.520588][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.543043][ T8768] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 260.561017][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.563159][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.602628][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.653586][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.660906][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.960797][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 262.230685][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 262.360166][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 262.360179][ T29] audit: type=1400 audit(2000000010.549:3791): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.414158][ T25] usb 4-1: config 4 has an invalid interface number: 64 but max is 0 [ 262.469500][ T25] usb 4-1: config 4 has no interface number 0 [ 262.487726][ T29] audit: type=1400 audit(2000000010.549:3792): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.627610][ T25] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 262.682867][ T29] audit: type=1400 audit(2000000010.599:3793): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.696397][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.770213][ T5828] Bluetooth: hci0: command tx timeout [ 262.810561][ T29] audit: type=1400 audit(2000000010.599:3794): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.870596][ T25] usb 4-1: Product: syz [ 262.874796][ T25] usb 4-1: Manufacturer: syz [ 262.879398][ T25] usb 4-1: SerialNumber: syz [ 262.910339][ T29] audit: type=1400 audit(2000000010.609:3795): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.098333][ T29] audit: type=1400 audit(2000000010.609:3796): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 263.253166][ T29] audit: type=1400 audit(2000000010.609:3797): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.392324][ T29] audit: type=1400 audit(2000000010.609:3798): avc: denied { ioctl } for pid=8774 comm="syz.3.530" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.503461][ T29] audit: type=1400 audit(2000000010.639:3799): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.567131][ T25] usb 4-1: USB disconnect, device number 18 [ 263.653196][ T29] audit: type=1400 audit(2000000010.649:3800): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 264.607013][ T6909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.648971][ T6909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.695653][ T6909] bond0 (unregistering): Released all slaves [ 264.860646][ T5828] Bluetooth: hci0: command tx timeout [ 266.870634][ T6909] hsr_slave_0: left promiscuous mode [ 266.908045][ T6909] hsr_slave_1: left promiscuous mode [ 266.920664][ T5828] Bluetooth: hci0: command tx timeout [ 266.926217][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.970583][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.019855][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.036320][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.043585][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.211050][ T6909] veth1_macvtap: left promiscuous mode [ 267.216588][ T6909] veth0_macvtap: left promiscuous mode [ 267.260924][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 267.266383][ T6909] veth1_vlan: left promiscuous mode [ 267.300579][ T6909] veth0_vlan: left promiscuous mode [ 267.308977][ T5909] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 267.355768][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.419425][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 267.419440][ T29] audit: type=1400 audit(2000000015.609:4040): avc: denied { ioctl } for pid=8823 comm="syz.0.540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.460770][ T52] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 267.544455][ T8828] new mount options do not match the existing superblock, will be ignored [ 267.663215][ T8828] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 267.710766][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 267.870676][ T29] audit: type=1400 audit(2000000015.649:4041): avc: denied { ioctl } for pid=8820 comm="syz.3.539" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.940828][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.974250][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.984712][ T52] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 268.005136][ T29] audit: type=1400 audit(2000000015.669:4042): avc: denied { ioctl } for pid=8823 comm="syz.0.540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.040521][ T5909] usb 4-1: Product: Ђ [ 268.044705][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.068763][ T5909] usb 4-1: Manufacturer: 뫈麿켸 [ 268.078991][ T5909] usb 4-1: SerialNumber: à Š [ 268.118242][ T52] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.127801][ T29] audit: type=1400 audit(2000000015.729:4043): avc: denied { mounton } for pid=8825 comm="syz.4.541" path="/123/file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 268.162954][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.181675][ T52] usb 1-1: Product: Ђ [ 268.185852][ T52] usb 1-1: Manufacturer: 뫈麿켸 [ 268.251900][ T52] usb 1-1: SerialNumber: à Š [ 268.258912][ T29] audit: type=1400 audit(2000000015.759:4044): avc: denied { ioctl } for pid=8823 comm="syz.0.540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.322741][ T29] audit: type=1400 audit(2000000015.759:4045): avc: denied { mount } for pid=8825 comm="syz.4.541" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.355709][ T29] audit: type=1400 audit(2000000015.779:4046): avc: denied { ioctl } for pid=8820 comm="syz.3.539" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.446920][ T5909] usb 4-1: 0:2 : does not exist [ 268.487485][ T5909] usb 4-1: USB disconnect, device number 19 [ 268.568422][ T29] audit: type=1400 audit(2000000015.849:4048): avc: denied { remount } for pid=8825 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.680512][ T29] audit: type=1400 audit(2000000015.829:4047): avc: denied { ioctl } for pid=8823 comm="syz.0.540" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.799268][ T29] audit: type=1400 audit(2000000015.889:4049): avc: denied { ioctl } for pid=8820 comm="syz.3.539" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.851114][ T52] usb 1-1: 0:2 : does not exist [ 268.919047][ T52] usb 1-1: USB disconnect, device number 27 [ 269.000494][ T5828] Bluetooth: hci0: command tx timeout [ 269.237395][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.550720][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.946101][ T6909] team0 (unregistering): Port device team_slave_1 removed [ 272.099491][ T6909] team0 (unregistering): Port device team_slave_0 removed [ 272.420891][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 272.420907][ T29] audit: type=1400 audit(2000000020.619:4252): avc: denied { search } for pid=8856 comm="rm" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.469290][ T29] audit: type=1400 audit(2000000020.619:4253): avc: denied { read } for pid=8857 comm="syz.4.548" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 272.500373][ T29] audit: type=1400 audit(2000000020.619:4254): avc: denied { read open } for pid=8857 comm="syz.4.548" path="net:[4026533082]" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 272.548046][ T8859] audit: audit_lost=145 audit_rate_limit=0 audit_backlog_limit=64 [ 272.557079][ T29] audit: type=1400 audit(2000000020.619:4255): avc: denied { create } for pid=8857 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.594218][ T8859] audit: out of memory in audit_log_start [ 272.600215][ T29] audit: type=1400 audit(2000000020.649:4256): avc: denied { write } for pid=8857 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.630418][ T29] audit: type=1400 audit(2000000020.659:4257): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 272.663168][ T29] audit: type=1400 audit(2000000020.659:4258): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 272.684640][ T29] audit: type=1400 audit(2000000020.659:4259): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 273.177987][ T8849] batman_adv: batadv0: Adding interface: ip6gretap1 [ 273.203526][ T8849] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 273.244834][ T8849] batman_adv: batadv0: Interface activated: ip6gretap1 [ 275.189706][ T8770] chnl_net:caif_netlink_parms(): no params data found [ 275.651304][ T8890] netlink: 48 bytes leftover after parsing attributes in process `syz.3.555'. [ 276.081913][ T8770] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.124192][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.192808][ T8770] bridge_slave_0: entered allmulticast mode [ 276.341370][ T8770] bridge_slave_0: entered promiscuous mode [ 276.605476][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.676019][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.740631][ T8770] bridge_slave_1: entered allmulticast mode [ 276.840930][ T8770] bridge_slave_1: entered promiscuous mode [ 277.200980][ T8770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.276555][ T8770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.477798][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 