last executing test programs: 15.659928585s ago: executing program 1 (id=80): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x61) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r3, 0x2, 0x0, 0x0, 0x3, [0x0], [0x800000, 0x0, 0xffffffff], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000004c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x1) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a88503e204d8a36b11a07d18b06a733e0e74bed06fb60220d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f", @ANYRES32=r10], 0x0, 0x0}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x10202, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r11, 0x2, &(0x7f0000000100)=0x7e7e) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 10.957528421s ago: executing program 1 (id=92): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 9.969501814s ago: executing program 1 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x200000000000011, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 8.022963361s ago: executing program 4 (id=98): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)={0x4a402}, 0x18) connect$tipc(r5, 0x0, 0x0) (async) connect$tipc(r5, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r3, 0x0, 0x1011) (async) ptrace$ARCH_GET_CPUID(0x1e, r3, 0x0, 0x1011) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @remote, 0x0, 0x4, 0x1, 0x0, 0x80, 0x82680167, r6}) socket(0xf, 0x80003, 0x3ff) (async) socket(0xf, 0x80003, 0x3ff) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, 0x0, 0x0) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) 7.095911495s ago: executing program 4 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7.087525378s ago: executing program 1 (id=102): openat$pfkey(0xffffffffffffff9c, 0x0, 0xc4c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 6.319799108s ago: executing program 1 (id=105): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x88, @rand_addr=0x64010102, 0x4e21, 0x0, 'wlc\x00', 0x13, 0xa652, 0x41}, {@multicast2, 0x4e24, 0x2000, 0x1, 0x1, 0x4}}, 0x44) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000380)={0xc, 0x4, 0xc865}) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) dup(0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000580)=""/252, 0xfc}, {0x0}], 0x4) r4 = dup(0xffffffffffffffff) sendfile(r3, r4, 0x0, 0x80005) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5090}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000001c0)={{0x3b, @remote, 0x4e22, 0x3, 'sh\x00', 0x30, 0x0, 0x75}, {@loopback, 0x4e23, 0x3, 0xb31b, 0xfffffff9, 0xc}}, 0x44) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, &(0x7f0000000280)=0x71e4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000002c0)=0x400, 0x4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_TDLS_OPER(r5, 0x0, 0x40) 6.0601538s ago: executing program 4 (id=107): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001114010029bd7000feffffff080001"], 0x20}}, 0xf00000000000000) 5.493497178s ago: executing program 4 (id=108): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000002c0), 0x20, 0x40100) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x300, 0x100000, 0x0, 0x0, 0xf}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 5.376718654s ago: executing program 2 (id=110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x700, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062b2c25", 0x8}], 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x2, 0xc4401) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000040)) sendmsg$NL80211_CMD_VENDOR(r7, 0x0, 0x0) 5.20566538s ago: executing program 0 (id=111): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000002c0), 0x20, 0x40100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) sendmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002900)="f46dd9e7ee3cae8f1b329eab9fbb16b5c9c51a59a4507417244d124db5fd51ded6420cec714a5614ebac6519572e60376ef869c163c3b0879a4b593549613366b445b7cc712b348bccaf142d31e8f800dfa737a713339fac15ddafb3595b44f100a111f2b3d460c1039252", 0x6b}, {0x0}], 0x2}}], 0x1, 0x44080) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_disconnect(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000600)={0x0, 0x100300, 0x0, 0x0, 0xf}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 4.977120817s ago: executing program 4 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x46}]}, 0x28}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x48c86, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 3.539315745s ago: executing program 2 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1, 0x1002, 0xabd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="021800000b00000000000000df570000030005000000000002000200e00000010000080000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/266], 0x10c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0x0, 0x100000001, 0x244b, 0xfffffffffffffffd, 0x0, 0x100000, 0x4}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) 3.519838711s ago: executing program 4 (id=114): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x358, &(0x7f0000001a00)={{0x12, 0x1, 0x0, 0xef, 0x6e, 0xf3, 0x20, 0x13d8, 0x21, 0x897d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x346, 0x2, 0xfc, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x39, 0x1, 0x1, 0x1c, 0xca, 0x30, 0x4, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4db8df4e"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x101, 0x8, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x12}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x9, 0x1}]}], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x2, 0x40, 0x80, [@generic={0x61, 0x9, "fc6bba4414f687dceee659124e57e3897ddee6a36196ab78014171533eb3deedfe2df0b6dd7fd7e3eea484ecd722887c37dfe28c0ed0c9f4b3388ce310f58ce48ac82a43276a798cceab856d90e26153f523dc8bed4502ee4f0b65c390c5d8"}, @generic={0x86, 0x0, "00200c87b0cf2b7069ddae977661d6d55c9f44dac47516febb3b89120f930c1e2bb9466061fe05448d35bab145083b685534cd0324f2fc617907eb0df75d936d4e217949bbe42178400c185be687c380b6ceac50421004e2a3073342541a72a44be076d6258cc383b00bb16b6ee01aa572a779bb89da9eb757d918310c1c009d82122c1a"}]}}]}}, {{0x9, 0x4, 0xf, 0x7, 0x4, 0xff, 0x2, 0x10, 0x8, [@generic={0xaf, 0x3, "9d42f9cd7a3f4d6a0caf34b12a30ca9dfdce8edbea06ec26cd8eaa0bc5f450996712024f86b53d7ea4cee36cf99a193fe2348dab74cee5e9b8507331930417a97dd9549dbaa87ca55c8138825c5f4cca030db378e3f9e2c795d2112948ab342a3e9f9bd521efc9cb64a1c06e2454c8d5ad02d09b851e95f239a7c4c8f80e7931d447346575b54d259a273daff0ae26fbfdde183be15f1a380cf792dee0bb8150d3b74666e476b9f89c2c1ac230"}], [{{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x1, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}, @generic={0xa0, 0x30, "79af3762901fac61d90f270a35824c2a44b6c875af5ce70a6c2249643be8c7f814cc79a059d14677b96b3955967d87622a794fe8e9918a8cbd47981afdc1cc8f17d021a939ec7dd7a3b24ea6505f3876a5e3e62557363c546ff565fbc4b2a09448e1b74328900381553d16fbb5a6897f0de0bda8e6050a9e62d15bb7854721aa00c0e7c820a821690dd2291310e20132809af10b3db8e0734d1253f6c563"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x0, 0x4, 0x27, [@generic={0x56, 0x2, "744034b0a52d5fa48c69d3c6c45d5fbce09b524d716c913c2ce7c26ca065ef8dc092339cdae593ee1f6d2a7e8185246ace71a237ca749b1fe123dc2c89e86155618294bd0120edaa180b47b35c548d812669c41c"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x4b, 0x7f, 0x31}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x4, 0x3, 0x2, [@generic={0x3c, 0xb, "8cd601413d1438807a3f361c03e590b866538e8fc43f4f886f50b1e0710c8a9d948fa5803b54c3a1b0855a2d7a073b48aecc4f2284d02a27c393"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)={0x20, 0xe, 0x2, "ad61"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x1, "89"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f0000003040)={0x22, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000040)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="00023b0000003b041341ec79ac51e06ab1db1afe381902d48db63f1c38e01e5a7b075842e79e32ccdd9d35e5ad0c31d1721f9f0399bb9109de0000000000000000"], &(0x7f00000018c0)=ANY=[@ANYBLOB="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"]}, &(0x7f0000001800)={0x34, &(0x7f0000000380)={0x20, 0x1, 0x5c, "d35f1ccf2f9f3ae12debf393445e4f3efd3a545a8aab23ad2df3f297ddb85858e64ac99a4a93c2fa4f88b7c7d846697b07d8732e863a2b889d12535168c8c33531edc4f0e2b2b00ff849a2d21ff674a22094deecd51159d5ba0b5390"}, &(0x7f0000000140)={0x0, 0xa, 0x18, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x6e, {0x6c, "635595a0f4967378f9c7940927cba744ca56a96a8ff61ef7d215059b8d1648bc8e4bc6cfacacc580f370f301223a358a1759a2a7a3c406771ad715f144fed5b4a44e0690bae174a53dd66d1c8a9868ad8044b2c749a65c9ed6bec907e151a5b8a92849f4268c8123f4093f7a"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x2c}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0x4}}) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des3_ede-generic)\x00'}, 0x58) r4 = dup(r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r2, 0x0) bind$inet6(r4, &(0x7f0000001880)={0xa, 0x4e24, 0x6, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x2, 0x1, 0x0, 0x0, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0xfffffffe, 0x4002}, &(0x7f0000001840), &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x2c9ab000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r5, 0x0) 3.374020488s ago: executing program 0 (id=115): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6090b50000140600fe8000000000000000000000000000bbfe8000000000000000010000000000aaff", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 3.089302748s ago: executing program 3 (id=116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="ed080c801b6ff416d7e55632a71dbf9689d63af9768b51ad33df25f44d5dddbd5f36235a0c61611d4f0241a2771a1dd5a9fd0bd5401000b49708fcc5ed1a9c01d42b", @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRESHEX, @ANYBLOB="9485b476276b64f7566c992705f1cc6235b06b100d0cc5362bb34ed046e4cc7e4e3f55f53b33916eb2f39608d7fcd7ed72ca7539c879e962db61e6732d77e568b594de6c188f3fb7f47a58c2bff369bb5bf5a6c7837d5fa9dabc8187e590677e9edd06ea3eff509f13b70920f051915d", @ANYRES8, @ANYRES32, @ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x28, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x4008}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0xcd936000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fsopen(&(0x7f0000000440)='anon_inodefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) 3.040690832s ago: executing program 2 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r1, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x2c}}, 0x4004810) 2.989973606s ago: executing program 3 (id=118): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) setreuid(0xee00, 0xee00) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010600ba9380d4", 0x20) r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x8, 0xe4200) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000140)=""/25) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 2.923946891s ago: executing program 0 (id=119): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa3000000a100000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.880495322s ago: executing program 2 (id=120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffd0d) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x9, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0x6}, 