last executing test programs: 5m53.823931641s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xfffffffffffffe85, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x8, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x2, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0x2, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0x0, 0xffffffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x6, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x4, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x7f, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0x7, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x20002, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0xfffffff7, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1003, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0xfffff2e9, 0x2, 0x42d2, 0x6, 0x5678f281, 0xfc, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x2, 0xfffbffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x80000000, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x8, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0xb, 0x0, 0x9, 0x5, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x2, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x7, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20000858}, 0x20004804) 5m53.577900721s ago: executing program 4 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m52.785741348s ago: executing program 4 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5m51.65366992s ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m50.539688343s ago: executing program 4 (id=27): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5m35.297480984s ago: executing program 32 (id=27): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2m44.169873201s ago: executing program 0 (id=653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m40.201518921s ago: executing program 0 (id=661): bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m38.247017253s ago: executing program 0 (id=666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x41, 0x0, &(0x7f0000001180)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) close(r5) 2m37.225272547s ago: executing program 0 (id=669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x24040004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) 2m32.323420432s ago: executing program 0 (id=679): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2m27.891367321s ago: executing program 0 (id=686): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r1 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 2m12.486670015s ago: executing program 33 (id=686): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r1 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 40.884510521s ago: executing program 6 (id=1070): syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000003c0)=[@wr_drn={0x68, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @wrmsr={0x65, 0x20, {0x318, 0x9}}, @out_dx={0x6a, 0x28, {0x8e1e, 0x2, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0x805d, 0x2, 0x977}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x33, 0x2}}], 0x188}) pread64(r5, &(0x7f0000000700)=""/57, 0x39, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) 39.797585741s ago: executing program 6 (id=1075): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) unlink(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[@ANYBLOB="c8c00da68000c2"], 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getpid() r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) connect$inet(r3, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030004ac0f00"], 0x58}}, 0x0) 39.672852717s ago: executing program 6 (id=1076): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0xffffffa9, "957eac7ae20a80b61f0ec52aa4e2e7e469ecf3edddd79b60f374e7f3a99ae937", 0x2, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd']) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x9, 0x7, 0x3}) 39.664400379s ago: executing program 6 (id=1077): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 37.862190913s ago: executing program 6 (id=1084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket(0x11, 0x2, 0x100001) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) setpriority(0x0, 0x1, 0xa7a8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 36.892782678s ago: executing program 6 (id=1089): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000580)={0xa0002008}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000011c0)) 21.799905206s ago: executing program 34 (id=1089): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000580)={0xa0002008}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000011c0)) 10.8297526s ago: executing program 1 (id=1173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/stat\x00') read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1000000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r3, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$usbfs(0x0, 0x206, 0x20182) 9.251689996s ago: executing program 1 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x4001) ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f00000000c0)={0x0, 0x10, 0x3, 0x54, 0x6, 0x3, 0x5, 0x40, 0xa, 0x3, 0x8, "ad9284af306ed2891e5b2d45cdf7f167ed6ee75a4a1a3e21d615eab875ac7104"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) open$dir(0x0, 0x0, 0x81) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) vmsplice(r3, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/196, 0xc4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 9.248870503s ago: executing program 2 (id=1178): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x101100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$caif_stream(0x25, 0x1, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x1fffffffffe, 0xfdfffffffffffffd, 0x0, 0x0, 0x1000001000, 0x800005}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8006, 0x400000000001, 0x9, 0x40000000000000, 0x12, 0x80000002, 0x6}, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000140)={0x9, 0x8000, 0x0, 'queue0\x00', 0x3}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_open_dev$midi(0x0, 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) 9.247838542s ago: executing program 3 (id=1179): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc2d, 0x20182) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x0, 0x0, 0x19, 0x2000a, 0x7ff0bdc1, 0x0, 0x0, 0x6, 0x0}) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000080)=0x7fffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "2be9192e134934371f20fc664918e3e09c78f7ab3012e2397d43a41dd59111f2", "4d208a0bf892aceff916fc5c2655406702f03088c42eb5b2adb7719df8cf4d1e", "aacae6fe743cd3b8a6f6e21161ca85731e264f6655fec2dfff30f06c2458c26c", "f8a5a6d6884854e17058000d6deafe1190eef34064d94a036c653ff3ec76f16d", "3d358b4fbb139e74d533b3ee1c5d0a8394e27d9eee171fe899dbd36a499335d1", "238d42bf6be2711c19d25cfc", 0x0, 0x0, 0x5, 0x9, 0x8}}) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="19072bbd7000fcdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x840, 0x43) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0xffe7) close(0xffffffffffffffff) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 9.246256201s ago: executing program 5 (id=1180): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10c820, 0x0) read(r0, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) 7.612849847s ago: executing program 1 (id=1181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="04ba9a5cfbffffff00000000feffffff85000000180000001801007ab396002020642500b50000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x400008, &(0x7f0000000040)=ANY=[@ANYRESHEX]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000780)=0x7d8, &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r6, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000540)) 7.609311677s ago: executing program 2 (id=1182): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, 0x0}, 0x94) bind$bt_hci(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d8d}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140"], 0x0) 7.608751801s ago: executing program 3 (id=1183): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)={[], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x38) getdents64(r6, 0x0, 0x0) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)="ea", 0x1}], 0x1}, 0xc010) 7.606995341s ago: executing program 5 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) close(0x3) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) socket(0x1e, 0x4, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x43f4, 0x5c18, 0x6, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') r8 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.856933704s ago: executing program 1 (id=1185): openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sigaltstack(0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) sigaltstack(0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 5.855051814s ago: executing program 2 (id=1186): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 5.854065678s ago: executing program 3 (id=1187): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0x2c, 0x3, 0x3c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) read$ptp(0xffffffffffffffff, &(0x7f0000000180)=""/125, 0x7d) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r3, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) 5.852973098s ago: executing program 5 (id=1188): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x20004081}, 0x4040005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, 0x0, 0x8010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) read(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 4.010051384s ago: executing program 2 (id=1189): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/237) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) writev(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)="b54837c62d320b1a87eed75cd0476306e18f2936046373a7d3c67eca499824d8511abe79d5", 0x25}], 0x2) ioctl$TCXONC(r0, 0x540a, 0x3) 4.008194729s ago: executing program 3 (id=1190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = msgget$private(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[], 0x2000, 0x0) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r6], 0x9) dup3(r4, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 4.007608088s ago: executing program 5 (id=1191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x8, 0x200, 0x8, 0x40000000000002a, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='track_foreign_dirty\x00', r0, 0x0, 0x3}, 0x18) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) read$nci(0xffffffffffffffff, &(0x7f0000000100)=""/107, 0x6b) write$nci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)="9800924c8f00c5379a085a", 0xb}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.039487263s ago: executing program 1 (id=1192): r0 = request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='@\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r0, 0x0, 0x1000}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'rmd160-generic\x00'}}, 0x0, &(0x7f0000000300)=""/4096) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x6, &(0x7f0000001000)=0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7c06d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) clock_getres(0x6, &(0x7f00000003c0)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000300)={0x80}) io_getevents(r1, 0x3, 0xb3d, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) 2.038852082s ago: executing program 2 (id=1193): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x4242, 0x11a) sendmsg$NFT_BATCH(r2, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000300)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendto(r7, 0x0, 0x0, 0x20000000, &(0x7f0000000180)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80) close_range(r9, 0xffffffffffffffff, 0x0) 2.038331193s ago: executing program 3 (id=1194): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x185, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') 2.037560415s ago: executing program 5 (id=1195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x100008000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x141582) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x15) 6.910064ms ago: executing program 1 (id=1196): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f00000003c0)=[@wr_drn={0x68, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0x7, 0x3}}, @wrmsr={0x65, 0x20, {0x318, 0x9}}, @out_dx={0x6a, 0x28, {0x8e1e, 0x2, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x3, 0x2}}, @out_dx={0x6a, 0x28, {0xdb94, 0x0, 0x7fffffff}}, @code={0xa, 0x79, {"48b800000000008000000f23d80f21f835400000500f23f8f30fc77507c4a179c5f000c74424000d000000c74424020a000000c7442406000000000f011c2466baf80cb890698081ef66bafc0c66b84e6566efc481f950eed9e0f30f090f21be6466420f38095170"}}, @out_dx={0x6a, 0x28, {0x805d, 0x2, 0x977}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x33, 0x2}}], 0x229}) pread64(r4, &(0x7f0000000700)=""/57, 0x39, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0xff}, &(0x7f0000000200)=0x9, 0x0, 0x10000000000f, 0x3, 0x80000000, 0x7f, 0x41, 0x6}}], 0x58, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000000)={0x9, 0x7, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7f0ff00000000bfa100000000000007010000f8ff97b2af1a6e3ab6fa1dccd4b240ec34ffffbfa400000000000007040000f000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.198331ms ago: executing program 2 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000000000007912070000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0xee01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() waitid(0x2, r1, 0x0, 0x8, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_getscheduler(r1) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000200)={0x0, 0x20, 0x100, 0x200, 0x1, 0x6, 0x0, 0xffff, 0x1, 0x101, 0x2, 0x9, &(0x7f0000000040), 0x0, 0x0}) getpid() 3.428006ms ago: executing program 3 (id=1198): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r9, 0x3ff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 0s ago: executing program 5 (id=1199): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f00000006c0), 0x4) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706", 0x2, r5) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$link(0x8, r6, r7) keyctl$KEYCTL_MOVE(0x1e, r6, r7, r5, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000002000000010000000900010073797a3000020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001c0004801800040000000000000070df0b00028008000140000000090900010073797a3000000000140000001100010000000000000000000000000a000000000000000000009d314a021719499d6f27679227528f4b79fa6ed442ba5973dc7ab26551b8b270d8c08e6efb045df9b4dd"], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) kernel console output (not intermixed with test programs): ="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 103.926501][ T30] audit: type=1326 audit(1766105849.878:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 103.950752][ T30] audit: type=1326 audit(1766105849.888:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 104.043423][ T30] audit: type=1326 audit(1766105849.888:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 104.068878][ T30] audit: type=1326 audit(1766105849.888:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6640 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 105.949041][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.627485][ T5892] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 106.683074][ T5892] usb 4-1: config 0 has no interface number 0 [ 106.756821][ T5892] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 106.781083][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.811249][ T5892] usb 4-1: config 0 descriptor?? [ 107.174603][ T5924] usb 4-1: USB disconnect, device number 5 [ 107.962361][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.992318][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 108.112282][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 108.124119][ T5892] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.142986][ T5892] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.154546][ T5892] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.161818][ T10] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 108.180453][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.183127][ T5892] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.192208][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.210337][ T5892] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.213055][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.229137][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.230284][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.258254][ T10] usb 4-1: Product: syz [ 108.262616][ T10] usb 4-1: Manufacturer: syz [ 108.267315][ T10] usb 4-1: SerialNumber: syz [ 108.279153][ T10] usb 4-1: config 0 descriptor?? [ 108.293265][ T10] usb 4-1: selecting invalid altsetting 0 [ 108.552625][ T5892] usb 3-1: GET_CAPABILITIES returned 0 [ 108.569679][ T5892] usbtmc 3-1:16.0: can't read capabilities [ 109.019204][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 109.019219][ T30] audit: type=1400 audit(1766105855.798:310): avc: denied { getopt } for pid=6717 comm="syz.5.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.118927][ T6523] usb 4-1: USB disconnect, device number 6 [ 109.205909][ T9] usb 3-1: USB disconnect, device number 5 [ 109.435709][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 109.458537][ T6730] syz.5.210 uses obsolete (PF_INET,SOCK_PACKET) [ 110.587128][ T6740] Bluetooth: MGMT ver 1.23 [ 111.386220][ T30] audit: type=1400 audit(1766105858.128:311): avc: denied { accept } for pid=6748 comm="syz.5.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.003061][ T30] audit: type=1400 audit(1766105859.158:312): avc: denied { wake_alarm } for pid=6763 comm="syz.3.218" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.343445][ T6793] syz_tun: entered allmulticast mode [ 114.410638][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 114.539622][ T6798] binder_alloc: 6797: binder_alloc_buf, no vma [ 114.566701][ T6793] syz_tun (unregistering): left allmulticast mode [ 116.445894][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 117.529574][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 117.706073][ T30] audit: type=1400 audit(1766105864.838:313): avc: denied { create } for pid=6840 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.763836][ T30] audit: type=1400 audit(1766105864.838:314): avc: denied { write } for pid=6840 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.839854][ T30] audit: type=1400 audit(1766105864.848:315): avc: denied { getopt } for pid=6840 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.896824][ T6846] binder: 6845:6846 ioctl c0306201 200000000300 returned -11 [ 117.928491][ T30] audit: type=1400 audit(1766105864.848:316): avc: denied { setopt } for pid=6840 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.016925][ T30] audit: type=1400 audit(1766105865.048:317): avc: denied { read } for pid=6845 comm="syz.3.235" path="socket:[13016]" dev="sockfs" ino=13016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.116152][ T6851] uprobe: syz.1.237:6851 failed to unregister, leaking uprobe [ 118.132264][ T30] audit: type=1804 audit(1766105865.228:318): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.237" name="/newroot/55/file0" dev="tmpfs" ino=312 res=1 errno=0 [ 118.199131][ T30] audit: type=1804 audit(1766105865.238:319): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.237" name="/newroot/55/file0" dev="tmpfs" ino=312 res=1 errno=0 [ 119.262361][ T30] audit: type=1400 audit(1766105865.608:320): avc: denied { watch } for pid=6858 comm="syz.5.240" path="/16/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.354089][ T30] audit: type=1400 audit(1766105865.608:321): avc: denied { watch_sb watch_reads } for pid=6858 comm="syz.5.240" path="/16/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.435887][ T6869] efs: cannot read volume header [ 119.490137][ T30] audit: type=1400 audit(1766105866.558:322): avc: denied { create } for pid=6872 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.494517][ T6873] input: syz1 as /devices/virtual/input/input5 [ 119.783957][ T6879] syzkaller0: entered promiscuous mode [ 119.789450][ T6879] syzkaller0: entered allmulticast mode [ 120.318337][ T6879] tipc: Enabled bearer , priority 0 [ 120.497432][ T6878] tipc: Resetting bearer [ 120.648288][ T6878] tipc: Disabling bearer [ 120.836248][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 121.579255][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 121.613047][ T6921] __vm_enough_memory: pid: 6921, comm: syz.0.253, bytes: 11727328808960 not enough memory for the allocation [ 122.280389][ T6934] netlink: 256 bytes leftover after parsing attributes in process `syz.2.255'. [ 122.417944][ T6936] tipc: Started in network mode [ 122.442434][ T6936] tipc: Node identity 06e27d28fa92, cluster identity 4711 [ 122.475531][ T6936] tipc: Enabled bearer , priority 0 [ 122.508759][ T6943] syzkaller0: entered promiscuous mode [ 122.532274][ T6943] syzkaller0: entered allmulticast mode [ 123.046092][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 123.046107][ T30] audit: type=1400 audit(3913589518.197:334): avc: denied { ioctl } for pid=6935 comm="syz.1.257" path="socket:[13778]" dev="sockfs" ino=13778 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.051377][ T6936] tipc: Resetting bearer [ 123.140819][ T6935] tipc: Resetting bearer [ 123.194429][ T6935] tipc: Disabling bearer [ 123.454319][ T30] audit: type=1400 audit(3913589518.607:335): avc: denied { connect } for pid=6956 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.134144][ T6975] can0: slcan on ttyS3. [ 125.166544][ T30] audit: type=1400 audit(3913589520.237:336): avc: denied { write } for pid=6971 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 125.473145][ T6971] can0 (unregistered): slcan off ttyS3. [ 125.682336][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.964139][ T30] audit: type=1400 audit(3913589521.057:337): avc: denied { setopt } for pid=6991 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.551392][ T6999] netlink: 'syz.3.272': attribute type 178 has an invalid length. [ 127.472305][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 127.479364][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.549058][ T5924] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 127.588752][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.616097][ T5924] usb 6-1: Product: syz [ 127.625967][ T5924] usb 6-1: Manufacturer: syz [ 127.774402][ T5924] usb 6-1: SerialNumber: syz [ 128.360963][ T5924] usb 6-1: config 0 descriptor?? [ 128.385410][ T5924] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 129.045417][ T5924] gspca_stv06xx: st6422 sensor detected [ 129.302759][ T5924] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 129.413391][ T5924] usb 6-1: USB disconnect, device number 2 [ 129.436928][ T5921] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.968910][ T30] audit: type=1400 audit(3913589525.117:338): avc: denied { bind } for pid=7028 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.992775][ T30] audit: type=1400 audit(3913589525.137:339): avc: denied { node_bind } for pid=7028 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 130.018094][ T5921] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 130.063854][ T30] audit: type=1400 audit(3913589525.207:340): avc: denied { write } for pid=7028 comm="syz.1.276" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.068008][ T5921] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.105294][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.221991][ T7031] tipc: Started in network mode [ 130.226983][ T7031] tipc: Node identity 7f000001, cluster identity 4711 [ 130.235933][ T5921] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.264535][ T7031] tipc: Enabled bearer , priority 10 [ 130.280911][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.288633][ T7031] netlink: 40 bytes leftover after parsing attributes in process `syz.5.283'. [ 130.321939][ T5921] usb 3-1: Product: syz [ 130.343839][ T7031] tipc: Enabled bearer , priority 10 [ 130.352109][ T5921] usb 3-1: Manufacturer: syz [ 130.382105][ T5921] usb 3-1: SerialNumber: syz [ 130.415682][ T5921] usb 3-1: config 0 descriptor?? [ 130.551254][ T5921] hub 3-1:0.0: bad descriptor, ignoring hub [ 130.551775][ T30] audit: type=1400 audit(3913589525.697:341): avc: denied { bind } for pid=7040 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.620722][ T30] audit: type=1400 audit(3913589525.737:342): avc: denied { setopt } for pid=7040 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.991696][ T5921] hub 3-1:0.0: probe with driver hub failed with error -5 [ 131.027546][ T5921] usb 3-1: selecting invalid altsetting 0 [ 131.303453][ T5921] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 131.326888][ T7049] trusted_key: syz.5.287 sent an empty control message without MSG_MORE. [ 131.382506][ T9] tipc: Node number set to 2130706433 [ 131.412121][ T7057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.559921][ T30] audit: type=1400 audit(3913589526.707:343): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.422918][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.429298][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.767391][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 132.787534][ T9] usb 3-1: USB disconnect, device number 6 [ 133.918497][ T30] audit: type=1400 audit(3913589529.057:344): avc: denied { create } for pid=7084 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.992224][ T30] audit: type=1400 audit(3913589529.057:345): avc: denied { ioctl } for pid=7084 comm="syz.2.299" path="socket:[14031]" dev="sockfs" ino=14031 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.261917][ T30] audit: type=1326 audit(3913589529.397:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eab78f749 code=0x7ffc0000 [ 134.701454][ T30] audit: type=1326 audit(3913589529.397:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f7eab78f749 code=0x7ffc0000 [ 134.793337][ T5813] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 134.966862][ T5813] usb 4-1: config 0 has no interfaces? [ 134.982290][ T5813] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 135.031730][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.212227][ T5813] usb 4-1: config 0 descriptor?? [ 136.262150][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 136.289253][ T30] audit: type=1400 audit(3913589531.407:354): avc: denied { open } for pid=7127 comm="syz.5.306" path="/dev/ttyqf" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 136.536172][ T7114] team0: Port device team_slave_0 removed [ 136.631040][ T30] audit: type=1400 audit(3913589531.777:355): avc: denied { read } for pid=7137 comm="syz.5.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.147635][ T5921] usb 4-1: USB disconnect, device number 7 [ 137.192428][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 137.201464][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 137.211567][ T30] audit: type=1400 audit(3913589532.357:356): avc: denied { execute_no_trans } for pid=7150 comm="syz.3.312" path="/59/file1" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.298374][ T30] audit: type=1400 audit(3913589532.447:357): avc: denied { connect } for pid=7152 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.405161][ T30] audit: type=1400 audit(3913589532.557:358): avc: denied { create } for pid=7155 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.808361][ T7175] overlayfs: failed to clone upperpath [ 138.983899][ T30] audit: type=1400 audit(3913589534.077:359): avc: denied { write } for pid=7170 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.512019][ T30] audit: type=1400 audit(3913589534.657:360): avc: denied { setopt } for pid=7187 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.629797][ T30] audit: type=1400 audit(3913589534.777:361): avc: denied { connect } for pid=7189 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.742489][ T90] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.890308][ T7195] syzkaller0: entered promiscuous mode [ 139.895862][ T7195] syzkaller0: entered allmulticast mode [ 139.922260][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 139.943210][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.392245][ T90] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.413249][ T90] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 140.441832][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.485624][ T90] usb 4-1: config 0 descriptor?? [ 140.511509][ T90] hub 4-1:0.0: USB hub found [ 140.715227][ T90] hub 4-1:0.0: 15 ports detected [ 141.144748][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.329'. [ 141.152293][ T90] hub 4-1:0.0: insufficient power available to use all downstream ports [ 141.201352][ T90] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 141.208644][ T7203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.329'. [ 141.247128][ T90] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 141.267768][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 141.274322][ T90] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 141.325261][ T90] usb 4-1: USB disconnect, device number 8 [ 141.658967][ T30] audit: type=1400 audit(3913589536.807:362): avc: denied { write } for pid=7221 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 141.793436][ T30] audit: type=1400 audit(3913589536.937:363): avc: denied { lock } for pid=7223 comm="syz.2.335" path="socket:[14600]" dev="sockfs" ino=14600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.594986][ T30] audit: type=1400 audit(3913589537.737:364): avc: denied { connect } for pid=7235 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.946339][ T30] audit: type=1400 audit(3913589537.737:365): avc: denied { ioctl } for pid=7235 comm="syz.5.339" path="socket:[14666]" dev="sockfs" ino=14666 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.166957][ T30] audit: type=1400 audit(3913589539.887:366): avc: denied { shutdown } for pid=7251 comm="syz.5.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.922337][ T30] audit: type=1400 audit(3913589540.927:367): avc: denied { getopt } for pid=7259 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 146.066098][ T7265] netlink: 'syz.0.345': attribute type 11 has an invalid length. [ 146.472147][ T7277] input: syz1 as /devices/virtual/input/input6 [ 146.997574][ T7280] syzkaller0: entered promiscuous mode [ 147.007871][ T7280] syzkaller0: entered allmulticast mode [ 147.020599][ T30] audit: type=1400 audit(3913589542.167:368): avc: denied { relabelfrom } for pid=7279 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.067816][ T30] audit: type=1400 audit(3913589542.197:369): avc: denied { relabelto } for pid=7279 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.589272][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 148.669295][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.358'. [ 150.471631][ T30] audit: type=1400 audit(3913589545.617:370): avc: denied { bind } for pid=7315 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.730343][ T30] audit: type=1400 audit(3913589545.867:371): avc: denied { mount } for pid=7322 comm="syz.3.362" name="/" dev="ramfs" ino=15501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 151.652232][ T30] audit: type=1400 audit(3913589546.787:372): avc: denied { listen } for pid=7335 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.704856][ T30] audit: type=1400 audit(3913589546.807:373): avc: denied { read } for pid=7335 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.391626][ T30] audit: type=1400 audit(3913589547.537:374): avc: denied { ioctl } for pid=7346 comm="syz.0.371" path="socket:[14898]" dev="sockfs" ino=14898 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 152.997726][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'. [ 153.019871][ T30] audit: type=1400 audit(3913589548.037:375): avc: denied { getopt } for pid=7356 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.241218][ T90] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.534975][ T7362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.603734][ T90] usb 3-1: config 0 has no interfaces? [ 153.620783][ T90] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 153.639096][ T7370] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 153.649168][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.678343][ T90] usb 3-1: config 0 descriptor?? [ 153.707371][ T7370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.736608][ T7373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.744995][ T7373] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.759231][ T7373] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 153.787535][ T7370] gretap1: entered promiscuous mode [ 153.806549][ T7370] bond1: (slave gretap1): making interface the new active one [ 153.815563][ T7370] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.835481][ T7378] macvlan2: entered promiscuous mode [ 153.849154][ T7378] macvlan2: entered allmulticast mode [ 154.025747][ T7378] bond1: entered promiscuous mode [ 154.036780][ T7378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.045252][ T90] usb 3-1: USB disconnect, device number 7 [ 154.124492][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.381'. [ 154.499693][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 154.524323][ T7378] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 154.568803][ T7378] bond1: left promiscuous mode [ 154.582652][ T7388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 156.075924][ T7406] overlayfs: overlapping lowerdir path [ 157.602297][ T30] audit: type=1400 audit(3913589552.707:376): avc: denied { shutdown } for pid=7412 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.672253][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.902253][ T9] usb 6-1: device descriptor read/64, error -71 [ 158.166445][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.352273][ T9] usb 6-1: device descriptor read/64, error -71 [ 158.484181][ T9] usb usb6-port1: attempt power cycle [ 159.131866][ T30] audit: type=1400 audit(3913589554.207:377): avc: denied { write } for pid=7432 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.182256][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.373209][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 159.380230][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.393164][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.404999][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 159.418892][ T5817] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.429595][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.438204][ T5817] usb 2-1: Product: syz [ 159.443203][ T5817] usb 2-1: Manufacturer: syz [ 159.447812][ T5817] usb 2-1: SerialNumber: syz [ 159.455523][ T9] usb 6-1: device descriptor read/8, error -71 [ 159.470464][ T5817] usb 2-1: config 0 descriptor?? [ 159.484692][ T5817] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.494774][ T5817] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 159.712254][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.733060][ T9] usb 6-1: device descriptor read/8, error -71 [ 159.792521][ T6714] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.844325][ T9] usb usb6-port1: unable to enumerate USB device [ 160.039669][ T6714] usb 4-1: Using ep0 maxpacket: 32 [ 160.047311][ T6714] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.055643][ T6714] usb 4-1: config 0 has no interface number 0 [ 160.061751][ T6714] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 160.072689][ T6714] usb 4-1: config 0 interface 1 has no altsetting 0 [ 160.081542][ T6714] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 160.090757][ T6714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.098965][ T6714] usb 4-1: Product: syz [ 160.099837][ T5817] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 160.103165][ T6714] usb 4-1: Manufacturer: syz [ 160.103183][ T6714] usb 4-1: SerialNumber: syz [ 160.110023][ T5817] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 160.122652][ T6714] usb 4-1: config 0 descriptor?? [ 160.597134][ T6714] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 160.618827][ T6714] cx231xx 4-1:0.1: Failed to read PCB config [ 160.632423][ T6714] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 160.659031][ T6714] usb 4-1: USB disconnect, device number 9 [ 160.878577][ T5817] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 160.888118][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 160.895368][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 160.906003][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 