277.477813][ T29] audit: type=1400 audit(2000000025.669:4619): avc: denied { search } for pid=8886 comm="sed" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.711155][ T29] audit: type=1400 audit(2000000025.669:4620): avc: denied { read } for pid=8886 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.737646][ T29] audit: type=1400 audit(2000000025.669:4621): avc: denied { read open } for pid=8886 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.143759][ T29] audit: type=1400 audit(2000000025.709:4622): avc: denied { getattr } for pid=8886 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.345118][ T8770] team0: Port device team_slave_0 added [ 278.371765][ T29] audit: type=1400 audit(2000000025.729:4623): avc: denied { execmem } for pid=8903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 278.444537][ T8906] new mount options do not match the existing superblock, will be ignored [ 278.453982][ T8770] team0: Port device team_slave_1 added [ 278.548928][ T29] audit: type=1400 audit(2000000025.789:4624): avc: denied { read } for pid=8902 comm="syz.3.557" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 278.614523][ T29] audit: type=1400 audit(2000000025.789:4625): avc: denied { read open } for pid=8902 comm="syz.3.557" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 278.740501][ T29] audit: type=1400 audit(2000000025.809:4626): avc: denied { recv } for pid=8903 comm="syz.2.560" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 278.811770][ T29] audit: type=1400 audit(2000000026.009:4627): avc: denied { create } for pid=8903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.860632][ T29] audit: type=1400 audit(2000000026.019:4628): avc: denied { write } for pid=8903 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.032888][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.039894][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.282944][ T8770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.354679][ T8770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.390594][ T8770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.464457][ T8770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.987409][ T8770] hsr_slave_0: entered promiscuous mode [ 280.038427][ T8770] hsr_slave_1: entered promiscuous mode [ 280.100397][ T8770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.172879][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 280.193517][ T8770] Cannot create hsr debugfs directory [ 280.491872][ T8927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.563'. [ 281.046725][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'. [ 281.297008][ T8945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8945 comm=syz.3.568 [ 281.314777][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 281.429011][ T8939] new mount options do not match the existing superblock, will be ignored [ 281.443733][ T8945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.805110][ T8946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.839036][ T8946] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 281.851206][ T8946] bond1: (slave vcan0): Error -95 calling set_mac_address [ 281.962825][ T8944] bond0: entered promiscuous mode [ 282.026548][ T8944] bond_slave_0: entered promiscuous mode [ 282.056626][ T8944] bond_slave_1: entered promiscuous mode [ 282.493548][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 282.493562][ T29] audit: type=1400 audit(2000000030.689:4876): avc: denied { ioctl } for pid=8951 comm="syz.0.569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.550659][ T52] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 282.629051][ T29] audit: type=1400 audit(2000000030.789:4877): avc: denied { ioctl } for pid=8951 comm="syz.0.569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.731250][ T52] usb 1-1: device descriptor read/64, error -71 [ 282.744873][ T29] audit: type=1400 audit(2000000030.789:4878): avc: denied { ioctl } for pid=8951 comm="syz.0.569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.857938][ T29] audit: type=1400 audit(2000000030.789:4879): avc: denied { ioctl } for pid=8951 comm="syz.0.569" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.965000][ T29] audit: type=1400 audit(2000000030.809:4880): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.990863][ T52] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 283.039140][ T8770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.066096][ T29] audit: type=1400 audit(2000000030.809:4881): avc: denied { read write open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.091461][ T5938] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 283.110952][ T8957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.117486][ T8957] audit: audit_lost=147 audit_rate_limit=0 audit_backlog_limit=64 [ 283.129102][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.135671][ C0] audit: audit_lost=148 audit_rate_limit=0 audit_backlog_limit=64 [ 283.264467][ T8770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.271374][ T52] usb 1-1: device descriptor read/64, error -71 [ 283.412838][ T52] usb usb1-port1: attempt power cycle [ 283.938367][ T8770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.980201][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.992687][ T52] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 284.006531][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 284.026557][ T8770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.079274][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 284.090736][ T52] usb 1-1: device descriptor read/8, error -71 [ 284.134721][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.194429][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.309147][ T5938] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 284.346811][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 284.379583][ T5938] usb 4-1: Product: syz [ 284.390600][ T52] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 284.420627][ T5938] usb 4-1: Manufacturer: syz [ 284.425256][ T5938] usb 4-1: SerialNumber: syz [ 284.472780][ T52] usb 1-1: device descriptor read/8, error -71 [ 284.492083][ T5938] usb 4-1: config 0 descriptor?? [ 284.590733][ T52] usb usb1-port1: unable to enumerate USB device [ 284.796309][ T5938] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 284.838473][ T5938] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 284.904415][ T5938] usb 4-1: USB disconnect, device number 20 [ 285.101362][ T8770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.321032][ T8770] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.421531][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.428632][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.632136][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.639244][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.195029][ T8988] FAULT_INJECTION: forcing a failure. [ 286.195029][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.277386][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.2.579 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 286.277414][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 286.277435][ T8988] Call Trace: [ 286.277440][ T8988] [ 286.277448][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 286.277472][ T8988] should_fail_ex+0x50a/0x650 [ 286.277501][ T8988] _copy_from_user+0x2e/0xd0 [ 286.277527][ T8988] copy_msghdr_from_user+0x99/0x160 [ 286.277549][ T8988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 286.277568][ T8988] ? __lock_acquire+0xcc5/0x3c40 [ 286.277602][ T8988] ___sys_sendmsg+0xff/0x1e0 [ 286.277622][ T8988] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.277652][ T8988] ? trace_lock_acquire+0x14e/0x1f0 [ 286.277689][ T8988] __sys_sendmmsg+0x201/0x420 [ 286.277712][ T8988] ? __pfx___sys_sendmmsg+0x10/0x10 [ 286.277822][ T8988] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.277856][ T8988] ? fput+0x67/0x440 [ 286.277877][ T8988] ? ksys_write+0x1ba/0x250 [ 286.277902][ T8988] ? __pfx_ksys_write+0x10/0x10 [ 286.277931][ T8988] __x64_sys_sendmmsg+0x9c/0x100 [ 286.277953][ T8988] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.277980][ T8988] do_syscall_64+0xcd/0x250 [ 286.278001][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.278035][ T8988] RIP: 0033:0x7f5c7fd8cda9 [ 286.278050][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.278066][ T8988] RSP: 002b:00007f5c80c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.278083][ T8988] RAX: ffffffffffffffda RBX: 00007f5c7ffa5fa0 RCX: 00007f5c7fd8cda9 [ 286.278095][ T8988] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 286.278107][ T8988] RBP: 00007f5c80c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 286.278118][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.278134][ T8988] R13: 0000000000000000 R14: 00007f5c7ffa5fa0 R15: 00007ffd2a57e358 [ 286.278161][ T8988] [ 287.509738][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 287.509755][ T29] audit: type=1400 audit(2000000035.699:5240): avc: denied { prog_run } for pid=8995 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 287.620855][ T29] audit: type=1400 audit(2000000035.729:5241): avc: denied { read write open } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.767792][ T29] audit: type=1400 audit(2000000035.729:5242): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.804759][ T8998] netlink: 'syz.2.581': attribute type 8 has an invalid length. [ 287.921073][ T29] audit: type=1400 audit(2000000035.799:5243): avc: denied { prog_load } for pid=8995 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 287.998243][ T9000] mmap: syz.4.582 (9000): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 288.023888][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 288.040060][ T29] audit: type=1400 audit(2000000035.799:5244): avc: denied { bpf } for pid=8995 comm="syz.2.581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.040098][ T29] audit: type=1400 audit(2000000035.839:5245): avc: denied { map_create } for pid=8995 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.040126][ T29] audit: type=1400 audit(2000000035.839:5246): avc: denied { bpf } for pid=8995 comm="syz.2.581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.040156][ T29] audit: type=1400 audit(2000000035.859:5247): avc: denied { map_read map_write } for pid=8995 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.040183][ T29] audit: type=1400 audit(2000000035.879:5248): avc: denied { prog_load } for pid=8995 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 288.040212][ T29] audit: type=1400 audit(2000000035.879:5249): avc: denied { bpf } for pid=8995 comm="syz.2.581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.597020][ T9004] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:545a:36ff:fe15:c791 error=-28 [ 288.660070][ T9004] infiniband syz!: set active [ 288.660105][ T9004] infiniband syz!: added team_slave_0 [ 288.790652][ T9004] RDS/IB: syz!: added [ 288.790964][ T9004] smc: adding ib device syz! with port count 1 [ 288.791039][ T9004] smc: ib device syz! port 1 has pnetid [ 290.790554][ T52] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 291.030952][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 291.095437][ T52] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 291.160517][ T52] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 291.196995][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.305958][ T52] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.351919][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.359950][ T52] usb 4-1: Product: Ђ [ 291.402836][ T52] usb 4-1: Manufacturer: 뫈麿켸 [ 291.441039][ T52] usb 4-1: SerialNumber: à Š [ 292.021707][ T52] usb 4-1: 0:2 : does not exist [ 292.146474][ T52] usb 4-1: USB disconnect, device number 21 [ 292.182549][ T9033] devtmpfs: Unknown parameter 'gidýl£JÚ' [ 292.641064][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 292.641081][ T29] audit: type=1400 audit(2000000040.829:5502): avc: denied { recv } for pid=5193 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.875493][ T29] audit: type=1400 audit(2000000041.069:5503): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 292.945131][ T7980] udevd[7980]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.005282][ T29] audit: type=1400 audit(2000000041.069:5504): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.180634][ T29] audit: type=1400 audit(2000000041.139:5505): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.311031][ T29] audit: type=1400 audit(2000000041.139:5506): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.439456][ T29] audit: type=1400 audit(2000000041.149:5507): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.560837][ T29] audit: type=1400 audit(2000000041.149:5508): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.709718][ T29] audit: type=1400 audit(2000000041.159:5509): avc: denied { recv } for pid=5804 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 293.775203][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 293.781775][ C0] audit: audit_lost=163 audit_rate_limit=0 audit_backlog_limit=64 [ 294.950639][ T52] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 295.186051][ T52] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.340559][ T52] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.367511][ T52] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 295.428188][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.498607][ T8770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.515341][ T52] usb 5-1: config 0 descriptor?? [ 295.549399][ T9049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.815195][ T5828] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 295.890606][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 295.946347][ T52] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.004985][ T52] usb 5-1: USB disconnect, device number 18 [ 296.311099][ T8770] veth0_vlan: entered promiscuous mode [ 296.421532][ T9072] new mount options do not match the existing superblock, will be ignored [ 296.435405][ T9072] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 296.571170][ T8770] veth1_vlan: entered promiscuous mode [ 297.099690][ T8770] veth0_macvtap: entered promiscuous mode [ 297.227610][ T8770] veth1_macvtap: entered promiscuous mode [ 297.420631][ T52] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 297.457568][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.516400][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.581045][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.610685][ T52] usb 3-1: device descriptor read/64, error -71 [ 297.659639][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 297.659654][ T29] audit: type=1400 audit(2000000045.839:5899): avc: denied { recv } for pid=9076 comm="syz.4.601" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 297.661010][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.665953][ T29] audit: type=1400 audit(2000000045.849:5900): avc: denied { create } for pid=9076 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.820514][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.889328][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.921847][ T52] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 297.973796][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.990661][ T29] audit: type=1400 audit(2000000045.849:5901): avc: denied { bind } for pid=9076 comm="syz.4.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.050546][ T29] audit: type=1400 audit(2000000045.949:5902): avc: denied { ioctl } for pid=9077 comm="syz.2.602" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.084843][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.094906][ T52] usb 3-1: device descriptor read/64, error -71 [ 298.161817][ T29] audit: type=1400 audit(2000000045.949:5903): avc: denied { ioctl } for pid=9077 comm="syz.2.602" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.166434][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.241230][ T52] usb usb3-port1: attempt power cycle [ 298.319152][ T29] audit: type=1400 audit(2000000046.029:5904): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 298.449100][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.483721][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.490289][ T29] audit: type=1400 audit(2000000046.029:5905): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.514028][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.610860][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.640579][ T52] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 298.640656][ T29] audit: type=1400 audit(2000000046.029:5906): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.660469][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.670649][ T5829] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 298.744228][ T52] usb 3-1: device descriptor read/8, error -71 [ 298.780595][ T29] audit: type=1400 audit(2000000046.039:5907): avc: denied { ioctl } for pid=9077 comm="syz.2.602" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.782904][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.852037][ T29] audit: type=1400 audit(2000000046.059:5908): avc: denied { append open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 298.880516][ T5829] usb 4-1: device descriptor read/64, error -71 [ 298.911330][ T8770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.948485][ T8770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.982554][ T52] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 299.015977][ T52] usb 3-1: device descriptor read/8, error -71 [ 299.033340][ T8770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.150749][ T5829] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 299.160911][ T52] usb usb3-port1: unable to enumerate USB device [ 299.208410][ T8770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.268337][ T8770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.296019][ T8770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.300584][ T5829] usb 4-1: device descriptor read/64, error -71 [ 299.333078][ T8770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.433377][ T5829] usb usb4-port1: attempt power cycle [ 299.800530][ T5829] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 