0x18) r1 = fanotify_init(0x200, 0x0) dup(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8881, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000480), 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r6, 0x40096100, &(0x7f00000003c0)={{}, 0xc}) 2.798094221s ago: executing program 3 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000300000000070000000900010073797a300000000058000000090a01040000000000000000070000000900020073797a31000000fd0900010073797a3000000000100011800c000100636f756e74657200080005400000001e08000a40000000000c00104000000000000000014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000204000b800c0004"], 0xec}}, 0x0) 2.649305731s ago: executing program 0 (id=122): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$media(&(0x7f00000002c0), 0x20, 0x40100) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) pselect6(0x40, &(0x7f0000000600)={0x300, 0x100000, 0x0, 0x0, 0xf}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.467514622s ago: executing program 3 (id=123): openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210526bd7000ffdbdf250700000008000100020000000c0006"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000140)=""/216) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x8) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.81591643s ago: executing program 2 (id=124): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000f3000003d74b4f3d00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01ef50619551f14dc961ac0000000000000000000000002000", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 1.706003503s ago: executing program 0 (id=125): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x41e, &(0x7f00000002c0)={0x0, 0x124a, 0x100, 0x0, 0x280}, &(0x7f0000ff0000), 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = dup(r0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) mlockall(0x7) 1.600092561s ago: executing program 2 (id=126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0xfffffffffffffffc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100cef50884909ad9c278abbd000000003000000030000000030080000000000001000007000000000400f20002000000020000000000000c07000000080000000000000e0400000001000000002e001826f3ae86eaddfaf3198c11b3dfc6a126ebff910cf19c509e529f202baa528cd6913c54357c3c94c20376e1e486760af754c5a040a9620fcbc057d4ee282ec194dd8bfcb03a2a055b8e5d6f1f788db508ff7707cda7e8fc35ec9b3a519e543257250d82f8e5297d273a097b6a0395f475b374939ef9f6abd52c753a5a29df869a5e9bd7ce"], 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000bbac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007689c83ec882a07c939f8ec778b5ae16a703"], 0x13c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0x4) setfsuid(r6) socket(0x10, 0x3, 0x4f) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r8, 0x0, {0x0, 0xff, 0x2}, 0x806922bf3a6e0375}, 0x18, &(0x7f00000002c0)={&(0x7f0000000240)="440724daf93d4575b3d103145d6938e509aca9bc132dc629fd8d45a7a31d02ace10deb8d911e4139d3afe839e98e4af11d01b55c24a4bfcdf651239af9cc19", 0x3f}, 0x1, 0x0, 0x0, 0x2000a080}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) 1.31030508s ago: executing program 3 (id=127): openat$pfkey(0xffffffffffffff9c, 0x0, 0xc4c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 613.953167ms ago: executing program 0 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002a00)='net/fib_trie\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1, 0x1002, 0xabd3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="021800000b00000000000000df570000030005000000000002000200e00000010000080000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000e8ffffff0100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000000e08000240000000120400058008000640000000010900010073797a30000000001400000011000100"/266], 0x10c}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0x0, 0x100000001, 0x244b, 0xfffffffffffffffd, 0x0, 0x100000, 0x4}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) 485.447351ms ago: executing program 3 (id=129): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x7, 0x10, 0xfff, 0x200000, {{0x11, 0x4, 0x2, 0x31, 0x44, 0x67, 0x0, 0xe, 0x29, 0x0, @empty, @local, {[@lsrr={0x83, 0x1f, 0x36, [@broadcast, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010101, @loopback, @loopback]}, @lsrr={0x83, 0xf, 0xa5, [@empty, @empty, @remote]}]}}}}}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="03000000020100008145000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000ae978681f3ef55d9de000300006001010000b45a7137224d411d100f2c043e5b8c61fb4cd64896a642877ccb6778fb1f984cadbee693a12010154a765b3f4fb3cb57ed13865b72800035e50c82f3afa482f66d9092c7f44e29f1e162261111be295dc3cd19fce2e2436f4011283e5490bdcc718774f92fe6fe6357a40876da4a03731b029ec0a8ca957b1f75a947cecf36625a8ee8dd59696797a6d3978a4e8f8835fe1fad588f233745f76ace15018940d0f2749137027f783d62fe23c170e86acd966cfcae7ec4273f004312f0314825b52c35cab95b28139a40a2f7fbeedf9e52e8cca3957844a8516552bbaa31e010d5d8273dcf2068cae603faf1484c4f153278f3fba6be961c371975e8dbdb5f37"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000425000/0x4000)=nil, 0x4000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="5028661503a515b85fd6570b9f48ca48bb720bd5d683f0843e8fb4f4b761f66491ec5d0c2b7bc8322a24c9738ddd915261e6650989c627b0557de8cdd378d60000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x2e, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) 0s ago: executing program 1 (id=130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000000c0000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): [ 42.245173][ T29] audit: type=1400 audit(1736847889.263:78): avc: denied { transition } for pid=5667 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.273408][ T29] audit: type=1400 audit(1736847889.263:79): avc: denied { noatsecure } for pid=5667 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.293224][ T29] audit: type=1400 audit(1736847889.263:80): avc: denied { write } for pid=5667 comm="sh" path="pipe:[4606]" dev="pipefs" ino=4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 42.315583][ T29] audit: type=1400 audit(1736847889.263:81): avc: denied { rlimitinh } for pid=5667 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.335376][ T29] audit: type=1400 audit(1736847889.263:82): avc: denied { siginh } for pid=5667 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.714552][ T29] audit: type=1400 audit(1736847889.733:83): avc: denied { write } for pid=5670 comm="sftp-server" path="pipe:[4624]" dev="pipefs" ino=4624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 43.170960][ T29] audit: type=1400 audit(1736847890.183:84): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 43.193803][ T29] audit: type=1400 audit(1736847890.183:85): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.217405][ T29] audit: type=1400 audit(1736847890.183:86): avc: denied { open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.240168][ T29] audit: type=1400 audit(1736847890.183:87): avc: denied { getattr } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 51.967559][ T29] audit: type=1400 audit(1736847898.983:88): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.971768][ T5805] cgroup: Unknown subsys name 'net' [ 51.990311][ T29] audit: type=1400 audit(1736847898.983:89): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.021201][ T29] audit: type=1400 audit(1736847899.043:90): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.204894][ T5805] cgroup: Unknown subsys name 'cpuset' [ 52.212442][ T5805] cgroup: Unknown subsys name 'rlimit' [ 52.377341][ T29] audit: type=1400 audit(1736847899.393:91): avc: denied { setattr } for pid=5805 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.411330][ T29] audit: type=1400 audit(1736847899.393:92): avc: denied { create } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.436706][ T29] audit: type=1400 audit(1736847899.393:93): avc: denied { write } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.457277][ T29] audit: type=1400 audit(1736847899.393:94): avc: denied { read } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.477652][ T29] audit: type=1400 audit(1736847899.413:95): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.484217][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 52.499103][ T29] audit: type=1400 audit(1736847899.413:96): avc: denied { mounton } for pid=5805 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 52.532968][ T29] audit: type=1400 audit(1736847899.413:97): avc: denied { mount } for pid=5805 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 53.450239][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.661495][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.671446][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.684198][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.690418][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.691661][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.710691][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.717685][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.718872][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.725717][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.733147][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.740522][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.746904][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.754626][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.760373][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.769192][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.776100][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.782996][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.787931][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.795598][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.803065][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.810396][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.822624][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.823376][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.833362][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.846010][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.859143][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.868259][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.891608][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.902094][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.909333][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.091310][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 56.257890][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 56.269459][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.278552][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.285989][ T5823] bridge_slave_0: entered allmulticast mode [ 56.293048][ T5823] bridge_slave_0: entered promiscuous mode [ 56.328104][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.336334][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.345946][ T5823] bridge_slave_1: entered allmulticast mode [ 56.353184][ T5823] bridge_slave_1: entered promiscuous mode [ 56.425567][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 