160.914475][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 160.921507][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 161.169746][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 161.314274][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 161.333032][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 161.353593][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 162.320713][ T5817] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 162.340434][ T5817] usb 2-1: USB disconnect, device number 5 [ 164.222780][ T7484] pim6reg: entered allmulticast mode [ 166.533860][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 166.732850][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.1.415'. [ 168.974728][ T5924] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.172257][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 169.298076][ T6523] IPVS: starting estimator thread 0... [ 169.582760][ T5924] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.590866][ T5924] usb 2-1: config 0 has no interface number 0 [ 169.597261][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.615951][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.634800][ T7555] IPVS: using max 47 ests per chain, 112800 per kthread [ 169.639770][ T5924] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.655318][ T7558] kernel profiling enabled (shift: 5) [ 169.702193][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.757688][ T5924] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.773755][ T7562] binder_alloc: 7560: binder_alloc_buf, no vma [ 169.779977][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.826701][ T5924] usb 2-1: config 0 descriptor?? [ 169.966582][ T5924] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.139504][ T7564] syzkaller0: entered promiscuous mode [ 170.152237][ T7564] syzkaller0: entered allmulticast mode [ 170.786734][ T5924] usb 2-1: USB disconnect, device number 6 [ 170.814011][ T5924] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 171.024246][ T7578] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 172.050491][ T7588] mmap: syz.1.438 (7588) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.399934][ T7596] netlink: 'syz.2.439': attribute type 8 has an invalid length. [ 176.903737][ T7638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 176.975186][ T30] audit: type=1400 audit(3913589572.127:378): avc: denied { name_bind } for pid=7632 comm="syz.5.451" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 179.422965][ T7666] overlayfs: failed to clone upperpath [ 180.498937][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 180.505923][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 180.513946][ T5136] Bluetooth: hci4: command 0x0406 tx timeout [ 180.741100][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 181.431849][ T7692] tipc: Resetting bearer [ 181.441100][ T30] audit: type=1800 audit(3913589576.587:379): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.463" name="bus" dev="ramfs" ino=15335 res=0 errno=0 [ 181.505143][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.512957][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.366872][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.423190][ T7692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.649140][ T30] audit: type=1400 audit(3913589577.797:380): avc: denied { lock } for pid=7708 comm="syz.0.472" path="socket:[16390]" dev="sockfs" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 183.124752][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.570497][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.582863][ T30] audit: type=1800 audit(3913589578.737:381): pid=7709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.0.472" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 183.591460][ T7709] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 183.646948][ T155] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.681954][ T30] audit: type=1400 audit(3913589578.737:382): avc: denied { firmware_load } for pid=7708 comm="syz.0.472" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 183.721174][ T155] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.738667][ T7709] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 183.839620][ T7722] random: crng reseeded on system resumption [ 183.992614][ T30] audit: type=1400 audit(3913589578.987:383): avc: denied { read write } for pid=7719 comm="syz.1.475" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.107801][ T7709] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 184.200305][ T30] audit: type=1400 audit(3913589578.987:384): avc: denied { ioctl open } for pid=7719 comm="syz.1.475" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 184.345571][ T30] audit: type=1400 audit(3913589579.257:385): avc: denied { firmware_load } for pid=7708 comm="syz.0.472" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 184.899089][ T30] audit: type=1400 audit(3913589579.997:386): avc: denied { create } for pid=7728 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 185.392306][ T30] audit: type=1400 audit(3913589580.007:387): avc: denied { bind } for pid=7728 comm="syz.5.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 186.080745][ T30] audit: type=1400 audit(3913589581.227:388): avc: denied { map } for pid=7738 comm="syz.2.479" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 186.104128][ T30] audit: type=1400 audit(3913589581.227:389): avc: denied { execute } for pid=7738 comm="syz.2.479" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.349157][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.483'. [ 188.597872][ T7763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7763 comm=syz.1.486 [ 190.776947][ T7788] capability: warning: `syz.2.493' uses deprecated v2 capabilities in a way that may be insecure [ 192.429744][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 192.429759][ T30] audit: type=1400 audit(3913589587.577:392): avc: denied { listen } for pid=7809 comm="syz.5.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 193.794496][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.801320][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.071880][ T30] audit: type=1400 audit(3913589593.157:393): avc: denied { read } for pid=7855 comm="syz.3.512" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 198.508856][ T30] audit: type=1400 audit(3913589593.167:394): avc: denied { open } for pid=7855 comm="syz.3.512" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 200.223243][ T30] audit: type=1400 audit(3913589593.177:395): avc: denied { ioctl } for pid=7855 comm="syz.3.512" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.006484][ T30] audit: type=1400 audit(3913589596.157:396): avc: denied { read write } for pid=7874 comm="syz.5.518" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.916615][ T30] audit: type=1400 audit(3913589596.157:397): avc: denied { open } for pid=7874 comm="syz.5.518" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.480584][ T7915] tipc: Enabled bearer , priority 0 [ 204.983516][ T7917] syzkaller0: entered promiscuous mode [ 204.992401][ T7917] syzkaller0: entered allmulticast mode [ 205.633104][ T7921] tipc: Resetting bearer [ 205.661934][ T7913] tipc: Resetting bearer [ 205.702261][ T7913] tipc: Disabling bearer [ 205.988068][ T48] libceph: connect (1)[c::]:6789 error -101 [ 206.000697][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 206.022868][ T48] libceph: connect (1)[c::]:6789 error -101 [ 206.050410][ T7930] ceph: No mds server is up or the cluster is laggy [ 206.050772][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 206.698320][ T48] libceph: connect (1)[c::]:6789 error -101 [ 206.722576][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 206.937492][ T7941] evm: overlay not supported [ 207.040208][ T30] audit: type=1400 audit(3913589602.187:398): avc: denied { block_suspend } for pid=7942 comm="syz.3.534" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.789758][ T7956] netlink: 'syz.0.539': attribute type 1 has an invalid length. [ 207.826669][ T7956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.930170][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 207.939446][ T7956] bond1: entered promiscuous mode [ 207.946349][ T7956] bond1: entered allmulticast mode [ 208.892423][ T7956] bond1: (slave dummy0): making interface the new active one [ 208.899822][ T7956] dummy0: entered promiscuous mode [ 208.905219][ T7956] dummy0: entered allmulticast mode [ 208.911273][ T7956] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 209.033164][ T7956] bond1 (unregistering): (slave dummy0): Releasing active interface [ 209.041152][ T7956] dummy0: left promiscuous mode [ 209.046407][ T7956] dummy0: left allmulticast mode [ 209.052597][ T7956] bond1 (unregistering): Released all slaves [ 209.082963][ T7964] netlink: 'syz.5.541': attribute type 1 has an invalid length. [ 210.160242][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.541'. [ 210.240242][ T30] audit: type=1400 audit(210.215:399): avc: denied { ioctl } for pid=7963 comm="syz.5.541" path="socket:[16801]" dev="sockfs" ino=16801 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 210.241200][ T7964] bond1: entered promiscuous mode [ 210.373506][ T7964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.400959][ T7972] bond1: entered allmulticast mode [ 210.604800][ T7964] bond1: (slave bridge1): making interface the new active one [ 210.641068][ T7964] bridge1: entered promiscuous mode [ 210.668399][ T7964] bridge1: entered allmulticast mode [ 210.800206][ T7964] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 211.666769][ T7988] netlink: 188 bytes leftover after parsing attributes in process `syz.5.546'. [ 217.324351][ T30] audit: type=1400 audit(217.285:400): avc: denied { write } for pid=8031 comm="syz.0.557" path="socket:[17837]" dev="sockfs" ino=17837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.116279][ T8070] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 221.126692][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.134040][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.175364][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.182519][ T8070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.190542][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.197622][ T8070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.221391][ T8070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.513278][ T30] audit: type=1400 audit(221.495:401): avc: denied { ioctl } for pid=8060 comm="syz.5.565" path="socket:[16921]" dev="sockfs" ino=16921 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 223.286882][ T5828] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 223.645409][ T6523] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 224.224024][ T6523] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 224.232323][ T6523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.244926][ T6523] usb 4-1: config 0 has no interface number 0 [ 224.376353][ T6523] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 224.679386][ T6523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.880065][ T6523] usb 4-1: Product: syz [ 224.893765][ T6523] usb 4-1: Manufacturer: syz [ 224.905240][ T6523] usb 4-1: SerialNumber: syz [ 224.916614][ T6523] usb 4-1: config 0 descriptor?? [ 224.930445][ T6523] hub 4-1:0.31: bad descriptor, ignoring hub [ 224.936684][ T6523] hub 4-1:0.31: probe with driver hub failed with error -5 [ 224.945578][ T6523] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 224.953166][ T6523] uvcvideo 4-1:0.31: No valid video chain found. [ 225.889538][ T5924] usb 4-1: USB disconnect, device number 10 [ 227.622300][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 227.633223][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 227.833086][ T5828] Bluetooth: hci4: hardware error 0x00 [ 228.064637][ T8127] overlayfs: failed to clone upperpath [ 228.149438][ T8140] vivid-000: ================= START STATUS ================= [ 228.157289][ T8140] vivid-000: Test Pattern: 75% Colorbar [ 228.163823][ T8140] vivid-000: Fill Percentage of Frame: 100 [ 228.169711][ T8140] vivid-000: Horizontal Movement: No Movement [ 228.175973][ T8140] vivid-000: Vertical Movement: No Movement [ 228.181941][ T8140] vivid-000: OSD