299.868840][ T5829] usb 4-1: device descriptor read/8, error -71 [ 299.904682][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.930704][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.425512][ T5829] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 300.458666][ T5829] usb 4-1: device descriptor read/8, error -71 [ 300.526762][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.554205][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.572727][ T5829] usb usb4-port1: unable to enumerate USB device [ 300.619744][ T936] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 300.800598][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 300.898444][ T936] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.943157][ T936] usb 1-1: config 179 has no interface number 0 [ 300.990932][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 301.055811][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 301.125074][ T936] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 301.145148][ T9108] new mount options do not match the existing superblock, will be ignored [ 301.181228][ T936] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.227944][ T936] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.273127][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.343081][ T9099] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 302.209033][ T5829] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17 [ 302.525147][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.575589][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.669986][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 302.670049][ T29] audit: type=1400 audit(2000000050.859:6192): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.983314][ T29] audit: type=1400 audit(2000000050.879:6193): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2984 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.121791][ T9118] new mount options do not match the existing superblock, will be ignored [ 303.136246][ T52] usb 1-1: USB disconnect, device number 32 [ 303.136319][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 303.150771][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 303.182540][ T52] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 303.211033][ T29] audit: type=1400 audit(2000000050.879:6194): avc: denied { read open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.358751][ T29] audit: type=1400 audit(2000000050.879:6195): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.600026][ T29] audit: type=1400 audit(2000000050.879:6196): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.056262][ T29] audit: type=1400 audit(2000000050.879:6197): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.271410][ T29] audit: type=1400 audit(2000000050.879:6198): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2984 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.413924][ T29] audit: type=1400 audit(2000000050.899:6199): avc: denied { read write open } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.679175][ T29] audit: type=1400 audit(2000000050.919:6200): avc: denied { ioctl } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.753859][ T9023] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.094489][ T9128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.613'. [ 305.734371][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.951068][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.502629][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.672086][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 307.672100][ T29] audit: type=1400 audit(2000000055.869:6380): avc: denied { read } for pid=9142 comm="syz.4.619" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 308.202677][ T29] audit: type=1400 audit(2000000055.899:6381): avc: denied { read open } for pid=9142 comm="syz.4.619" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 308.226888][ T29] audit: type=1400 audit(2000000056.039:6382): avc: denied { create } for pid=9142 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.247808][ T29] audit: type=1400 audit(2000000056.139:6383): avc: denied { setopt } for pid=9142 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.574602][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.701365][ T29] audit: type=1400 audit(2000000056.229:6384): avc: denied { setopt } for pid=9142 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.858942][ T29] audit: type=1400 audit(2000000056.389:6385): avc: denied { read } for pid=9144 comm="syz.2.618" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 309.003077][ T29] audit: type=1400 audit(2000000056.399:6386): avc: denied { read open } for pid=9144 comm="syz.2.618" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 309.043496][ T9150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 309.161057][ T29] audit: type=1400 audit(2000000056.649:6387): avc: denied { create } for pid=9144 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.260688][ T29] audit: type=1400 audit(2000000056.679:6388): avc: denied { setopt } for pid=9144 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.362377][ T29] audit: type=1400 audit(2000000056.699:6389): avc: denied { setopt } for pid=9144 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.405200][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.420348][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.428878][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.440139][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.448095][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 309.455458][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.541883][ T1148] bridge_slave_1: left allmulticast mode [ 309.548843][ T1148] bridge_slave_1: left promiscuous mode [ 309.560592][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.589811][ T1148] bridge_slave_0: left allmulticast mode [ 309.778037][ T1148] bridge_slave_0: left promiscuous mode [ 309.800611][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.035589][ T9167] new mount options do not match the existing superblock, will be ignored [ 311.077568][ T9165] openvswitch: netlink: Message has 8 unknown bytes. [ 311.199823][ T9168] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 311.614814][ T5828] Bluetooth: hci0: command tx timeout [ 313.382339][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 313.382353][ T29] audit: type=1400 audit(2000000061.579:6602): avc: denied { read } for pid=9178 comm="syz.3.628" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 313.488948][ T9179] new mount options do not match the existing superblock, will be ignored [ 313.540041][ T29] audit: type=1400 audit(2000000061.619:6603): avc: denied { read open } for pid=9178 comm="syz.3.628" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 313.693524][ T29] audit: type=1400 audit(2000000061.639:6604): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 313.717200][ T5828] Bluetooth: hci0: command tx timeout [ 313.734746][ T9184] netlink: 'syz.0.629': attribute type 19 has an invalid length. [ 313.770669][ T29] audit: type=1400 audit(2000000061.669:6605): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 313.880645][ T29] audit: type=1400 audit(2000000061.669:6606): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.041223][ T29] audit: type=1400 audit(2000000061.679:6607): avc: denied { recv } for pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 314.131162][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.180984][ T29] audit: type=1400 audit(2000000061.679:6608): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.350299][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.574081][ T29] audit: type=1400 audit(2000000061.679:6609): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.634922][ T1148] bond0 (unregistering): Released all slaves [ 314.700670][ T29] audit: type=1400 audit(2000000061.679:6610): avc: denied { append open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 314.868576][ T29] audit: type=1400 audit(2000000061.679:6611): avc: denied { getattr } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 316.004753][ T5828] Bluetooth: hci0: command tx timeout [ 317.164387][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.170863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.951028][ T1148] hsr_slave_0: left promiscuous mode [ 318.013091][ T1148] hsr_slave_1: left promiscuous mode [ 318.018939][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.046208][ T5828] Bluetooth: hci0: command tx timeout [ 318.108799][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.163063][ T9220] tmpfs: Unknown parameter 's' [ 318.280536][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.287968][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.400490][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 318.400505][ T29] audit: type=1400 audit(2000000066.589:6811): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.550673][ T29] audit: type=1400 audit(2000000066.589:6812): avc: denied { read write open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.686547][ T29] audit: type=1400 