56.440634][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.449511][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.456827][ T5817] bridge_slave_0: entered allmulticast mode [ 56.463392][ T5817] bridge_slave_0: entered promiscuous mode [ 56.472765][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.484161][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.532123][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.539220][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.546709][ T5817] bridge_slave_1: entered allmulticast mode [ 56.553628][ T5817] bridge_slave_1: entered promiscuous mode [ 56.571737][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 56.602526][ T5823] team0: Port device team_slave_0 added [ 56.627110][ T5823] team0: Port device team_slave_1 added [ 56.647019][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.661567][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 56.680160][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.715435][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.722486][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.748588][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.767615][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.774843][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.782090][ T5816] bridge_slave_0: entered allmulticast mode [ 56.788540][ T5816] bridge_slave_0: entered promiscuous mode [ 56.801631][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.808793][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.834976][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.858335][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.867354][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.874888][ T5816] bridge_slave_1: entered allmulticast mode [ 56.881309][ T5816] bridge_slave_1: entered promiscuous mode [ 56.899353][ T5817] team0: Port device team_slave_0 added [ 56.925994][ T5817] team0: Port device team_slave_1 added [ 56.936022][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.944352][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.951441][ T5818] bridge_slave_0: entered allmulticast mode [ 56.958729][ T5818] bridge_slave_0: entered promiscuous mode [ 56.967525][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.005688][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.013022][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.020163][ T5818] bridge_slave_1: entered allmulticast mode [ 57.027216][ T5818] bridge_slave_1: entered promiscuous mode [ 57.041175][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.069583][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.076743][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.103207][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.116685][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.123787][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.150516][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.192895][ T5816] team0: Port device team_slave_0 added [ 57.201583][ T5823] hsr_slave_0: entered promiscuous mode [ 57.208283][ T5823] hsr_slave_1: entered promiscuous mode [ 57.229985][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.237628][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.245007][ T5828] bridge_slave_0: entered allmulticast mode [ 57.251581][ T5828] bridge_slave_0: entered promiscuous mode [ 57.259977][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.271526][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.282543][ T5816] team0: Port device team_slave_1 added [ 57.305488][ T5818] team0: Port device team_slave_0 added [ 57.319696][ T5817] hsr_slave_0: entered promiscuous mode [ 57.326122][ T5817] hsr_slave_1: entered promiscuous mode [ 57.332655][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.340488][ T5817] Cannot create hsr debugfs directory [ 57.346428][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.353729][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.360859][ T5828] bridge_slave_1: entered allmulticast mode [ 57.367535][ T5828] bridge_slave_1: entered promiscuous mode [ 57.381230][ T5818] team0: Port device team_slave_1 added [ 57.428894][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.436275][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.464898][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.494114][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.504495][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.511451][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.537518][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.559873][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.567097][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.593378][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.606218][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.613385][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.639656][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.658651][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.725197][ T5828] team0: Port device team_slave_0 added [ 57.738506][ T5818] hsr_slave_0: entered promiscuous mode [ 57.745097][ T5818] hsr_slave_1: entered promiscuous mode [ 57.750998][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.758590][ T5818] Cannot create hsr debugfs directory [ 57.785822][ T5828] team0: Port device team_slave_1 added [ 57.810605][ T5816] hsr_slave_0: entered promiscuous mode [ 57.816894][ T5816] hsr_slave_1: entered promiscuous mode [ 57.823089][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.830659][ T5816] Cannot create hsr debugfs directory [ 57.869828][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.877944][ T5831] Bluetooth: hci3: command tx timeout [ 57.882273][ T5834] Bluetooth: hci2: command tx timeout [ 57.883784][ T5825] Bluetooth: hci1: command tx timeout [ 57.890456][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.921088][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.933486][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.940452][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.966905][ T5831] Bluetooth: hci0: command tx timeout [ 57.972431][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.982950][ T5831] Bluetooth: hci4: command tx timeout [ 58.100065][ T5828] hsr_slave_0: entered promiscuous mode [ 58.106751][ T5828] hsr_slave_1: entered promiscuous mode [ 58.113271][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.120843][ T5828] Cannot create hsr debugfs directory [ 58.169910][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.203653][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.215959][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.246718][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.301239][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.325205][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.338214][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.350057][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.380056][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.398149][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.415894][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.437961][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.466672][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.488886][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.499105][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.508713][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.578223][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.587243][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.614248][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.629041][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.716583][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.731749][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.747536][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.771568][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.786713][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.811616][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.818900][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.838464][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.848975][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.861475][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.868603][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.885941][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.899514][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.906637][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.926017][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.933096][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.943529][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.950590][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.959466][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.966576][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.987407][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.994525][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.006650][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.013749][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.089996][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.115260][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.137421][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.199241][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.206929][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.218793][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 59.218809][ T29] audit: type=1400 audit(1736847906.233:111): avc: denied { sys_module } for pid=5818 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.234897][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.253449][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.475497][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.506193][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.568347][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.620201][ T5818] veth0_vlan: entered promiscuous mode [ 59.635152][ T5818] veth1_vlan: entered promiscuous mode [ 59.674037][ T5823] veth0_vlan: entered promiscuous mode [ 59.680413][ T5816] veth0_vlan: entered promiscuous mode [ 59.695938][ T5816] veth1_vlan: entered promiscuous mode [ 59.708778][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.731104][ T5823] veth1_vlan: entered promiscuous mode [ 59.761889][ T5818] veth0_macvtap: entered promiscuous mode [ 59.778959][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.796017][ T5816] veth0_macvtap: entered promiscuous mode [ 59.806103][ T5818] veth1_macvtap: entered promiscuous mode [ 59.826904][ T5823] veth0_macvtap: entered promiscuous mode [ 59.841090][ T5816] veth1_macvtap: entered promiscuous mode [ 59.856127][ T5823] veth1_macvtap: entered promiscuous mode [ 59.872641][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.891593][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.907593][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.921638][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.935803][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.951099][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.961126][ T5831] Bluetooth: hci2: command tx timeout [ 59.966723][ T5831] Bluetooth: hci3: command tx timeout [ 59.972535][ T5825] Bluetooth: hci1: command tx timeout [ 59.978451][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.987466][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.996428][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.013163][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.023768][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.033833][ T5834] Bluetooth: hci4: command tx timeout [ 60.033868][ T5834] Bluetooth: hci0: command tx timeout [ 60.046596][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.065365][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.075973][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.086200][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.097273][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.108089][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.118335][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.127662][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.136832][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.145855][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.175716][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.186749][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.196796][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.208271][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.219119][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.230135][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.239176][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.248230][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.257003][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.324074][ T5817] veth0_vlan: entered promiscuous mode [ 60.359802][ T5828] veth0_vlan: entered promiscuous mode [ 60.399905][ T5817] veth1_vlan: entered promiscuous mode [ 60.410119][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.419158][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.428686][ T5828] veth1_vlan: entered promiscuous mode [ 60.475866][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.489135][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.497500][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.516562][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.531041][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.546597][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.554688][ T5828] veth0_macvtap: entered promiscuous mode [ 60.567144][ T5817] veth0_macvtap: entered promiscuous mode [ 60.576354][ T5817] veth1_macvtap: entered promiscuous mode [ 60.590514][ T29] audit: type=1400 audit(1736847907.603:112): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.MPwpWF/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.605085][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.625125][ T5828] veth1_macvtap: entered promiscuous mode [ 60.636321][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.647672][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.657976][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.685047][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.692050][ T29] audit: type=1400 audit(1736847907.633:113): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.707036][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.725061][ T29] audit: type=1400 audit(1736847907.643:114): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.MPwpWF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.733775][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.765012][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.771545][ T29] audit: type=1400 audit(1736847907.643:115): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.774862][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.774877][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.776509][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.838185][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.840676][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.852308][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.872345][ T29] audit: type=1400 audit(1736847907.643:116): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.MPwpWF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.901521][ T29] audit: type=1400 audit(1736847907.643:117): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/root/syzkaller.MPwpWF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.904447][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.940101][ T29] audit: type=1400 audit(1736847907.663:118): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.940135][ T29] audit: type=1400 audit(1736847907.693:119): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 60.940167][ T29] audit: type=1400 audit(1736847907.693:120): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="gadgetfs" ino=7391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.005748][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.015874][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.026715][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.036621][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.047128][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.057968][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.067909][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.087005][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.097210][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.107885][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.117764][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.128783][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.139515][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.270676][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.281355][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.291566][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.302468][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.313383][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.324406][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.334878][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.345705][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.357487][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.436517][ T5903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.462602][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.471333][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.516623][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.540634][ T5911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6'. [ 61.553317][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.578948][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.587909][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.692077][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.795691][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.033047][ T5825] Bluetooth: hci3: command tx timeout [ 62.038710][ T5825] Bluetooth: hci2: command tx timeout [ 62.054492][ T5825] Bluetooth: hci1: command tx timeout [ 62.115055][ T5834] Bluetooth: hci0: command tx timeout [ 62.121438][ T5825] Bluetooth: hci4: command tx timeout [ 62.416998][ T5922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8'. [ 62.874367][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.883056][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.906514][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.914651][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.929713][ T5931] program syz.2.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.963504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.068094][ T5934] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 63.114394][ T3572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.126300][ T3572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.182456][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.228010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.165814][ T5834] Bluetooth: hci1: command tx timeout [ 64.171258][ T5834] Bluetooth: hci2: command tx timeout [ 64.178061][ T5834] Bluetooth: hci3: command tx timeout [ 64.204695][ T5834] Bluetooth: hci0: command tx timeout [ 64.210185][ T5834] Bluetooth: hci4: command tx timeout [ 64.482156][ T5950] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.489565][ T5950] overlayfs: failed to set xattr on upper [ 64.495433][ T5950] overlayfs: ...falling back to redirect_dir=nofollow. [ 64.502794][ T5950] overlayfs: ...falling back to index=off. [ 64.508647][ T5950] overlayfs: ...falling back to uuid=null. [ 64.935480][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 64.935500][ T29] audit: type=1400 audit(1736847911.433:180): avc: denied { mount } for pid=5941 comm="syz.2.12" name="/" dev="ramfs" ino=8510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 65.002779][ T29] audit: type=1400 audit(1736847911.483:181): avc: denied { mounton } for pid=5941 comm="syz.2.12" path="/4/file0/bus" dev="ramfs" ino=8513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 65.025380][ T29] audit: type=1400 audit(1736847911.533:182): avc: denied { mount } for pid=5941 comm="syz.2.12" name="/" dev="overlay" ino=8511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.047691][ T29] audit: type=1400 audit(1736847911.623:183): avc: denied { create } for pid=5941 comm="syz.2.12" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 65.122042][ T29] audit: type=1400 audit(1736847911.653:184): avc: denied { link } for pid=5941 comm="syz.2.12" name="file1" dev="overlay" ino=8517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 65.149420][ T29] audit: type=1400 audit(1736847911.663:185): avc: denied { setattr } for pid=5941 comm="syz.2.12" name="#3" dev="ramfs" ino=8518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 65.173824][ T29] audit: type=1400 audit(1736847911.663:186): avc: denied { rename } for pid=5941 comm="syz.2.12" name="#3" dev="ramfs" ino=8518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 65.300709][ T5954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.307859][ T5954] overlayfs: failed to set xattr on upper [ 65.313719][ T5954] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.321034][ T5954] overlayfs: ...falling back to index=off. [ 65.327334][ T5954] overlayfs: ...falling back to uuid=null. [ 65.934576][ T29] audit: type=1400 audit(1736847912.163:187): avc: denied { ioctl } for pid=5942 comm="syz.4.5" path="socket:[7837]" dev="sockfs" ino=7837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 65.959232][ T29] audit: type=1400 audit(1736847912.163:188): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.239106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.607357][ T29] audit: type=1400 audit(1736847912.193:189): avc: denied { create } for pid=5952 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.670124][ T5956] tty tty4: ldisc open failed (-12), clearing slot 3 [ 66.792275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.800881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.809540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.853519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.891939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 