Text Mode: All [ 228.186945][ T8140] vivid-000: Show Border: false [ 228.191873][ T8140] vivid-000: Show Square: false [ 228.196815][ T8140] vivid-000: Sensor Flipped Horizontally: false [ 228.203194][ T8140] vivid-000: Sensor Flipped Vertically: false [ 228.209380][ T8140] vivid-000: Insert SAV Code in Image: false [ 228.215488][ T8140] vivid-000: Insert EAV Code in Image: false [ 228.221576][ T8140] vivid-000: Insert Video Guard Band: false [ 228.227600][ T8140] vivid-000: Reduced Framerate: true [ 228.233005][ T8140] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 228.241295][ T8140] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 228.249755][ T8140] vivid-000: Enable Capture Cropping: true [ 228.255713][ T8140] vivid-000: Enable Capture Composing: true [ 228.261714][ T8140] vivid-000: Enable Capture Scaler: true [ 228.267459][ T8140] vivid-000: Timestamp Source: End of Frame [ 228.273468][ T8140] vivid-000: Colorspace: sRGB [ 228.278265][ T8140] vivid-000: Transfer Function: Default [ 228.283937][ T8140] vivid-000: Y'CbCr Encoding: Default [ 228.289433][ T8140] vivid-000: HSV Encoding: Hue 0-179 [ 228.294832][ T8140] vivid-000: Quantization: Default [ 228.300055][ T8140] vivid-000: Apply Alpha To Red Only: false [ 228.307817][ T8140] vivid-000: Standard Aspect Ratio: 4x3 [ 228.313416][ T8140] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 228.321213][ T8140] vivid-000: DV Timings: 640x480p59 inactive [ 228.327275][ T8140] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 228.334622][ T8140] vivid-000: Maximum EDID Blocks: 2 [ 228.340172][ T8140] vivid-000: Limited RGB Range (16-235): false [ 228.346463][ T8140] vivid-000: Rx RGB Quantization Range: Automatic [ 228.352877][ T8140] vivid-000: Power Present: 0x00000001 [ 228.358331][ T8140] tpg source WxH: 1920x1080 (Luma) [ 228.363436][ T8140] tpg field: 1 [ 228.366790][ T8140] tpg crop: (0,0)/1920x1080 [ 228.371483][ T8140] tpg compose: (0,0)/1920x1080 [ 228.376276][ T8140] tpg colorspace: 8 [ 228.380063][ T8140] tpg transfer function: 0/0 [ 228.384630][ T8140] tpg quantization: 0/0 [ 228.388750][ T8140] tpg RGB range: 0/2 [ 228.392630][ T8140] vivid-000: ================== END STATUS ================== [ 228.655788][ T8148] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 228.775346][ T30] audit: type=1400 audit(228.685:402): avc: denied { mounton } for pid=8142 comm="syz.2.584" path="/proc/413/task" dev="proc" ino=17949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 229.094468][ T30] audit: type=1400 audit(229.075:403): avc: denied { ioctl } for pid=8150 comm="syz.5.586" path="socket:[17038]" dev="sockfs" ino=17038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.175275][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.235971][ T8157] bond2: (slave ip6gretap1): making interface the new active one [ 229.253881][ T8157] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 229.465821][ T8160] tipc: Started in network mode [ 229.483908][ T8160] tipc: Node identity 8e98ab185806, cluster identity 4711 [ 229.513061][ T8160] tipc: Enabled bearer , priority 0 [ 229.532710][ T8163] syzkaller0: entered promiscuous mode [ 229.651688][ T8163] syzkaller0: entered allmulticast mode [ 229.666777][ T8160] tipc: Resetting bearer [ 229.747117][ T8168] ======================================================= [ 229.747117][ T8168] WARNING: The mand mount option has been deprecated and [ 229.747117][ T8168] and is ignored by this kernel. Remove the mand [ 229.747117][ T8168] option from the mount to silence this warning. [ 229.747117][ T8168] ======================================================= [ 230.046792][ T30] audit: type=1400 audit(229.765:404): avc: denied { mount } for pid=8164 comm="syz.5.590" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.069651][ T8159] tipc: Resetting bearer [ 230.088016][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 230.103467][ T30] audit: type=1400 audit(229.775:405): avc: denied { mounton } for pid=8164 comm="syz.5.590" path="/73/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 230.166958][ T8159] tipc: Disabling bearer [ 230.435159][ T30] audit: type=1400 audit(230.415:406): avc: denied { unmount } for pid=6314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 230.599973][ T30] audit: type=1400 audit(230.575:407): avc: denied { name_connect } for pid=8178 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 230.694662][ T30] audit: type=1400 audit(230.605:408): avc: denied { shutdown } for pid=8178 comm="syz.2.594" lport=50715 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.904223][ T30] audit: type=1326 audit(230.885:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 231.398796][ T30] audit: type=1326 audit(230.885:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 231.456782][ T30] audit: type=1326 audit(230.885:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 231.924530][ T5828] Bluetooth: hci5: link tx timeout [ 231.930268][ T5828] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.242189][ T5136] Bluetooth: hci1: command 0x0406 tx timeout [ 234.087986][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 234.527431][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 234.527448][ T30] audit: type=1400 audit(234.505:448): avc: denied { setopt } for pid=8236 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.958405][ T30] audit: type=1400 audit(234.635:449): avc: denied { append } for pid=8236 comm="syz.1.610" name="comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.619969][ T30] audit: type=1400 audit(237.595:450): avc: denied { write } for pid=8260 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 237.957556][ T30] audit: type=1400 audit(237.675:451): avc: denied { setopt } for pid=8260 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.123890][ T30] audit: type=1400 audit(239.095:452): avc: denied { read } for pid=8273 comm="syz.2.620" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 239.173726][ T8275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 239.205645][ T30] audit: type=1400 audit(239.095:453): avc: denied { open } for pid=8273 comm="syz.2.620" path="/127/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 239.264853][ T8275] block device autoloading is deprecated and will be removed. [ 241.193450][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.622'. [ 241.300730][ T30] audit: type=1400 audit(241.275:454): avc: denied { connect } for pid=8297 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 241.345511][ T30] audit: type=1400 audit(241.305:455): avc: denied { setopt } for pid=8297 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.976377][ T30] audit: type=1326 audit(241.955:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8304 comm="syz.1.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x0 [ 244.077253][ T8315] Invalid source name [ 244.081295][ T8315] UBIFS error (pid: 8315): cannot open "./file0", error -22 [ 244.545828][ T30] audit: type=1400 audit(244.055:457): avc: denied { mounton } for pid=8310 comm="syz.5.633" path="/79/file0" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 245.433876][ T90] IPVS: starting estimator thread 0... [ 245.712386][ T8331] IPVS: using max 46 ests per chain, 110400 per kthread [ 245.814310][ T8335] infiniband syz1: set active [ 245.819081][ T8335] infiniband syz1: added syz_tun [ 245.841900][ T8335] RDS/IB: syz1: added [ 245.846372][ T8335] smc: adding ib device syz1 with port count 1 [ 245.853001][ T8335] smc: ib device syz1 port 1 has no pnetid [ 247.072109][ T8344] netlink: 'syz.2.638': attribute type 3 has an invalid length. [ 247.238924][ T30] audit: type=1400 audit(247.215:458): avc: denied { append } for pid=8342 comm="syz.5.635" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 247.278747][ T8346] binder: 8342:8346 ioctl 4058534c 0 returned -22 [ 247.558260][ T5892] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 247.736653][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.766588][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 247.805121][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.892857][ T5892] usb 4-1: config 0 descriptor?? [ 247.947587][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 248.517242][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 248.958891][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.982247][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 249.002311][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 249.134869][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 249.153529][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 249.643437][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 249.758620][ T5892] pwc: recv_control_msg error -32 req 02 val 2100 [ 249.767485][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 249.793386][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 250.090319][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 250.774470][ T30] audit: type=1400 audit(250.565:459): avc: denied { create } for pid=8377 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.663184][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 252.523356][ T30] audit: type=1400 audit(250.665:460): avc: denied { bind } for pid=8377 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.579436][ T30] audit: type=1400 audit(250.825:461): avc: denied { setopt } for pid=8377 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.115237][ T5892] pwc: recv_control_msg error -71 req 02 val 2900 [ 254.172531][ T5892] pwc: recv_control_msg error -71 req 02 val 2800 [ 254.179543][ T5892] pwc: recv_control_msg error -71 req 04 val 1100 [ 254.187949][ T5892] pwc: recv_control_msg error -71 req 04 val 1200 [ 254.215501][ T5892] pwc: Registered as video103. [ 254.252244][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 254.430356][ T30] audit: type=1400 audit(254.405:462): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=2907 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.902645][ T5892] usb 4-1: USB disconnect, device number 11 [ 254.978398][ T30] audit: type=1400 audit(254.445:463): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2907 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.047103][ T30] audit: type=1400 audit(254.445:464): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2907 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 255.213780][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.220149][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.288054][ T30] audit: type=1400 audit(255.255:465): avc: denied { getopt } for pid=8409 comm="syz.1.