audit(2000000066.589:6813): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.714364][ T29] audit: type=1400 audit(2000000066.599:6814): avc: denied { create } for pid=9219 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.727586][ T1148] veth1_macvtap: left promiscuous mode [ 318.767537][ T29] audit: type=1400 audit(2000000066.619:6815): avc: denied { create } for pid=9219 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 318.945153][ T1148] veth0_macvtap: left promiscuous mode [ 319.080713][ T1148] veth1_vlan: left promiscuous mode [ 319.086030][ T1148] veth0_vlan: left promiscuous mode [ 319.404406][ T29] audit: type=1400 audit(2000000066.629:6816): avc: denied { search } for pid=9221 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.430239][ T29] audit: type=1400 audit(2000000066.629:6817): avc: denied { search } for pid=9221 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.488958][ T9221] audit: audit_backlog=65 > audit_backlog_limit=64 [ 319.505558][ T29] audit: type=1400 audit(2000000066.639:6818): avc: denied { search } for pid=9221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.570481][ T9221] audit: audit_lost=212 audit_rate_limit=0 audit_backlog_limit=64 [ 321.662575][ T9244] new mount options do not match the existing superblock, will be ignored [ 321.917974][ T9247] new mount options do not match the existing superblock, will be ignored [ 321.944257][ T9247] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 322.963157][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 323.259189][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 323.445058][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 323.445069][ T29] audit: type=1400 audit(2000000071.629:7097): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.580590][ T29] audit: type=1400 audit(2000000071.639:7098): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.710530][ T29] audit: type=1400 audit(2000000071.639:7099): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 323.832486][ T29] audit: type=1400 audit(2000000071.649:7100): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.968758][ T29] audit: type=1400 audit(2000000071.649:7101): avc: denied { read write open } for pid=5821 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.119801][ T29] audit: type=1400 audit(2000000071.649:7102): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.397317][ T9253] new mount options do not match the existing superblock, will be ignored [ 324.554089][ T29] audit: type=1400 audit(2000000071.829:7103): avc: denied { recv } for pid=9231 comm="syz.3.639" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.671005][ T29] audit: type=1400 audit(2000000071.829:7104): avc: denied { recv } for pid=9231 comm="syz.3.639" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.780546][ T29] audit: type=1400 audit(2000000071.839:7105): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 324.881656][ T29] audit: type=1400 audit(2000000071.839:7106): avc: denied { recv } for pid=9250 comm="sed" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 326.040519][ T936] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 326.246934][ T936] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 326.287318][ T936] usb 4-1: config 0 has no interface number 0 [ 326.330547][ T936] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.430737][ T936] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 326.470307][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.510567][ T936] usb 4-1: Product: syz [ 326.514764][ T936] usb 4-1: Manufacturer: syz [ 326.519369][ T936] usb 4-1: SerialNumber: syz [ 326.598333][ T936] usb 4-1: config 0 descriptor?? [ 326.695016][ T936] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 326.906926][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 327.589680][ T25] usb 4-1: USB disconnect, device number 26 [ 327.634943][ T25] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 327.691583][ T9151] chnl_net:caif_netlink_parms(): no params data found [ 328.338187][ T9151] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.370650][ T9151] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.401306][ T9151] bridge_slave_0: entered allmulticast mode [ 328.408224][ T9151] bridge_slave_0: entered promiscuous mode [ 328.458009][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 328.458023][ T29] audit: type=1400 audit(2000000076.649:7354): avc: denied { prog_run } for pid=9285 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 328.479491][ T9151] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.728579][ T29] audit: type=1400 audit(2000000076.719:7355): avc: denied { execmem } for pid=9286 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 328.747868][ T9151] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.748031][ T9151] bridge_slave_1: entered allmulticast mode [ 328.893824][ T9294] befs: (loop9): No write support. Marking filesystem read-only [ 328.903886][ T9294] syz.4.650: attempt to access beyond end of device [ 328.903886][ T9294] loop9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 328.917005][ T9294] befs: (loop9): unable to read superblock [ 329.093752][ T9294] 9pnet_fd: Insufficient options for proto=fd [ 329.322596][ T9151] bridge_slave_1: entered promiscuous mode [ 329.350163][ T9294] ip6erspan0: entered allmulticast mode [ 329.363991][ T29] audit: type=1400 audit(2000000076.919:7356): avc: denied { prog_load } for pid=9288 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 329.383068][ T29] audit: type=1400 audit(2000000076.919:7357): avc: denied { bpf } for pid=9288 comm="syz.2.652" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.500548][ T29] audit: type=1400 audit(2000000076.919:7358): avc: denied { perfmon } for pid=9288 comm="syz.2.652" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.705219][ T29] audit: type=1400 audit(2000000076.959:7359): avc: denied { append } for pid=9288 comm="syz.2.652" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 329.872790][ T29] audit: type=1400 audit(2000000076.959:7360): avc: denied { read } for pid=9286 comm="syz.0.651" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 329.943975][ T9299] new mount options do not match the existing superblock, will be ignored [ 329.958722][ T9299] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 329.978299][ T29] audit: type=1400 audit(2000000076.959:7361): avc: denied { read open } for pid=9286 comm="syz.0.651" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.136697][ T9151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.154043][ T29] audit: type=1400 audit(2000000076.969:7362): avc: denied { ioctl } for pid=9286 comm="syz.0.651" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 330.197392][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.225145][ T9151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.532854][ T9303] new mount options do not match the existing superblock, will be ignored [ 330.591535][ T9303] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 331.257721][ T9151] team0: Port device team_slave_0 added [ 331.314971][ T9151] team0: Port device team_slave_1 added [ 331.582222][ T9310] new mount options do not match the existing superblock, will be ignored [ 331.705821][ T9310] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 331.757426][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.815895][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.950495][ T9151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.996093][ T9151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.050678][ T9151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.160614][ T9151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.562303][ T9151] hsr_slave_0: entered promiscuous mode [ 332.569479][ T9151] hsr_slave_1: entered promiscuous mode [ 332.618686][ T9151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.660497][ T9151] Cannot create hsr debugfs directory [ 333.461194][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 333.461208][ T29] audit: type=1400 audit(2000000081.649:7535): avc: denied { read } for pid=9314 comm="syz.3.659" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 333.728753][ T9322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.660'. [ 333.738533][ T29] audit: type=1400 audit(2000000081.659:7536): avc: denied { read open } for pid=9314 comm="syz.3.659" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 334.053788][ T29] audit: type=1400 audit(2000000081.719:7537): avc: denied { remove_name search } for pid=9304 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.200562][ T29] audit: type=1400 audit(2000000081.719:7538): avc: denied { unlink } for pid=9304 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=4327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 334.377783][ T29] audit: type=1400 audit(2000000081.819:7539): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 334.411804][ T29] audit: type=1400 audit(2000000081.869:7540): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 334.607971][ T9330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 334.618011][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 334.975192][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.661'. [ 