66.911998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 67.160691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.436236][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 67.652295][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 67.853260][ T5982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.860359][ T5982] overlayfs: failed to set xattr on upper [ 67.866204][ T5982] overlayfs: ...falling back to redirect_dir=nofollow. [ 67.873342][ T5982] overlayfs: ...falling back to index=off. [ 67.879618][ T5982] overlayfs: ...falling back to uuid=null. [ 68.418242][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 68.767245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.772792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.897671][ T5825] block nbd0: Receive control failed (result -107) [ 69.048122][ T5971] nbd0: detected capacity change from 0 to 2139062528 [ 69.137575][ T5837] block nbd0: Dead connection, failed to find a fallback [ 69.154534][ T5837] block nbd0: shutting down sockets [ 69.160758][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.170353][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.178310][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.187719][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.196366][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.205608][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.215432][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.224682][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.234421][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.243523][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.251469][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.260555][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.269040][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.278839][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.287092][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.296252][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.306462][ T5837] ldm_validate_partition_table(): Disk read failed. [ 69.314385][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.324032][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.332095][ T5837] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.341151][ T5837] Buffer I/O error on dev nbd0, logical block 0, async page read [ 69.349448][ T5837] Dev nbd0: unable to read RDB block 0 [ 69.350152][ T5986] xt_connbytes: Forcing CT accounting to be enabled [ 69.355370][ T5837] nbd0: unable to read partition table [ 69.380349][ T5986] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.381060][ T5837] ldm_validate_partition_table(): Disk read failed. [ 69.399095][ T5837] Dev nbd0: unable to read RDB block 0 [ 69.404603][ T5986] xt_bpf: check failed: parse error [ 69.412449][ T5837] nbd0: unable to read partition table [ 69.728949][ T6003] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 69.736091][ T6003] overlayfs: failed to set xattr on upper [ 69.741849][ T6003] overlayfs: ...falling back to redirect_dir=nofollow. [ 69.748808][ T6003] overlayfs: ...falling back to index=off. [ 69.754705][ T6003] overlayfs: ...falling back to uuid=null. [ 70.237225][ T6002] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.355078][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 70.355094][ T29] audit: type=1400 audit(1736847917.363:213): avc: denied { name_bind } for pid=5999 comm="syz.2.25" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.417159][ T29] audit: type=1400 audit(1736847917.393:214): avc: denied { node_bind } for pid=5999 comm="syz.2.25" saddr=fe80::30 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.736440][ T29] audit: type=1400 audit(1736847917.583:215): avc: denied { ioctl } for pid=6004 comm="syz.0.26" path="socket:[7933]" dev="sockfs" ino=7933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.597788][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.604411][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.778338][ T29] audit: type=1400 audit(1736847918.793:216): avc: denied { write } for pid=6016 comm="syz.0.31" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.779011][ T6017] FAULT_INJECTION: forcing a failure. [ 71.779011][ T6017] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.816789][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.0.31 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 71.827316][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.837371][ T6017] Call Trace: [ 71.840639][ T6017] [ 71.843558][ T6017] dump_stack_lvl+0x16c/0x1f0 [ 71.848248][ T6017] should_fail_ex+0x497/0x5b0 [ 71.852925][ T6017] _copy_from_user+0x2e/0xd0 [ 71.857506][ T6017] input_event_from_user+0x134/0x3b0 [ 71.862778][ T6017] ? __pfx_input_event_from_user+0x10/0x10 [ 71.868572][ T6017] ? __pfx___might_resched+0x10/0x10 [ 71.873858][ T6017] ? input_inject_event+0x193/0x370 [ 71.879060][ T6017] evdev_write+0x377/0x750 [ 71.883475][ T6017] ? __pfx_evdev_write+0x10/0x10 [ 71.888408][ T6017] ? bpf_lsm_file_permission+0x9/0x10 [ 71.893776][ T6017] ? security_file_permission+0x71/0x210 [ 71.899406][ T6017] ? __pfx_evdev_write+0x10/0x10 [ 71.904338][ T6017] vfs_write+0x24c/0x1150 [ 71.908658][ T6017] ? __fget_files+0x1fc/0x3a0 [ 71.913325][ T6017] ? __pfx_lock_release+0x10/0x10 [ 71.918341][ T6017] ? __pfx_vfs_write+0x10/0x10 [ 71.923095][ T6017] ? lock_acquire+0x2f/0xb0 [ 71.927588][ T6017] ? __fget_files+0x40/0x3a0 [ 71.932168][ T6017] ? __fget_files+0x206/0x3a0 [ 71.936842][ T6017] ksys_write+0x207/0x250 [ 71.941160][ T6017] ? __pfx_ksys_write+0x10/0x10 [ 71.946001][ T6017] do_syscall_64+0xcd/0x250 [ 71.950505][ T6017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.956392][ T6017] RIP: 0033:0x7f079e985d29 [ 71.960802][ T6017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.980429][ T6017] RSP: 002b:00007f079f867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.988841][ T6017] RAX: ffffffffffffffda RBX: 00007f079eb75fa0 RCX: 00007f079e985d29 [ 71.996823][ T6017] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000003 [ 72.004785][ T6017] RBP: 00007f079f867090 R08: 0000000000000000 R09: 0000000000000000 [ 72.012748][ T6017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.020725][ T6017] R13: 0000000000000000 R14: 00007f079eb75fa0 R15: 00007ffd5c80b9c8 [ 72.028767][ T6017] [ 72.089348][ T29] audit: type=1400 audit(1736847918.793:217): avc: denied { open } for pid=6016 comm="syz.0.31" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.354800][ T29] audit: type=1400 audit(1736847919.213:218): avc: denied { wake_alarm } for pid=6018 comm="syz.3.29" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.543668][ T6027] misc userio: Can't change port type on an already running userio instance [ 72.573899][ T29] audit: type=1400 audit(1736847919.543:219): avc: denied { create } for pid=6024 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.596063][ T29] audit: type=1400 audit(1736847919.553:220): avc: denied { append } for pid=6025 comm="syz.1.32" name="media7" dev="devtmpfs" ino=999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.622277][ T29] audit: type=1400 audit(1736847919.553:221): avc: denied { ioctl } for pid=6025 comm="syz.1.32" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.743131][ T29] audit: type=1400 audit(1736847919.763:222): avc: denied { bind } for pid=6029 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.402227][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.582045][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 74.608643][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 74.720283][ T5928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.759262][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 74.902100][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 74.921714][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.949916][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.005423][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.067230][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.119971][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.203563][ T5928] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.221678][ T5928] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.279885][ T5928] usb 4-1: Manufacturer: syz [ 75.306215][ T5899] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 75.320402][ T5928] usb 4-1: config 0 descriptor?? [ 75.390205][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.462388][ T5899] usb 1-1: config 0 descriptor?? [ 75.568162][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 75.612119][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 75.726882][ T5928] rc_core: IR keymap rc-hauppauge not found [ 75.733481][ T5928] Registered IR keymap rc-empty [ 75.738658][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.747300][ T5899] usb 1-1: USB disconnect, device number 2 [ 75.765967][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 75.794258][ T5928] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 76.362857][ T5928] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 76.380714][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 76.380728][ T29] audit: type=1400 audit(1736847923.393:229): avc: denied { read } for pid=5178 comm="acpid" name="event4" dev="devtmpfs" ino=2735 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.461537][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.483017][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.522004][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.538746][ T8] cfg80211: failed to load regulatory.db [ 76.592513][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.622281][ T29] audit: type=1400 audit(1736847923.393:230): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2735 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.660062][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.822574][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.829855][ T29] audit: type=1400 audit(1736847923.393:231): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2735 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.872070][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 76.985395][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.172075][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.772193][ T5928] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 77.773670][ T29] audit: type=1400 audit(1736847923.553:232): avc: denied { create } for pid=6060 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.802166][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.825826][ T5928] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 78.207426][ T5928] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 78.342474][ T29] audit: type=1400 audit(1736847923.743:233): avc: denied { write } for pid=6062 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.382031][ T29] audit: type=1400 audit(1736847923.743:234): avc: denied { nlmsg_write } for pid=6062 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.386459][ T5928] usb 4-1: USB