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.732409][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 255.759041][ T30] audit: type=1400 audit(255.735:466): avc: denied { write } for pid=8416 comm="syz.3.659" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.902451][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 255.963036][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.019535][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.055115][ T5892] usb 2-1: config 0 has no interfaces? [ 256.077779][ T30] audit: type=1400 audit(256.045:467): avc: denied { ioctl } for pid=8416 comm="syz.3.659" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.238796][ T5892] usb 2-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 256.398205][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.431007][ T5892] usb 2-1: Product: syz [ 256.454597][ T5892] usb 2-1: Manufacturer: syz [ 256.467534][ T5892] usb 2-1: SerialNumber: syz [ 256.481724][ T5892] usb 2-1: config 0 descriptor?? [ 257.854526][ T9] usb 2-1: USB disconnect, device number 7 [ 258.284849][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.401917][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 258.452425][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 258.462110][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.495725][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.507572][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 258.532233][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.543669][ T10] usb 4-1: config 0 descriptor?? [ 258.549867][ T30] audit: type=1400 audit(258.525:468): avc: denied { write } for pid=8448 comm="syz.5.667" path="socket:[19625]" dev="sockfs" ino=19625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.685713][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 259.704243][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.743160][ T10] usb 4-1: USB disconnect, device number 12 [ 259.772272][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 259.953522][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 259.972949][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 260.015200][ T30] audit: type=1400 audit(259.975:469): avc: denied { read } for pid=8464 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.044815][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.099884][ T9] usb 6-1: config 0 has no interface number 0 [ 260.138927][ T9] usb 6-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.236177][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 260.275362][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.336608][ T9] usb 6-1: Product: syz [ 260.362438][ T9] usb 6-1: Manufacturer: syz [ 260.388410][ T9] usb 6-1: SerialNumber: syz [ 260.450733][ T9] usb 6-1: config 0 descriptor?? [ 260.661093][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 262.049907][ T30] audit: type=1400 audit(261.785:470): avc: denied { kexec_image_load } for pid=8457 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 265.762389][ T9] usb 6-1: qt2_attach - failed to power on unit: -110 [ 265.769307][ T9] quatech2 6-1:0.51: probe with driver quatech2 failed with error -110 [ 265.818363][ T30] audit: type=1400 audit(265.795:471): avc: denied { accept } for pid=8484 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 266.428299][ T6714] usb 6-1: USB disconnect, device number 7 [ 267.574281][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 267.826957][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 267.834408][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 267.841828][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 267.979978][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.762071][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.833210][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 268.880475][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 268.941101][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.955142][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.045021][ T6176] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 269.178176][ T30] audit: type=1400 audit(269.125:472): avc: denied { write } for pid=8511 comm="syz.5.687" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.635158][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.664981][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 269.789002][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 269.797363][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.845579][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.930395][ T6176] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 269.946071][ T6176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.977204][ T6176] usb 2-1: Product: syz [ 269.986986][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.015032][ T6176] usb 2-1: Manufacturer: syz [ 270.035538][ T6176] usb 2-1: SerialNumber: syz [ 270.063052][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.077465][ T9] usb 3-1: string descriptor 0 read error: -71 [ 270.088259][ T6176] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.107478][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.129037][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.138343][ T5866] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.150339][ T9] usb 3-1: can't set config #168, error -71 [ 270.181031][ T9] usb 3-1: USB disconnect, device number 8 [ 270.397442][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 270.926071][ T9] usb 2-1: USB disconnect, device number 8 [ 271.213338][ T5866] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 271.220471][ T5866] ath9k_htc: Failed to initialize the device [ 271.230816][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 274.363488][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.698'. [ 276.175247][ T8587] netlink: 'syz.1.703': attribute type 3 has an invalid length. [ 276.699448][ T8594] fuse: Invalid rootmode [ 276.942795][ T30] audit: type=1400 audit(276.925:473): avc: denied { getopt } for pid=8591 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.058594][ T30] audit: type=1400 audit(278.035:474): avc: denied { append } for pid=8605 comm="syz.2.709" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.259253][ T30] audit: type=1400 audit(278.235:475): avc: denied { write } for pid=8607 comm="syz.1.710" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.489158][ T30] audit: type=1400 audit(280.345:476): avc: denied { write } for pid=8620 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 281.191134][ T30] audit: type=1400 audit(281.155:477): avc: denied { mounton } for pid=8630 comm="syz.5.715" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 281.276780][ T8632] affs: No valid root block on device nullb0 [ 281.648278][ T30] audit: type=1400 audit(281.605:478): avc: denied { create } for pid=8634 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 281.856391][ T30] audit: type=1400 audit(281.615:479): avc: denied { accept } for pid=8634 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 281.888845][ T30] audit: type=1400 audit(281.625:480): avc: denied { load_policy } for pid=8634 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 282.154241][ T30] audit: type=1326 audit(282.085:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 284.195733][ T30] audit: type=1326 audit(282.085:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 284.352441][ T30] audit: type=1326 audit(282.095:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 284.385231][ T30] audit: type=1326 audit(282.095:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 285.386326][ T30] audit: type=1326 audit(282.095:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 285.496290][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.505083][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.514011][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.523173][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.532186][ T30] audit: type=1326 audit(282.105:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 285.554933][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.632301][ T30] audit: type=1326 audit(282.105:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 285.655777][ T30] audit: type=1326 audit(282.105:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 286.498694][ T30] audit: type=1326 audit(282.105:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 286.552829][ T30] audit: type=1326 audit(282.115:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.1.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a5b8f749 code=0x7ffc0000 [ 287.515860][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 287.515873][ T30] audit: type=1400 audit(287.495:496): avc: denied { write } for pid=8663 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 287.693117][ T52] Bluetooth: hci3: command tx timeout [ 289.156491][ T30] audit: type=1400 audit(289.135:497): avc: denied { map } for pid=8687 comm="syz.5.728" path="socket:[19030]" dev="sockfs" ino=19030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.202761][ T52] Bluetooth: hci3: command tx timeout [ 290.935769][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 291.118395][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.136634][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.263213][ T8658] bridge_slave_0: entered allmulticast mode [ 291.298447][ T8658] bridge_slave_0: entered promiscuous mode [ 292.053006][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.060203][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.067747][ T8658] bridge_slave_1: entered allmulticast mode [ 292.078204][ T8658] bridge_slave_1: entered promiscuous mode [ 292.243520][ T52] Bluetooth: hci3: command tx timeout [ 292.523787][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.563295][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.706139][ T8658] team0: Port device team_slave_0 added [ 292.740179][ T8658] team0: Port device team_slave_1 added [ 293.746174][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.777286][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.817778][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.839907][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.850908][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.961782][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.785979][ T52] Bluetooth: hci3: command tx timeout [ 295.460448][ T8658] hsr_slave_0: entered promiscuous mode [ 295.476941][ T8658] hsr_slave_1: entered promiscuous mode [ 295.491586][ T8658] debugfs: 'hsr0' already exists in 'hsr' [ 295.500703][ T8658] Cannot create hsr debugfs directory [ 296.057588][ T30] audit: type=1400 audit(296.035:498): avc: denied { create } for pid=8751 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 296.084277][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 296.102336][ T30] audit: type=1400 audit(296.055:499): avc: denied { write } for pid=8751 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 296.120560][ T8745] syzkaller0: entered promiscuous mode [ 296.129164][ T8745] syzkaller0: entered allmulticast mode [ 296.283146][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 296.357862][ T8755] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 296.386911][ T30] audit: type=1400 audit(296.365:500): avc: denied { ioctl } for pid=8760 comm="syz.3.742" path="mnt:[4026532797]" dev="nsfs" ino=4026532797 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 296.424703][ T8756] bond1: (slave syz_tun): Releasing backup interface [ 297.245705][ T8761] slcan: can't register candev [ 298.066575][ T8658] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.145758][ T8777] tipc: Enabled bearer , priority 0 [ 298.153209][ T8658] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.164895][ T8775] syzkaller0: entered promiscuous mode [ 298.170348][ T8775] syzkaller0: entered allmulticast mode [ 298.178307][ T8658] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.621865][ T8658] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.634024][ T8775] tipc: Resetting bearer [ 298.649187][ T8774] tipc: Resetting bearer [ 298.660984][ T8774] tipc: Disabling bearer [ 298.805858][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.828183][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.912248][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.919399][ T7131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.927272][ T30] audit: type=1400 audit(298.905:501): avc: denied { bind } for pid=8788 comm="syz.5.