335.099745][ T29] audit: type=1400 audit(2000000081.869:7541): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.190517][ T29] audit: type=1400 audit(2000000081.869:7542): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 335.325388][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.331920][ C0] audit: audit_lost=223 audit_rate_limit=0 audit_backlog_limit=64 [ 336.033789][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.663'. [ 336.347268][ T9323] loop5: detected capacity change from 0 to 8 [ 336.439810][ C1] blk_print_req_error: 24 callbacks suppressed [ 336.439832][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.455220][ C1] buffer_io_error: 24 callbacks suppressed [ 336.455236][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.520570][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.529721][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.566175][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.575375][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.604139][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.613366][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.650517][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.659726][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.677878][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.687087][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.707979][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.717183][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.730543][ T9323] ldm_validate_partition_table(): Disk read failed. [ 336.753131][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.762311][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.810592][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.819750][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.833983][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.843255][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 336.868792][ T9323] Dev loop5: unable to read RDB block 0 [ 336.945137][ T9323] loop5: unable to read partition table [ 336.983600][ T9323] loop5: partition table beyond EOD, truncated [ 336.989772][ T9323] loop_reread_partitions: partition scan of loop5 (3Ÿ ¾‚³˜) failed (rc=-5) [ 337.322090][ T9151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.427529][ T9151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.265774][ T9151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.346195][ T9151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.396508][ T9350] tmpfs: Unknown parameter 'usrquota/#/msr' [ 338.470776][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 338.470791][ T29] audit: type=1400 audit(2000000086.669:7738): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.623211][ T29] audit: type=1400 audit(2000000086.669:7739): avc: denied { read write open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.719383][ T29] audit: type=1400 audit(2000000086.669:7740): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.868631][ T29] audit: type=1400 audit(2000000086.699:7741): avc: denied { create } for pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 338.934568][ T29] audit: type=1400 audit(2000000086.699:7742): avc: denied { write } for pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.256333][ T29] audit: type=1400 audit(2000000086.699:7743): avc: denied { read } for pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.282673][ T5828] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 339.366054][ T29] audit: type=1400 audit(2000000086.699:7744): avc: denied { read } for pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.528814][ T29] audit: type=1400 audit(2000000086.699:7745): avc: denied { write } for pid=9151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 339.631724][ T29] audit: type=1400 audit(2000000086.709:7746): avc: denied { recv } for pid=5831 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 339.725626][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 339.920973][ T9151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.138764][ T9151] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.260650][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.267773][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.361103][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.368237][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.036519][ T9376] vhci_hcd vhci_hcd.0: port 0 already used [ 341.042723][ T5909] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 341.240726][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 341.303008][ T5909] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.331149][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.358122][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 341.384459][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.388898][ T9381] trusted_key: encrypted_key: insufficient parameters specified [ 341.430211][ T5909] usb 4-1: config 0 descriptor?? [ 341.458531][ T9381] trusted_key: encrypted_key: insufficient parameters specified [ 341.518738][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 342.027854][ T9384] Process accounting resumed [ 342.176539][ T5909] apple 0003:05AC:0247.0008: unexpected long global item [ 342.230887][ T5909] apple 0003:05AC:0247.0008: parse failed [ 342.247749][ T5909] apple 0003:05AC:0247.0008: probe with driver apple failed with error -22 [ 342.494861][ T936] usb 4-1: USB disconnect, device number 27 [ 342.794331][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 343.547194][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 343.547210][ T29] audit: type=1400 audit(2000000091.739:8081): avc: denied { recv } for pid=5826 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 343.700508][ T29] audit: type=1400 audit(2000000091.749:8082): avc: denied { recv } for pid=9391 comm="syz.0.677" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 343.841433][ T29] audit: type=1400 audit(2000000091.749:8083): avc: denied { recv } for pid=9391 comm="syz.0.677" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 343.978761][ T29] audit: type=1400 audit(2000000091.759:8084): avc: denied { recv } for pid=9391 comm="syz.0.677" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 344.137074][ T29] audit: type=1400 audit(2000000091.759:8085): avc: denied { recv } for pid=9391 comm="syz.0.677" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 344.206992][ T9403] new mount options do not match the existing superblock, will be ignored [ 344.361129][ T936] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 344.405206][ T9403] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 344.412951][ T29] audit: type=1400 audit(2000000091.819:8086): avc: denied { read write } for pid=5826 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.508205][ T29] audit: type=1400 audit(2000000091.819:8087): avc: denied { read write open } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.616022][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 344.693906][ T936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.726716][ T29] audit: type=1400 audit(2000000091.839:8088): avc: denied { ioctl } for pid=5826 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.834701][ T936] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 344.864672][ T9400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.878664][ T936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.898811][ T5175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.346056][ T936] usb 5-1: Product: syz [ 345.350260][ T936] usb 5-1: Manufacturer: syz [ 345.355188][ T936] usb 5-1: SerialNumber: syz [ 345.393046][ T936] usb 5-1: config 0 descriptor?? [ 345.481478][ T936] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 345.896501][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.956473][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.054321][ T9415] program syz.3.684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.130515][ T9415] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 346.510818][ T367] usb 5-1: Failed to submit usb control message: -110 [ 346.530542][ T367] usb 5-1: unable to send the bmi data to the device: -110 [ 346.588709][ T367] usb 5-1: unable to get target info from device [ 346.670518][ T367] usb 5-1: could not get target info (-110) [ 346.731283][ T367] usb 5-1: could not probe fw (-110) [ 347.048295][ T5938] usb 5-1: USB disconnect, device number 19 [ 347.947788][ T9433] raw_sendmsg: syz.2.686 forgot to set AF_INET. Fix it! [ 348.570529][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 348.570544][ T29] audit: type=1400 audit(2000000096.749:8501): avc: denied { recv } for pid=5193 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 348.818077][ T29] audit: type=1400 audit(2000000096.759:8502): avc: denied { search } for pid=9409 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.040508][ T29] audit: type=1400 audit(2000000096.759:8503): avc: denied { search } for pid=9409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.249333][ T29] audit: type=1400 audit(2000000096.759:8504): avc: denied { search } for pid=9409 