disconnect, device number 2 [ 78.408568][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 78.432031][ T29] audit: type=1400 audit(1736847923.763:235): avc: denied { name_connect } for pid=6062 comm="syz.4.44" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 78.832023][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.849180][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 78.859255][ T29] audit: type=1400 audit(1736847925.883:236): avc: denied { append } for pid=6072 comm="syz.1.47" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.867581][ T8] usb 5-1: can't read configurations, error -71 [ 78.884387][ T29] audit: type=1400 audit(1736847925.903:237): avc: denied { write } for pid=6072 comm="syz.1.47" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.991684][ T29] audit: type=1400 audit(1736847925.993:238): avc: denied { write } for pid=6084 comm="syz.2.52" name="fib_trie" dev="proc" ino=4026532988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.014418][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.234817][ T6081] overlayfs: failed to resolve './file1': -2 [ 79.374805][ T6089] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.772159][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.872203][ T5928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.962009][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.975686][ T6126] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.001974][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 82.010511][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.021140][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.022070][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 82.037429][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.040187][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.058261][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.066202][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.081625][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.086415][ T5928] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.108555][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.117312][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 82.120754][ T5928] usb 4-1: config 0 descriptor?? [ 82.135031][ T25] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 82.143295][ T25] usb 1-1: Manufacturer: syz [ 82.152147][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 82.161798][ T25] usb 1-1: config 0 descriptor?? [ 82.167521][ T5899] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 82.186414][ T5899] usb 2-1: config 252 contains an unexpected descriptor of type 0x2, skipping [ 82.203375][ T5899] usb 2-1: config 252 has no interface number 0 [ 82.210027][ T5899] usb 2-1: config 252 interface 15 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 82.222758][ T5899] usb 2-1: config 252 interface 15 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 82.235545][ T5899] usb 2-1: config 252 interface 15 has no altsetting 0 [ 82.247692][ T5899] usb 2-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=89.7d [ 82.258599][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.268226][ T5899] usb 2-1: Product: syz [ 82.274767][ T5899] usb 2-1: Manufacturer: syz [ 82.279667][ T5899] usb 2-1: SerialNumber: syz [ 82.452087][ T25] rc_core: IR keymap rc-hauppauge not found [ 82.458063][ T25] Registered IR keymap rc-empty [ 82.469753][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.502111][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.534618][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 82.556344][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 82.570020][ T5928] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input9 [ 82.577182][ T5899] usb 2-1: selecting invalid altsetting 3 [ 82.588301][ T5899] comedi comedi0: could not set alternate setting 3 in high speed [ 82.596666][ T5899] usbduxsigma 2-1:252.15: driver 'usbduxsigma' failed to auto-configure device. [ 82.665400][ T5899] usbduxsigma 2-1:252.15: probe with driver usbduxsigma failed with error -22 [ 82.672038][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 82.775862][ T5928] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 82.789356][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 82.846428][ T5928] usb 4-1: USB disconnect, device number 3 [ 82.976453][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.094165][ T6136] overlayfs: failed to resolve './file1': -2 [ 83.180711][ T6119] i2c i2c-0: Invalid block write size 34 [ 83.247629][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 83.247645][ T29] audit: type=1400 audit(1736847930.263:246): avc: denied { read write } for pid=6115 comm="syz.1.63" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.276744][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.286231][ T29] audit: type=1400 audit(1736847930.263:247): avc: denied { open } for pid=6115 comm="syz.1.63" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.309357][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.318208][ T29] audit: type=1400 audit(1736847930.263:248): avc: denied { create } for pid=6115 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.338155][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.362091][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.382018][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.402142][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.433973][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.462242][ T25] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 83.588549][ T25] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 83.598125][ T25] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 83.627803][ T29] audit: type=1400 audit(1736847930.643:249): avc: denied { bind } for pid=6115 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.183652][ T29] audit: type=1400 audit(1736847930.753:250): avc: denied { write } for pid=6138 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.402227][ T29] audit: type=1400 audit(1736847931.283:251): avc: denied { map } for pid=6115 comm="syz.1.63" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.462805][ T29] audit: type=1400 audit(1736847931.303:252): avc: denied { execute } for pid=6115 comm="syz.1.63" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.507820][ T25] usb 1-1: USB disconnect, device number 3 [ 84.653366][ T6158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21264 sclass=netlink_route_socket pid=6158 comm=syz.4.69 [ 85.347565][ T29] audit: type=1400 audit(1736847931.423:253): avc: denied { setopt } for pid=6115 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.481669][ T5928] usb 2-1: USB disconnect, device number 2 [ 85.772151][ T25] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 85.812039][ T5899] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.935166][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.020043][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 86.038495][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.047883][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 86.058264][ T5899] usb 4-1: can't read configurations, error -71 [ 86.087109][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 86.116595][ T29] audit: type=1400 audit(1736847933.133:254): avc: denied { bind } for pid=6176 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.140099][ T29] audit: type=1400 audit(1736847933.133:255): avc: denied { listen } for pid=6176 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.272099][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 86.447222][ T25] usb usb1-port1: attempt power cycle [ 86.852008][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.472799][ T25] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 87.507214][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 87.507875][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 88.502233][ T25] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 88.503896][ T5928] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.532122][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.575666][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.628632][ T5928] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 88.722076][ T25] usb 1-1: device not accepting address 7, error -71 [ 88.730279][ T25] usb usb1-port1: unable to enumerate USB device [ 88.761440][ T5928] usb 3-1: can't read configurations, error -71 [ 88.772600][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 88.798034][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.809245][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.822020][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.877759][ T5869] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.889089][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.937371][ T8] usb 5-1: config index 0 descriptor too short (expected 82, got 18) [ 88.951997][ T5869] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.027077][ T8] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 89.036294][ T5869] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.045435][ T5869] usb 2-1: Manufacturer: syz [ 89.050797][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.059902][ T5869] usb 2-1: config 0 descriptor?? [ 89.066443][ T8] usb 5-1: config 0 descriptor?? [ 89.132037][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 89.325758][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 89.327910][ T8] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 89.358603][ T5900] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.363454][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 89.374965][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.386385][ T8] mxuport 5-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 89.388210][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.409903][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 89.416908][ T8] mxuport 5-1:0.0: probe with driver mxuport failed with error -71 [ 89.419838][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 89.447547][ T8] usb 5-1: USB disconnect, device number 4 [ 89.454467][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.472269][ T5869] rc_core: IR keymap rc-hauppauge not found [ 89.478468][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.481339][ T5869] Registered IR keymap rc-empty [ 89.494454][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.510838][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.522521][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 89.528400][ T25] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 89.536392][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.603475][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 89.638449][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.664832][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 89.680657][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 89.695644][ T5900] usb 4-1: can't read configurations, error -71 [ 89.710305][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.732096][ T25] usb 1-1: USB disconnect, device number 8 [ 