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.951377][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.958490][ T3863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.975759][ T793] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 299.019280][ T30] audit: type=1400 audit(298.995:502): avc: denied { module_request } for pid=8658 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.152374][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 299.198442][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.750'. [ 299.391853][ T793] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 299.421966][ T793] usb 2-1: config 0 has no interface number 0 [ 299.437470][ T793] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.460549][ T793] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 299.495918][ T793] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 299.641206][ T793] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.664725][ T793] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 299.799923][ T30] audit: type=1400 audit(299.645:503): avc: denied { read write } for pid=8800 comm="syz.2.751" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 299.838688][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.851077][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.860984][ T793] usb 2-1: config 0 descriptor?? [ 299.876154][ T793] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 299.897011][ T30] audit: type=1400 audit(299.645:504): avc: denied { open } for pid=8800 comm="syz.2.751" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 300.446389][ T5892] usb 2-1: USB disconnect, device number 9 [ 302.916454][ T30] audit: type=1400 audit(302.535:505): avc: denied { create } for pid=8816 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 302.936975][ T5892] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 302.953930][ T30] audit: type=1400 audit(302.755:506): avc: denied { write } for pid=8816 comm="syz.3.755" path="socket:[19210]" dev="sockfs" ino=19210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 303.249885][ T8825] Invalid source name [ 303.253967][ T8825] UBIFS error (pid: 8825): cannot open "./file0", error -22 [ 303.803014][ T8658] veth0_vlan: entered promiscuous mode [ 304.439530][ T8658] veth1_vlan: entered promiscuous mode [ 304.471455][ T8658] veth0_macvtap: entered promiscuous mode [ 304.494069][ T8658] veth1_macvtap: entered promiscuous mode [ 304.538257][ T793] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.680177][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.755302][ T30] audit: type=1400 audit(304.735:507): avc: denied { ioctl } for pid=8832 comm="syz.2.759" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.910965][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 304.914333][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.923970][ T793] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 304.952323][ T793] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 305.006013][ T6263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.040058][ T6263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.060915][ T6263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.075252][ T6263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.191063][ T793] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.322628][ T793] usb 2-1: config 1 interface 0 has no altsetting 0 [ 307.385139][ T793] usb 2-1: string descriptor 0 read error: -71 [ 307.412626][ T793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.421689][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.480137][ T793] usb 2-1: can't set config #1, error -71 [ 307.495766][ T793] usb 2-1: USB disconnect, device number 10 [ 308.109548][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.208168][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.976552][ T7122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.945007][ T7122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.179522][ T30] audit: type=1400 audit(310.155:508): avc: denied { mounton } for pid=8658 comm="syz-executor" path="/root/syzkaller.aYiAOZ/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 310.282268][ T30] audit: type=1400 audit(310.215:509): avc: denied { mounton } for pid=8658 comm="syz-executor" path="/root/syzkaller.aYiAOZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 310.311548][ T30] audit: type=1400 audit(310.215:510): avc: denied { mounton } for pid=8658 comm="syz-executor" path="/root/syzkaller.aYiAOZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 310.346363][ T30] audit: type=1400 audit(310.325:511): avc: denied { mounton } for pid=8658 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 310.553874][ T8881] input: syz1 as /devices/virtual/input/input8 [ 311.715127][ T30] audit: type=1400 audit(311.695:512): avc: denied { getopt } for pid=8887 comm="syz.6.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.338899][ T8902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 312.742284][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 313.112424][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 313.199545][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 313.227839][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.786649][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.806336][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.827082][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.862226][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.881377][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.116302][ T10] usb 3-1: usb_control_msg returned -32 [ 314.149463][ T10] usbtmc 3-1:16.0: can't read capabilities [ 315.431775][ T30] audit: type=1400 audit(315.405:513): avc: denied { ioctl } for pid=8927 comm="syz.5.780" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 316.150404][ T48] usb 3-1: USB disconnect, device number 9 [ 316.662887][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.813039][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.851974][ T8945] futex_wake_op: syz.2.783 tries to shift op by -1; fix this program [ 318.495511][ T30] audit: type=1400 audit(318.445:514): avc: denied { getopt } for pid=8963 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.592816][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 318.793415][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.811896][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.856858][ T48] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 318.889086][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.953976][ T8970] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 319.291102][ T48] usb 2-1: config 0 descriptor?? [ 319.321019][ T8971] netlink: 'syz.5.789': attribute type 1 has an invalid length. [ 319.738227][ T30] audit: type=1404 audit(319.715:515): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 319.849412][ T30] audit: type=1400 audit(319.805:516): avc: denied { map_create } for pid=8972 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 319.886026][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 319.913883][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 319.973522][ T48] usb 2-1: USB disconnect, device number 11 [ 320.017569][ T30] audit: type=1400 audit(319.815:517): avc: denied { prog_load } for pid=8972 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 320.077785][ T30] audit: type=1400 audit(319.855:518): avc: denied { ioctl } for pid=8955 comm="syz.1.786" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 320.187937][ T30] audit: type=1400 audit(319.855:519): avc: denied { allowed } for pid=8955 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 320.258531][ T48] libceph: connect (1)[c::]:6789 error -101 [ 320.266075][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 320.282301][ T30] audit: type=1400 audit(319.855:520): avc: denied { ioctl } for pid=8955 comm="syz.1.786" path="/dev/nbd1" dev="devtmpfs" ino=680 ioctlcmd=0xab04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.342189][ T30] audit: type=1400 audit(319.975:521): avc: denied { write } for pid=8972 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.364954][ T30] audit: type=1400 audit(319.975:522): avc: denied { write } for pid=8972 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 320.392616][ T8980] ceph: No mds server is up or the cluster is laggy [ 320.435403][ T30] audit: type=1400 audit(320.025:523): avc: denied { read write } for pid=8658 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.496811][ T30] audit: type=1400 audit(320.045:524): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.557843][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 320.573014][ T30] audit: type=1400 audit(320.125:525): avc: denied { create } for pid=8977 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.647474][ T8995] futex_wake_op: syz.5.798 tries to shift op by -1; fix this program [ 320.655732][ T30] audit: type=1400 audit(320.125:526): avc: denied { create } for pid=8977 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 320.722263][ T30] audit: type=1400 audit(320.125:527): avc: denied { execmem } for pid=8977 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 320.828262][ T30] audit: type=1400 audit(320.145:528): avc: denied { read } for pid=8975 comm="syz.6.792" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 320.905735][ T30] audit: type=1400 audit(320.145:529): avc: denied { read write } for pid=6314 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 320.968175][ T30] audit: type=1400 audit(320.155:530): avc: denied { create } for pid=8975 comm="syz.6.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 321.030408][ T30] audit: type=1400 audit(320.165:531): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.114247][ T30] audit: type=1400 audit(320.185:532): avc: denied { read } for pid=8979 comm="syz.5.794" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 323.470698][ T9047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=9047 comm=syz.1.815 [ 325.336221][ T9093] warning: `syz.1.825' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 325.692750][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 325.692760][ T30] audit: type=1400 audit(325.675:690): avc: denied { read write } for pid=6314 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 325.777203][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 325.875083][ T30] audit: type=1400 audit(325.855:691): avc: denied { create } for pid=9096 comm="syz.5.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 325.968929][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 326.002155][ T30] audit: type=1400 audit(325.885:692): avc: denied { create } for pid=9096 comm="syz.5.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 326.054288][ T30] audit: type=1400 audit(325.925:693): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.164336][ T30] audit: type=1400 audit(326.145:694): avc: denied { read } for pid=9099 comm="syz.3.834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 326.634837][ T30] audit: type=1400 audit(326.615:695): avc: denied { read write } for pid=6314 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.757866][ T30] audit: type=1400 audit(326.695:696): avc: denied { read write } for pid=8658 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.851777][ T30] audit: type=1400 audit(326.715:697): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.895126][ T52] Bluetooth: hci3: unexpected event 0x32 length: 13 > 9 [ 326.923741][ T30] audit: type=1400 audit(326.735:698): avc: denied { read write } for pid=9103 comm="syz.5.835" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 327.066144][ T30] audit: type=1400 audit(326.785:699): avc: denied { read } for pid=9103 comm="syz.5.835" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 327.556736][ T6176] libceph: connect (1)[c::]:6789 error -101 [ 327.568653][ T6176] libceph: mon0 (1)[c::]:6789 connect error [ 327.608709][ T6176] libceph: connect (1)[c::]:6789 error -101 [ 327.640941][ T6176] libceph: mon0 (1)[c::]:6789 connect error [ 327.643401][ T9114] ceph: No mds server is up or the cluster is laggy [ 327.716640][ T9120] sp0: Synchronizing with TNC [ 327.913493][ T6176] libceph: connect (1)[c::]:6789 error -101 [ 327.928055][ T9103] [U] è [ 327.934175][ T9127] netlink: 'syz.2.842': attribute type 10 has an invalid length. [ 327.942035][ T6176] libceph: mon0 (1)[c::]:6789 connect error [ 327.960781][ T9127] hsr0: entered promiscuous mode [ 327.967482][ T9127] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 327.985566][ T9127] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 328.049131][ T9127] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 330.702948][ T30] kauditd_printk_skb: 4569 callbacks suppressed [ 330.702964][ T30] audit: type=1400 audit(330.685:4348): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.795975][ T30] audit: type=1400 audit(330.685:4349): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.871194][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.878378][ T30] audit: type=1400 audit(330.685:4350): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 330.935173][ T5480] audit: audit_lost=308 audit_rate_limit=0 audit_backlog_limit=64 [ 330.968402][ T5480] audit: backlog limit exceeded [ 330.972172][ T30] audit: type=1400 audit(330.685:4351): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 331.015640][ T9180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 331.022232][ T9180] audit: audit_lost=309 audit_rate_limit=0 audit_backlog_limit=64 [ 331.037870][ T30] audit: type=1400 audit(330.685:4352): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 331.262805][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 331.289140][ T9183] netlink: 108 bytes leftover after parsing attributes in process `syz.2.863'. [ 