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.607530][ T9439] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 349.720606][ T29] audit: type=1400 audit(2000000096.759:8505): avc: denied { getattr } for pid=9409 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1747 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.911703][ T29] audit: type=1400 audit(2000000096.809:8506): avc: denied { read write open } for pid=9434 comm="syz.0.687" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 350.038390][ T29] audit: type=1400 audit(2000000096.829:8507): avc: denied { read write } for pid=9434 comm="syz.0.687" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 350.170861][ T9439] overlayfs: overlapping lowerdir path [ 350.173195][ T29] audit: type=1400 audit(2000000096.829:8508): avc: denied { read write open } for pid=9434 comm="syz.0.687" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 350.202467][ T29] audit: type=1400 audit(2000000096.859:8509): avc: denied { read write } for pid=5831 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.340588][ T29] audit: type=1400 audit(2000000096.859:8510): avc: denied { read write open } for pid=5831 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.421586][ T9452] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 351.554176][ T9151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.782084][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 353.074923][ T9151] veth0_vlan: entered promiscuous mode [ 353.219769][ T9151] veth1_vlan: entered promiscuous mode [ 353.598199][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 353.598213][ T29] audit: type=1400 audit(2000000101.789:8703): avc: denied { recv } for pid=9476 comm="syz.0.698" saddr=127.0.0.1 src=20000 daddr=127.0.0.1 dest=49896 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 353.870215][ T9151] veth0_macvtap: entered promiscuous mode [ 354.000600][ T29] audit: type=1400 audit(2000000101.829:8704): avc: denied { read } for pid=9477 comm="syz.4.697" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 354.159772][ T9151] veth1_macvtap: entered promiscuous mode [ 354.169903][ T29] audit: type=1400 audit(2000000101.829:8705): avc: denied { read open } for pid=9477 comm="syz.4.697" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 354.370936][ T29] audit: type=1400 audit(2000000101.839:8706): avc: denied { recv } for pid=9477 comm="syz.4.697" saddr=10.128.0.169 src=30006 daddr=10.128.1.98 dest=47134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 354.430506][ T29] audit: type=1400 audit(2000000101.889:8707): avc: denied { map_create } for pid=9476 comm="syz.0.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 354.537800][ T29] audit: type=1400 audit(2000000101.919:8708): avc: denied { read write } for pid=9477 comm="syz.4.697" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.637910][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.661461][ T29] audit: type=1400 audit(2000000101.919:8709): avc: denied { read write open } for pid=9477 comm="syz.4.697" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.720624][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.762398][ T29] audit: type=1400 audit(2000000101.929:8710): avc: denied { ioctl } for pid=9477 comm="syz.4.697" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.783528][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.880511][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.881581][ T29] audit: type=1400 audit(2000000101.939:8711): avc: denied { ioctl } for pid=9477 comm="syz.4.697" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.947781][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.006432][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.060621][ T29] audit: type=1400 audit(2000000101.949:8712): avc: denied { ioctl } for pid=9477 comm="syz.4.697" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 355.062486][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.206559][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.241639][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.401155][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.445209][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.478660][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.532211][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.580639][ T5938] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 355.770625][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 355.814986][ T5938] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 355.894347][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.924772][ T5938] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 355.952125][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.961588][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.985922][ T5938] usb 4-1: Product: syz [ 355.990124][ T5938] usb 4-1: Manufacturer: syz [ 356.023344][ T9151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.040611][ T5938] usb 4-1: SerialNumber: syz [ 356.090867][ T9151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.141406][ T9151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.179255][ T5938] usb 4-1: config 0 descriptor?? [ 356.212036][ T9497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.279684][ T9151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.295880][ T5938] hub 4-1:0.0: bad descriptor, ignoring hub [ 356.332627][ T5938] hub 4-1:0.0: probe with driver hub failed with error -5 [ 356.480623][ T9151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.506266][ T9151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.561415][ T9151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.654345][ T5938] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 356.760874][ T5938] usb 4-1: USB disconnect, device number 28 [ 356.760920][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 356.830809][ T30] INFO: task kworker/0:5:5869 blocked for more than 143 seconds. [ 356.878062][ T30] Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 356.908107][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.944954][ T30] task:kworker/0:5 state:D stack:22880 pid:5869 tgid:5869 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 356.984230][ T30] Workqueue: usb_hub_wq hub_event [ 356.996761][ T30] Call Trace: [ 357.000166][ T30] [ 357.010277][ T30] __schedule+0xf43/0x5890 [ 357.021181][ T30] ? __pfx_mark_lock+0x10/0x10 [ 357.033085][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 357.038404][ T30] ? find_held_lock+0x2d/0x110 [ 357.050191][ T30] ? __pfx___schedule+0x10/0x10 [ 357.057375][ T30] ? schedule+0x298/0x350 [ 357.067580][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.076884][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.087856][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.096722][ T30] schedule+0xe7/0x350 [ 357.109429][ T30] schedule_preempt_disabled+0x13/0x30 [ 357.121068][ T30] __mutex_lock+0x6bd/0xb10 [ 357.125604][ T30] ? hub_event+0x2815/0x4e10 [ 357.130269][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 357.169826][ T30] ? __pfx_lock_release+0x10/0x10 [ 357.182079][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 357.196135][ T30] ? hub_ext_port_status+0x1fa/0x670 [ 357.205063][ T30] ? hub_event+0x2815/0x4e10 [ 357.209680][ T30] hub_event+0x2815/0x4e10 [ 357.219224][ T30] ? lock_acquire+0x2f/0xb0 [ 357.227443][ T30] ? __pfx_hub_event+0x10/0x10 [ 357.234360][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 357.245779][ T30] ? rcu_is_watching+0x12/0xc0 [ 357.257104][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 357.272891][ T30] ? process_one_work+0x921/0x1ba0 [ 357.278040][ T30] ? lock_acquire+0x2f/0xb0 [ 357.289334][ T30] ? process_one_work+0x921/0x1ba0 [ 357.307221][ T30] process_one_work+0x9c5/0x1ba0 [ 357.325057][ T30] ? __pfx_hcd_resume_work+0x10/0x10 [ 357.338092][ T30] ? __pfx_process_one_work+0x10/0x10 [ 357.356899][ T30] ? assign_work+0x1a0/0x250 [ 357.367151][ T30] worker_thread+0x6c8/0xf00 [ 357.377774][ T30] ? __kthread_parkme+0x148/0x220 [ 357.388519][ T30] ? __pfx_worker_thread+0x10/0x10 [ 357.410566][ T30] kthread+0x3af/0x750 [ 357.416217][ T30] ? __pfx_kthread+0x10/0x10 [ 357.426851][ T30] ? lock_acquire+0x2f/0xb0 [ 357.436608][ T30] ? __pfx_kthread+0x10/0x10 [ 357.446689][ T30] ret_from_fork+0x45/0x80 [ 357.456044][ T30] ? __pfx_kthread+0x10/0x10 [ 357.467118][ T30] ret_from_fork_asm+0x1a/0x30 [ 357.479128][ T30] [ 357.540146][ T30] [ 357.540146][ T30] Showing all locks held in the system: [ 357.563048][ T30] 5 locks held by kworker/0:1/9: [ 357.594007][ T30] #0: ffff888144ab5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 357.617031][ T30] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 357.642844][ T30] #2: ffff888145bd9190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 357.669481][ T30] #3: ffff888145bdd510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10 [ 357.685805][ T30] #4: ffff888145381f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10 [ 357.700885][ T30] 1 lock held by khungtaskd/30: [ 357.706625][ T30] #0: ffffffff8e1bcbc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 357.725426][ T30] 3 locks held by kworker/u8:2/35: [ 