89.852530][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.872200][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.892216][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 89.912394][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.010243][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.425727][ T6227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 90.432606][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.441068][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 90.472085][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.492052][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.512052][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.532727][ T5869] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 90.550592][ T6228] vhci_hcd: connection closed [ 90.555564][ T5869] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 90.569838][ T5869] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.570826][ T12] vhci_hcd: stop threads [ 90.599035][ T12] vhci_hcd: release socket [ 90.607348][ T12] vhci_hcd: disconnect device [ 90.622099][ T9] vhci_hcd: vhci_device speed not set [ 90.662133][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.812031][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 90.827240][ T5928] usb 5-1: config 252 has an invalid interface number: 57 but max is 1 [ 90.838926][ T5928] usb 5-1: config 252 has an invalid interface number: 15 but max is 1 [ 90.849330][ T5928] usb 5-1: config 252 contains an unexpected descriptor of type 0x2, skipping [ 90.859065][ T5928] usb 5-1: config 252 has no interface number 0 [ 90.865855][ T5928] usb 5-1: config 252 has no interface number 1 [ 90.872675][ T5928] usb 5-1: config 252 interface 57 altsetting 1 bulk endpoint 0xE has invalid maxpacket 16 [ 90.883280][ T5928] usb 5-1: config 252 interface 15 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 90.895097][ T5928] usb 5-1: config 252 interface 15 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 90.907124][ T5928] usb 5-1: config 252 interface 57 has no altsetting 0 [ 90.914569][ T5928] usb 5-1: config 252 interface 15 has no altsetting 0 [ 90.925724][ T5928] usb 5-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=89.7d [ 90.935406][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.749811][ T5928] usb 5-1: Product: syz [ 91.754251][ T5928] usb 5-1: Manufacturer: syz [ 91.758899][ T5928] usb 5-1: SerialNumber: syz [ 91.858796][ T6226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.259851][ T5869] usb 2-1: USB disconnect, device number 3 [ 92.321173][ T5928] usb 5-1: selecting invalid altsetting 3 [ 92.330025][ T5928] comedi comedi0: could not set alternate setting 3 in high speed [ 92.343858][ T5928] usbduxsigma 5-1:252.57: driver 'usbduxsigma' failed to auto-configure device. [ 92.362560][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 92.648925][ T6248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.133050][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 93.133090][ T29] audit: type=1400 audit(1736847939.663:259): avc: denied { unlink } for pid=6245 comm="syz.1.92" name="#d" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.216729][ T6250] i2c i2c-0: Invalid block write size 34 [ 93.396227][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 93.425257][ T5928] usbduxsigma 5-1:252.57: probe with driver usbduxsigma failed with error -22 [ 93.737461][ T5928] usb 5-1: selecting invalid altsetting 3 [ 93.768949][ T5928] comedi comedi0: could not set alternate setting 3 in high speed [ 93.902049][ T5928] usbduxsigma 5-1:252.15: driver 'usbduxsigma' failed to auto-configure device. [ 94.167414][ T5928] usbduxsigma 5-1:252.15: probe with driver usbduxsigma failed with error -22 [ 94.185734][ T29] audit: type=1400 audit(1736847941.203:260): avc: denied { bind } for pid=6260 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.280089][ T6264] FAULT_INJECTION: forcing a failure. [ 94.280089][ T6264] name failslab, interval 1, probability 0, space 0, times 1 [ 94.293111][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.0.96 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 94.303663][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.313734][ T6264] Call Trace: [ 94.317117][ T6264] [ 94.320056][ T6264] dump_stack_lvl+0x16c/0x1f0 [ 94.324758][ T6264] should_fail_ex+0x497/0x5b0 [ 94.329454][ T6264] should_failslab+0xc2/0x120 [ 94.334144][ T6264] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 94.339530][ T6264] ? skb_clone+0x190/0x3f0 [ 94.343957][ T6264] skb_clone+0x190/0x3f0 [ 94.348212][ T6264] netlink_deliver_tap+0xabd/0xd30 [ 94.353348][ T6264] netlink_unicast+0x5e1/0x7f0 [ 94.358135][ T6264] ? __pfx_netlink_unicast+0x10/0x10 [ 94.363444][ T6264] netlink_sendmsg+0x8b8/0xd70 [ 94.368226][ T6264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.373543][ T6264] ____sys_sendmsg+0xaaf/0xc90 [ 94.378320][ T6264] ? copy_msghdr_from_user+0x10b/0x160 [ 94.383805][ T6264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.389121][ T6264] ___sys_sendmsg+0x135/0x1e0 [ 94.393813][ T6264] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.399047][ T6264] ? __fget_files+0x206/0x3a0 [ 94.403829][ T6264] __sys_sendmsg+0x16e/0x220 [ 94.408429][ T6264] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.413569][ T6264] do_syscall_64+0xcd/0x250 [ 94.418089][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.423993][ T6264] RIP: 0033:0x7f079e985d29 [ 94.428415][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.448040][ T6264] RSP: 002b:00007f079f846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.456476][ T6264] RAX: ffffffffffffffda RBX: 00007f079eb76080 RCX: 00007f079e985d29 [ 94.464463][ T6264] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000006 [ 94.472449][ T6264] RBP: 00007f079f846090 R08: 0000000000000000 R09: 0000000000000000 [ 94.480438][ T6264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.488421][ T6264] R13: 0000000000000000 R14: 00007f079eb76080 R15: 00007ffd5c80b9c8 [ 94.496421][ T6264] [ 95.119035][ T5928] usb 5-1: USB disconnect, device number 5 [ 95.154180][ T29] audit: type=1400 audit(1736847941.203:261): avc: denied { name_bind } for pid=6260 comm="syz.0.96" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.154366][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.175845][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.249827][ T29] audit: type=1400 audit(1736847941.203:262): avc: denied { node_bind } for pid=6260 comm="syz.0.96" saddr=::ffff:224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 95.414552][ T5900] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.422405][ T5900] usb 4-1: can't read configurations, error -71 [ 95.567294][ T29] audit: type=1400 audit(1736847942.333:263): avc: denied { read write } for pid=6268 comm="syz.2.99" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.590819][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.093288][ T29] audit: type=1400 audit(1736847942.333:264): avc: denied { open } for pid=6268 comm="syz.2.99" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 96.118725][ T29] audit: type=1400 audit(1736847943.113:265): avc: denied { read } for pid=6268 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 96.402963][ T6281] PKCS8: Unsupported PKCS#8 version [ 96.776008][ T29] audit: type=1400 audit(1736847943.583:266): avc: denied { ioctl } for pid=6280 comm="syz.0.100" path="/dev/sg0" dev="devtmpfs" ino=734 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.802034][ T29] audit: type=1400 audit(1736847943.733:267): avc: denied { setattr } for pid=6280 comm="syz.0.100" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 97.163027][ T29] audit: type=1400 audit(1736847944.173:268): avc: denied { create } for pid=6301 comm="syz.3.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 97.223803][ T6303] NILFS (nullb0): couldn't find nilfs on the device [ 97.695418][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.107'. [ 98.038335][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.842038][ T5900] usb 2-1: device descriptor read/64, error -71 [ 100.286126][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 100.286142][ T29] audit: type=1400 audit(1736847947.303:275): avc: denied { connect } for pid=6336 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.311816][ T5900] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.319731][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.377667][ T29] audit: type=1400 audit(1736847947.353:276): avc: denied { write } for pid=6336 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.431819][ T6341] capability: warning: `syz.0.119' uses deprecated v2 capabilities in a way that may be insecure [ 100.502149][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 100.519134][ T8] usb 5-1: config 252 has an invalid interface number: 57 but max is 1 [ 100.535088][ T8] usb 5-1: config 252 has an invalid interface number: 15 but max is 1 [ 100.572064][ T8] usb 5-1: config 252 contains an unexpected descriptor of type 0x2, skipping [ 100.594253][ T8] usb 5-1: config 252 has no interface number 0 [ 100.752886][ T8] usb 5-1: config 252 has no interface number 1 [ 100.817068][ T6348] NILFS (nullb0): couldn't find nilfs on the device [ 101.287593][ T8] usb 5-1: config 252 interface 57 altsetting 1 bulk endpoint 0xE has invalid maxpacket 16 [ 101.351134][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 101.432064][ T8] usb 5-1: config 252 interface 15 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 101.443300][ T8] usb 5-1: config 252 interface 15 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 101.454434][ T8] usb 5-1: config 252 interface 57 has no altsetting 0 [ 101.461343][ T8] usb 5-1: config 252 interface 15 has no altsetting 0 [ 101.475667][ T8] usb 5-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=89.7d [ 101.484857][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.493732][ T29] audit: type=1400 audit(1736847948.513:277): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.549630][ T8] usb 5-1: Product: syz [ 101.590627][ T8] usb 5-1: Manufacturer: syz [ 101.599456][ T8] usb 5-1: SerialNumber: syz [ 101.613359][ T29] audit: type=1400 audit(1736847948.513:278): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.626941][ T6330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 101.668331][ T6358] process 'syz.0.125' launched './file0' with NULL argv: empty string added [ 101.724405][ T29] audit: type=1400 audit(1736847948.513:279): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 101.774712][ T6350] Bluetooth: MGMT ver 1.23 [ 101.788195][ T6350] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 101.811082][ T29] audit: type=1400 audit(1736847948.683:280): avc: denied { execute } for pid=6357 comm="syz.0.125" name="file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.845665][ T6358] 9pnet_fd: Insufficient options for proto=fd [ 101.898620][ T29] audit: type=1400 audit(1736847948.733:281): avc: denied { execute_no_trans } for pid=6357 comm="syz.0.125" path="/27/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.002918][ T29] audit: type=1400 audit(1736847948.793:282): avc: denied { write } for pid=6349 comm="syz.3.123" path="socket:[10343]" dev="sockfs" ino=10343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.026852][ T29] audit: type=1400 audit(1736847948.863:283): avc: denied { open } for pid=6357 comm="syz.0.125" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.071935][ T8] usb 5-1: selecting invalid altsetting 3 [ 102.105353][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 102.131149][ T8] usbduxsigma 5-1:252.57: driver 'usbduxsigma' failed to auto-configure device. [ 102.602336][ T6368] i2c i2c-0: Invalid block write size 34 [ 102.604552][ T8] usbduxsigma 5-1:252.57: probe with driver usbduxsigma failed with error -22 [ 102.653554][ T29] audit: type=1400 audit(1736847949.653:284): avc: denied { setopt } for pid=6359 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.720230][ T8] usb 5-1: selecting invalid altsetting 3 [ 102.757089][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 102.802230][ T8] usbduxsigma 5-1:252.15: driver 'usbduxsigma' failed to auto-configure device. [ 103.123594][ T8] usbduxsigma 5-1:252.15: probe with driver usbduxsigma failed with error -22 [ 103.262577][ T6368] [ 103.264941][ T6368] ====================================================== [ 103.271960][ T6368] WARNING: possible circular locking dependency detected [ 103.278989][ T6368] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted [ 103.286103][ T6368] ------------------------------------------------------ [ 103.293122][ T6368] syz.4.114/6368 is trying to acquire lock: [ 103.299014][ T6368] ffff888148d3e540 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: filemap_fault+0x2e0/0x2820 [ 103.309059][ T6368] [ 103.309059][ T6368] but task is already holding lock: [ 103.316428][ T6368] ffff888028dd84a8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 103.326307][ T6368] [ 103.326307][ T6368] which lock already depends on the new lock. [ 103.326307][ T6368] [ 103.326317][ T6368] [ 103.326317][ T6368] the existing dependency chain (in reverse order) is: [ 103.326325][ T6368] [ 103.326325][ T6368] -> #6 (&vma->vm_lock->lock){++++}-{4:4}: [ 103.326358][ T6368] down_write+0x93/0x200 [ 103.326390][ T6368] vma_link+0x26d/0x4a0 [ 103.326416][ T6368] insert_vm_struct+0x197/0x3f0 [ 103.326438][ T6368] alloc_bprm+0x6e0/0xc90 [ 103.326456][ T6368] kernel_execve+0xb0/0x3b0 [ 103.326474][ T6368] kernel_init+0x14a/0x2b0 [ 103.326492][ T6368] ret_from_fork+0x45/0x80 [ 103.326512][ T6368] ret_from_fork_asm+0x1a/0x30 [ 103.326539][ T6368] [ 103.326539][ T6368] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 103.326569][ T6368] __might_fault+0x11b/0x190 [ 103.326593][ T6368] _copy_from_user+0x29/0xd0 [ 103.326612][ T6368] __blk_trace_setup+0xa8/0x180 [ 103.326637][ T6368] blk_trace_ioctl+0x163/0x290 [ 103.326654][ T6368] blkdev_ioctl+0x109/0x6d0 [ 103.326686][ T6368] __x64_sys_ioctl+0x190/0x200 [ 103.326714][ T6368] do_syscall_64+0xcd/0x250 [ 103.326741][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.326770][ T6368] [ 103.326770][ T6368] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 103.326800][ T6368] __mutex_lock+0x19b/0xa60 [ 103.326824][ T6368] blk_mq_init_sched+0x42b/0x640 [ 103.326850][ T6368] elevator_init_mq+0x2cd/0x420 [ 103.326868][ T6368] add_disk_fwnode+0x113/0x1300 [ 103.326888][ T6368] sd_probe+0xa86/0x1000 [ 103.326904][ T6368] really_probe+0x23e/0xa90 [ 103.326926][ T6368] __driver_probe_device+0x1de/0x440 [ 103.326949][ T6368] driver_probe_device+0x4c/0x1b0 [ 103.326971][ T6368] __device_attach_driver+0x1df/0x310 [ 103.326995][ T6368] bus_for_each_drv+0x157/0x1e0 [ 103.327013][ T6368] __device_attach_async_helper+0x1d3/0x290 [ 103.327036][ T6368] async_run_entry_fn+0x9c/0x530 [ 103.327059][ T6368] process_one_work+0x9c5/0x1ba0 [ 103.327080][ T6368] worker_thread+0x6c8/0xf00 [ 103.327099][ T6368] kthread+0x2c1/0x3a0 [ 103.327123][ T6368] ret_from_fork+0x45/0x80 [ 103.327141][ T6368] ret_from_fork_asm+0x1a/0x30 [ 103.327167][ T6368] [ 103.327167][ T6368] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 103.327202][ T6368] blk_queue_enter+0x50f/0x640 [ 103.327229][ T6368] blk_mq_alloc_request+0x59b/0x950 [ 103.327256][ T6368] scsi_execute_cmd+0x1eb/0xf40 [ 103.327279][ T6368] read_capacity_16+0x213/0xe10 [ 103.327306][ T6368] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 103.327334][ T6368] sd_probe+0x904/0x1000 [ 103.327350][ T6368] really_probe+0x23e/0xa90 [ 103.327371][ T6368] __driver_probe_device+0x1de/0x440 [ 103.327393][ T6368] driver_probe_device+0x4c/0x1b0 [ 103.327416][ T6368] __device_attach_driver+0x1df/0x310 [ 103.327438][ T6368] bus_for_each_drv+0x157/0x1e0 [ 103.327456][ T6368] __device_attach_async_helper+0x1d3/0x290 [ 103.327479][ T6368] async_run_entry_fn+0x9c/0x530 [ 103.327503][ T6368] process_one_work+0x9c5/0x1ba0 [ 103.327523][ T6368] worker_thread+0x6c8/0xf00 [ 103.327542][ T6368] kthread+0x2c1/0x3a0 [ 103.327565][ T6368] ret_from_fork+0x45/0x80 [ 103.327584][ T6368] ret_from_fork_asm+0x1a/0x30 [ 103.327610][ T6368] [ 103.327610][ T6368] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 103.327638][ T6368] __mutex_lock+0x19b/0xa60 [ 103.327662][ T6368] __nbd_set_size+0x2c0/0x730 [ 103.327687][ T6368] nbd_start_device+0x8fd/0xd70 [ 103.327709][ T6368] nbd_genl_connect+0x1204/0x1c00 [ 103.327731][ T6368] genl_family_rcv_msg_doit+0x202/0x2f0 [ 103.327752][ T6368] genl_rcv_msg+0x565/0x800 [ 103.327769][ T6368] netlink_rcv_skb+0x16b/0x440 [ 103.327795][ T6368] genl_rcv+0x28/0x40 [ 103.327811][ T6368] netlink_unicast+0x53c/0x7f0 [ 103.327835][ T6368] netlink_sendmsg+0x8b8/0xd70 [ 103.327860][ T6368] ____sys_sendmsg+0xaaf/0xc90 [ 103.327884][ T6368] ___sys_sendmsg+0x135/0x1e0 [ 103.327902][ T6368] __sys_sendmsg+0x16e/0x220 [ 103.327920][ T6368] do_syscall_64+0xcd/0x250 [ 103.327945][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.327971][ T6368] [ 103.327971][ T6368] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 103.328005][ T6368] blk_mq_submit_bio+0x1fb6/0x24c0 [ 103.328025][ T6368] __submit_bio+0x384/0x540 [ 103.328043][ T6368] submit_bio_noacct_nocheck+0x698/0xd70 [ 103.328063][ T6368] submit_bio_noacct+0x93a/0x1e20 [ 103.328081][ T6368] mpage_readahead+0x41d/0x590 [ 103.328104][ T6368] read_pages+0x1a8/0xdc0 [ 103.328121][ T6368] page_cache_ra_unbounded+0x3dc/0x750 [ 103.328140][ T6368] force_page_cache_ra+0x24b/0x340 [ 103.328158][ T6368] page_cache_sync_ra+0x110/0x9c0 [ 103.328176][ T6368] filemap_get_pages+0xd7b/0x1be0 [ 103.328196][ T6368] filemap_read+0x3ca/0xd70 [ 103.328216][ T6368] blkdev_read_iter+0x187/0x480 [ 103.328237][ T6368] vfs_read+0x87f/0xbe0 [ 103.328255][ T6368] ksys_read+0x12b/0x250 [ 103.328273][ T6368] do_syscall_64+0xcd/0x250 [ 103.328297][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.328323][ T6368] [ 103.328323][ T6368] -> #0 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 103.328357][ T6368] __lock_acquire+0x249e/0x3c40 [ 103.328377][ T6368] lock_acquire.part.0+0x11b/0x380 [ 103.328398][ T6368] down_read+0x9a/0x330 [ 103.328422][ T6368] filemap_fault+0x2e0/0x2820 [ 103.328443][ T6368] __do_fault+0x10a/0x490 [ 103.328469][ T6368] do_pte_missing+0xebd/0x3e00 [ 103.328490][ T6368] __handle_mm_fault+0x103c/0x2a40 [ 103.328511][ T6368] handle_mm_fault+0x3fa/0xaa0 [ 103.328532][ T6368] do_user_addr_fault+0x60d/0x13f0 [ 103.328552][ T6368] exc_page_fault+0x5c/0xc0 [ 103.328575][ T6368] asm_exc_page_fault+0x26/0x30 [ 103.328600][ T6368] [ 103.328600][ T6368] other info that might help us debug this: [ 103.328600][ T6368] [ 103.328606][ T6368] Chain exists of: [ 103.328606][ T6368] mapping.invalidate_lock#2 --> &mm->mmap_lock --> &vma->vm_lock->lock [ 103.328606][ T6368] [ 103.328645][ T6368] Possible unsafe locking scenario: [ 103.328645][ T6368] [ 103.328650][ T6368] CPU0 CPU1 [ 103.328656][ T6368] ---- ---- [ 103.328661][ T6368] rlock(&vma->vm_lock->lock); [ 103.328681][ T6368] lock(&mm->mmap_lock); [ 103.328696][ T6368] lock(&vma->vm_lock->lock); [ 103.328712][ T6368] rlock(mapping.invalidate_lock#2); [ 103.328732][ T6368] [ 103.328732][ T6368] *** DEADLOCK *** [ 103.328732][ T6368] [ 103.328737][ T6368] 1 lock held by syz.4.114/6368: [ 103.328751][ T6368] #0: ffff888028dd84a8 (&vma->vm_lock->lock){++++}-{4:4}, at: lock_vma_under_rcu+0x13e/0x980 [ 103.328804][ T6368] [ 103.328804][ T6368] stack backtrace: [ 103.328811][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.4.114 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 103.328835][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.328847][ T6368] Call Trace: [ 103.328855][ T6368] [ 103.328863][ T6368] dump_stack_lvl+0x116/0x1f0 [ 103.328892][ T6368] print_circular_bug+0x419/0x5d0 [ 103.328918][ T6368] check_noncircular+0x31a/0x400 [ 103.328940][ T6368] ? __pfx_check_noncircular+0x10/0x10 [ 103.328962][ T6368] ? __lock_acquire+0xcc5/0x3c40 [ 103.328986][ T6368] ? lockdep_lock+0xc6/0x200 [ 103.329013][ T6368] ? __pfx_lockdep_lock+0x10/0x10 [ 103.329042][ T6368] __lock_acquire+0x249e/0x3c40 [ 103.329069][ T6368] ? __pfx___lock_acquire+0x10/0x10 [ 103.329092][ T6368] ? filemap_get_entry+0x1a8/0x3c0 [ 103.329116][ T6368] lock_acquire.part.0+0x11b/0x380 [ 103.329138][ T6368] ? filemap_fault+0x2e0/0x2820 [ 103.329162][ T6368] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 103.329185][ T6368] ? rcu_is_watching+0x12/0xc0 [ 103.329212][ T6368] ? trace_lock_acquire+0x14e/0x1f0 [ 103.329240][ T6368] ? filemap_fault+0x2e0/0x2820 [ 103.329263][ T6368] ? lock_acquire+0x2f/0xb0 [ 103.329284][ T6368] ? filemap_fault+0x2e0/0x2820 [ 103.329308][ T6368] down_read+0x9a/0x330 [ 103.329334][ T6368] ? filemap_fault+0x2e0/0x2820 [ 103.329357][ T6368] ? __pfx_down_read+0x10/0x10 [ 103.329384][ T6368] ? __filemap_get_folio+0x2a5/0xaf0 [ 103.329409][ T6368] filemap_fault+0x2e0/0x2820 [ 103.329435][ T6368] ? __pfx_filemap_fault+0x10/0x10 [ 103.329460][ T6368] ? do_pte_missing+0xdd7/0x3e00 [ 103.329483][ T6368] ? __pfx_lock_release+0x10/0x10 [ 103.329507][ T6368] __do_fault+0x10a/0x490 [ 103.329535][ T6368] do_pte_missing+0xebd/0x3e00 [ 103.329559][ T6368] ? lock_vma_under_rcu+0x13e/0x980 [ 103.329579][ T6368] ? reacquire_held_locks+0x20b/0x4c0 [ 103.329601][ T6368] ? lock_vma_under_rcu+0x13e/0x980 [ 103.329624][ T6368] __handle_mm_fault+0x103c/0x2a40 [ 103.329649][ T6368] ? lock_vma_under_rcu+0x6b9/0x980 [ 103.329676][ T6368] ? __pfx___handle_mm_fault+0x10/0x10 [ 103.329709][ T6368] ? __pfx___schedule+0x10/0x10 [ 103.329736][ T6368] handle_mm_fault+0x3fa/0xaa0 [ 103.329764][ T6368] do_user_addr_fault+0x60d/0x13f0 [ 103.329790][ T6368] exc_page_fault+0x5c/0xc0 [ 103.329814][ T6368] asm_exc_page_fault+0x26/0x30 [ 103.329841][ T6368] RIP: 0033:0x7ff5b904687d [ 103.329858][ T6368] Code: 08 48 89 0c 24 4c 8b 74 24 18 48 8b 6c 24 10 4c 8b 6c 24 08 44 89 f6 4c 8b 3c 24 81 65 08 ff f3 ff ff 48 89 ea e8 93 f4 13 00 <8b> 55 00 b9 01 80 00 00 49 89 c4 8b 45 40 45 89 e0 8d 34 90 8b 45 [ 103.329878][ T6368] RSP: 002b:00007ff5ba077fd0 EFLAGS: 00010286 [ 103.329895][ T6368] RAX: ffffffffffffffff RBX: 00007ff5b9376080 RCX: ffffffffffffffa8 [ 103.329911][ T6368] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 103.329926][ T6368] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 103.329940][ T6368] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 103.329954][ T6368] R13: 0000000020001840 R14: 0000000000002c0c R15: 00000000200004c0 [ 103.329974][ T6368] [ 103.577024][ T5928] usb 5-1: USB disconnect, device number 6