357.734773][ T30] #0: ffff88803177d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 357.762067][ T30] #1: ffffc90000ab7d18 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 357.790994][ T30] #2: ffffffff8fef36e8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x121/0x14e0 [ 357.807435][ T30] 2 locks held by kworker/u8:4/64: [ 357.820013][ T30] #0: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 357.851224][ T30] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 357.888151][ T30] 2 locks held by getty/5572: [ 357.904089][ T30] #0: ffff88803236e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 357.926625][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 357.968552][ T30] 5 locks held by kworker/0:5/5869: [ 357.981386][ T30] #0: ffff888144ab5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 358.015241][ T30] #1: ffffc90004267d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 358.056832][ T30] #2: ffff888145f08190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 358.081285][ T30] #3: ffff88802a078510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x27ec/0x4e10 [ 358.104806][ T30] #4: ffff888145381f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2815/0x4e10 [ 358.131228][ T30] 3 locks held by syz-executor/9151: [ 358.137356][ T30] #0: ffffffff8fef36e8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 358.152189][ T30] #1: ffff88805bae14e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x203/0x4e0 [ 358.168367][ T30] #2: ffffffff8e1c8038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 358.182267][ T30] 2 locks held by syz.4.697/9479: [ 358.188484][ T30] #0: ffffffff8feddb10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x292/0x6c0 [ 358.203412][ T30] #1: ffffffff8e1c8038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 358.219779][ T30] 1 lock held by cmp/9515: [ 358.230917][ T30] [ 358.302257][ T30] ============================================= [ 358.302257][ T30] [ 358.350309][ T30] NMI backtrace for cpu 0 [ 358.350321][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 358.350342][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.350352][ T30] Call Trace: [ 358.350357][ T30] [ 358.350365][ T30] dump_stack_lvl+0x116/0x1f0 [ 358.350389][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 358.350415][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.350437][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 358.350460][ T30] watchdog+0xf62/0x12b0 [ 358.350485][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.350507][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.350535][ T30] ? __kthread_parkme+0x148/0x220 [ 358.350554][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.350580][ T30] kthread+0x3af/0x750 [ 358.350601][ T30] ? __pfx_kthread+0x10/0x10 [ 358.350627][ T30] ? __pfx_kthread+0x10/0x10 [ 358.350646][ T30] ret_from_fork+0x45/0x80 [ 358.350666][ T30] ? __pfx_kthread+0x10/0x10 [ 358.350685][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.350714][ T30] [ 358.457539][ T30] Sending NMI from CPU 0 to CPUs 1: [ 358.463208][ C1] NMI backtrace for cpu 1 [ 358.463219][ C1] CPU: 1 UID: 0 PID: 9515 Comm: cmp Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 358.463240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.463251][ C1] RIP: 0010:__lock_acquire+0xefb/0x3c40 [ 358.463280][ C1] Code: 00 0f 87 4c f2 ff ff 45 89 f7 0f 87 45 1f 00 00 4b 8d 7c fc 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 41 1f 00 00 4b 8b 54 fc 08 48 85 d2 0f 85 36 f2 ff ff e9 10 [ 358.463297][ C1] RSP: 0018:ffffc900041c74b8 EFLAGS: 00000046 [ 358.463311][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 358.463322][ C1] RDX: 1ffffffff3544575 RSI: 1ffff92000838ea9 RDI: ffffffff9aa22ba8 [ 358.463334][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 358.463344][ C1] R10: ffffffff90621517 R11: 0000000000000002 R12: ffffffff9aa22ba0 [ 358.463355][ C1] R13: ffff88802e0c8000 R14: 0000000000000000 R15: 0000000000000000 [ 358.463366][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 358.463382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.463394][ C1] CR2: 00007f21ce3e2270 CR3: 0000000056018000 CR4: 00000000003526f0 [ 358.463405][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.463415][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.463425][ C1] Call Trace: [ 358.463430][ C1] [ 358.463436][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 358.463462][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 358.463484][ C1] ? nmi_handle+0x1ac/0x5d0 [ 358.463509][ C1] ? __lock_acquire+0xefb/0x3c40 [ 358.463532][ C1] ? default_do_nmi+0x6a/0x160 [ 358.463555][ C1] ? exc_nmi+0x170/0x1e0 [ 358.463579][ C1] ? end_repeat_nmi+0xf/0x53 [ 358.463607][ C1] ? __lock_acquire+0xefb/0x3c40 [ 358.463631][ C1] ? __lock_acquire+0xefb/0x3c40 [ 358.463660][ C1] ? __lock_acquire+0xefb/0x3c40 [ 358.463682][ C1] [ 358.463687][ C1] [ 358.463698][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 358.463721][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 358.463746][ C1] lock_acquire.part.0+0x11b/0x380 [ 358.463770][ C1] ? avc_alloc_node+0x1f1/0x5a0 [ 358.463796][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 358.463821][ C1] ? rcu_is_watching+0x12/0xc0 [ 358.463838][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 358.463858][ C1] ? do_raw_spin_trylock+0xb1/0x180 [ 358.463874][ C1] ? avc_alloc_node+0x1f1/0x5a0 [ 358.463898][ C1] ? lock_acquire+0x2f/0xb0 [ 358.463920][ C1] ? avc_alloc_node+0x1f1/0x5a0 [ 358.463946][ C1] _raw_spin_trylock+0x63/0x80 [ 358.463970][ C1] ? avc_alloc_node+0x1f1/0x5a0 [ 358.463995][ C1] avc_alloc_node+0x1f1/0x5a0 [ 358.464021][ C1] avc_compute_av+0xfd/0x5c0 [ 358.464047][ C1] avc_perm_nonode+0xaa/0x180 [ 358.464072][ C1] ? __pfx_avc_perm_nonode+0x10/0x10 [ 358.464097][ C1] ? avc_has_perm_noaudit+0x2b1/0x3a0 [ 358.464126][ C1] ? lock_acquire+0x2f/0xb0 [ 358.464147][ C1] ? avc_has_perm_noaudit+0x61/0x3a0 [ 358.464175][ C1] avc_has_perm_noaudit+0x2d2/0x3a0 [ 358.464203][ C1] selinux_inode_permission+0x361/0x590 [ 358.464226][ C1] ? __pfx_selinux_inode_permission+0x10/0x10 [ 358.464249][ C1] ? __pfx_step_into+0x10/0x10 [ 358.464276][ C1] security_inode_permission+0xda/0x260 [ 358.464299][ C1] inode_permission+0x17a/0x5f0 [ 358.464320][ C1] ? walk_component+0x104/0x5b0 [ 358.464344][ C1] link_path_walk.part.0.constprop.0+0x1d7/0xd40 [ 358.464374][ C1] path_lookupat+0x93/0x770 [ 358.464400][ C1] filename_lookup+0x221/0x5f0 [ 358.464426][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 358.464462][ C1] ? __virt_addr_valid+0x5e/0x590 [ 358.464480][ C1] ? __phys_addr_symbol+0x30/0x80 [ 358.464496][ C1] ? __check_object_size+0x488/0x710 [ 358.464517][ C1] vfs_statx+0xf8/0x1c0 [ 358.464536][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 358.464555][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 358.464579][ C1] vfs_fstatat+0x7b/0xf0 [ 358.464599][ C1] __do_sys_newfstatat+0xa2/0x130 [ 358.464619][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 358.464643][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 358.464674][ C1] do_syscall_64+0xcd/0x250 [ 358.464691][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.464715][ C1] RIP: 0033:0x7f21ce6898a9 [ 358.464729][ C1] Code: 49 01 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 0c f7 d8 41 83 c8 ff 89 05 a1 49 01 00 [ 358.464745][ C1] RSP: 002b:00007ffc480d5328 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 358.464760][ C1] RAX: ffffffffffffffda RBX: 00007f21ce666338 RCX: 00007f21ce6898a9 [ 358.464771][ C1] RDX: 00007ffc480d53d0 RSI: 00007ffc480d5330 RDI: 00000000ffffff9c [ 358.464783][ C1] RBP: 00007ffc480d5490 R08: 0000000000080000 R09: 00007ffc480d5330 [ 358.464794][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc480d5330 [ 358.464804][ C1] R13: 0000000000000009 R14: 00007f21ce69ba40 R15: 00000000ffffffff [ 358.464820][ C1] [ 358.471619][ T9151] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 358.651312][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 358.651327][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 358.651349][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.651359][ T30] Call Trace: [ 358.651365][ T30] [ 358.651372][ T30] dump_stack_lvl+0x3d/0x1f0 [ 358.651396][ T30] panic+0x71d/0x800 [ 358.651417][ T30] ? __pfx_panic+0x10/0x10 [ 358.651435][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 358.651460][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.651483][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 358.651506][ T30] ? watchdog+0xdcc/0x12b0 [ 358.651529][ T30] ? watchdog+0xdbf/0x12b0 [ 358.651556][ T30] watchdog+0xddd/0x12b0 [ 358.651584][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.651607][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 358.651640][ T30] ? __kthread_parkme+0x148/0x220 [ 358.651659][ T30] ? __pfx_watchdog+0x10/0x10 [ 358.651683][ T30] kthread+0x3af/0x750 [ 358.651705][ T30] ? __pfx_kthread+0x10/0x10 [ 358.651729][ T30] ? __pfx_kthread+0x10/0x10 [ 358.651750][ T30] ret_from_fork+0x45/0x80 [ 358.651771][ T30] ? __pfx_kthread+0x10/0x10 [ 358.651791][ T30] ret_from_fork_asm+0x1a/0x30 [ 358.651820][ T30] [ 358.652528][ T30] Kernel Offset: disabled