331.379005][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 331.413674][ T9183] netlink: 108 bytes leftover after parsing attributes in process `syz.2.863'. [ 331.449686][ T9183] netlink: 84 bytes leftover after parsing attributes in process `syz.2.863'. [ 333.378033][ T9211] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.871'. [ 335.714221][ T30] kauditd_printk_skb: 7186 callbacks suppressed [ 335.714237][ T30] audit: type=1400 audit(335.685:10743): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.787731][ T30] audit: type=1400 audit(335.695:10744): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.827312][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.864726][ T5480] audit: audit_lost=575 audit_rate_limit=0 audit_backlog_limit=64 [ 335.880378][ T30] audit: type=1400 audit(335.695:10745): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 335.894506][ T5480] audit: backlog limit exceeded [ 335.930111][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.956212][ T5480] audit: audit_lost=576 audit_rate_limit=0 audit_backlog_limit=64 [ 335.960673][ T30] audit: type=1400 audit(335.695:10746): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.020208][ T30] audit: type=1400 audit(335.695:10747): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.178869][ T9248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 336.203831][ T9248] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 336.259405][ T9248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 336.276829][ T9248] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 336.307278][ T9248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 336.336367][ T9248] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 336.376393][ T9248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 336.391725][ T9248] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 339.558719][ T9287] netlink: 32 bytes leftover after parsing attributes in process `syz.5.897'. [ 340.724411][ T30] kauditd_printk_skb: 5988 callbacks suppressed [ 340.724426][ T30] audit: type=1400 audit(340.685:16461): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.760012][ T30] audit: type=1400 audit(340.705:16463): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.832921][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.833913][ T9319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.842965][ T5812] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.850741][ T30] audit: type=1400 audit(340.705:16464): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 340.852927][ T5480] audit: audit_lost=668 audit_rate_limit=0 audit_backlog_limit=64 [ 340.882226][ T5812] audit: audit_lost=669 audit_rate_limit=0 audit_backlog_limit=64 [ 340.882271][ T9319] audit: audit_lost=670 audit_rate_limit=0 audit_backlog_limit=64 [ 340.893473][ T5812] audit: backlog limit exceeded [ 341.210402][ T9330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9330 comm=syz.5.913 [ 341.242599][ T9330] netlink: 'syz.5.913': attribute type 1 has an invalid length. [ 341.313107][ T9330] bond2: (slave gretap1): making interface the new active one [ 341.322716][ T9330] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 341.359148][ T9330] vlan1: entered allmulticast mode [ 341.365190][ T9330] bond2: entered allmulticast mode [ 341.375936][ T9330] gretap1: entered allmulticast mode [ 341.394818][ T9330] bond2: (slave vlan1): Opening slave failed [ 345.732450][ T30] kauditd_printk_skb: 7037 callbacks suppressed [ 345.732466][ T30] audit: type=1400 audit(345.715:23146): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.804469][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.837555][ T9407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.848345][ T5480] audit: audit_lost=789 audit_rate_limit=0 audit_backlog_limit=64 [ 345.867048][ T9407] audit: audit_lost=790 audit_rate_limit=0 audit_backlog_limit=64 [ 345.878945][ T30] audit: type=1400 audit(345.715:23147): avc: denied { create } for pid=9406 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 345.921043][ T9407] audit: backlog limit exceeded [ 345.925992][ T9409] audit: audit_backlog=65 > audit_backlog_limit=64 [ 345.946005][ T9409] audit: audit_lost=791 audit_rate_limit=0 audit_backlog_limit=64 [ 345.966612][ T5480] audit: backlog limit exceeded [ 350.742355][ T30] kauditd_printk_skb: 9280 callbacks suppressed [ 350.742370][ T30] audit: type=1400 audit(350.725:29670): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 350.790403][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.799819][ T9485] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.819678][ T9485] audit: audit_lost=1711 audit_rate_limit=0 audit_backlog_limit=64 [ 350.822127][ T5480] audit: audit_lost=1712 audit_rate_limit=0 audit_backlog_limit=64 [ 350.858496][ T30] audit: type=1400 audit(350.745:29671): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 350.860681][ T9485] audit: backlog limit exceeded [ 350.884204][ T5480] audit: backlog limit exceeded [ 350.898484][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.900037][ T6314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 353.366306][ T6866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.469782][ T6866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.646329][ T6866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.834056][ T6866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.852530][ T9538] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 353.859260][ T9538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 353.892633][ T9538] vhci_hcd vhci_hcd.0: Device attached [ 354.012976][ T9539] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 0 [ 354.058527][ T6344] vhci_hcd vhci_hcd.3: stop threads [ 354.087350][ T6344] vhci_hcd vhci_hcd.3: release socket [ 354.120621][ T6344] vhci_hcd vhci_hcd.3: disconnect device [ 354.162400][ T5921] usb 40-1: enqueue for inactive port 0 [ 354.191872][ T6866] bridge_slave_1: left allmulticast mode [ 354.226053][ T6866] bridge_slave_1: left promiscuous mode [ 354.247184][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.287962][ T6866] bridge_slave_0: left allmulticast mode [ 354.313410][ T6866] bridge_slave_0: left promiscuous mode [ 354.331939][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.703081][ T5921] usb usb40-port1: attempt power cycle [ 355.293037][ T5921] usb usb40-port1: unable to enumerate USB device [ 355.429024][ T9538] syz.3.982 (9538): drop_caches: 2 [ 355.788072][ T30] kauditd_printk_skb: 13093 callbacks suppressed [ 355.788087][ T30] audit: type=1400 audit(355.765:37847): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 355.946955][ T30] audit: type=1400 audit(355.905:37848): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 356.070302][ T30] audit: type=1400 audit(355.905:37849): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 356.212740][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.219257][ T5480] audit: audit_lost=3353 audit_rate_limit=0 audit_backlog_limit=64 [ 356.248231][ T9580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.282281][ T9580] audit: audit_lost=3354 audit_rate_limit=0 audit_backlog_limit=64 [ 356.288131][ T30] audit: type=1400 audit(356.015:37850): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 356.292470][ T5480] audit: backlog limit exceeded [ 356.338886][ T9581] audit: audit_backlog=65 > audit_backlog_limit=64 [ 356.428934][ T9581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=9581 comm=syz.3.991 [ 356.479654][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 357.196660][ T6866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.343688][ T6866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.595133][ T6866] bond0 (unregistering): Released all slaves [ 359.850926][ T6866] hsr_slave_0: left promiscuous mode [ 359.882993][ T6866] hsr_slave_1: left promiscuous mode [ 359.914294][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.950378][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.013670][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.051311][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.099762][ T9618] PKCS8: Unsupported PKCS#8 version [ 360.169603][ T6866] veth1_macvtap: left promiscuous mode [ 360.206658][ T6866] veth0_macvtap: left promiscuous mode [ 360.241951][ T6866] veth1_vlan: left promiscuous mode [ 360.269087][ T6866] veth0_vlan: left promiscuous mode [ 360.487904][ T9625] syz.5.1006 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 360.793428][ T30] kauditd_printk_skb: 3251 callbacks suppressed [ 360.793442][ T30] audit: type=1400 audit(360.775:40883): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.846960][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.887152][ T9629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.901481][ T9629] audit: audit_lost=3428 audit_rate_limit=0 audit_backlog_limit=64 [ 360.912141][ T30] audit: type=1400 audit(360.795:40884): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 360.953974][ T9629] audit: backlog limit exceeded [ 360.965252][ T5480] audit: audit_lost=3429 audit_rate_limit=0 audit_backlog_limit=64 [ 360.982024][ T9629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.998932][ T5812] audit: audit_backlog=65 > audit_backlog_limit=64 [ 361.014575][ T9629] audit: audit_lost=3430 audit_rate_limit=0 audit_backlog_limit=64 [ 362.489658][ T6866] team0 (unregistering): Port device team_slave_1 removed [ 362.605961][ T6866] team0 (unregistering): Port device team_slave_0 removed [ 363.854685][ T6866] IPVS: stop unused estimator thread 0... [ 364.783968][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 364.869250][ T9668] veth1_macvtap: left promiscuous mode [ 365.802499][ T30] kauditd_printk_skb: 7746 callbacks suppressed [ 365.802513][ T30] audit: type=1400 audit(365.785:48348): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 365.856534][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.874512][ T5480] audit: audit_lost=3525 audit_rate_limit=0 audit_backlog_limit=64 [ 365.892633][ T5480] audit: backlog limit exceeded [ 365.938082][ T30] audit: type=1400 audit(365.785:48349): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.952816][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.974093][ T9686] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.980609][ T9686] audit: audit_lost=3526 audit_rate_limit=0 audit_backlog_limit=64 [ 365.992307][ T9686] audit: backlog limit exceeded [ 365.997249][ T30] audit: type=1400 audit(365.815:48350): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 368.907115][ T9733] Bluetooth: hci0: Frame reassembly failed (-84) [ 370.812924][ T30] kauditd_printk_skb: 6235 callbacks suppressed [ 370.812936][ T30] audit: type=1400 audit(370.785:54584): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 370.871705][ T30] audit: type=1400 audit(370.795:54585): avc: denied { write } for pid=9759 comm="syz.6.1046" name="dlm_plock" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 370.939740][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.958982][ T5480] audit: audit_lost=3528 audit_rate_limit=0 audit_backlog_limit=64 [ 370.962556][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 370.967525][ T5828] Bluetooth: hci0: command 0x1003 tx timeout [ 370.990696][ T9763] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.000465][ T5480] audit: backlog limit exceeded [ 371.011352][ T30] audit: type=1400 audit(370.795:54586): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 371.032218][ T9763] audit: audit_lost=3529 audit_rate_limit=0 audit_backlog_limit=64 [ 371.056938][ T9763] audit: backlog limit exceeded [ 371.090718][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.733625][ T9775] netlink: 'syz.5.1048': attribute type 15 has an invalid length. [ 375.822243][ T30] kauditd_printk_skb: 5971 callbacks suppressed [ 375.822258][ T30] audit: type=1400 audit(375.795:60097): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.854540][ T30] audit: type=1400 audit(375.805:60098): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.877566][ T30] audit: type=1400 audit(375.805:60099): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.940922][ T30] audit: type=1400 audit(375.805:60100): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 375.942916][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 375.972456][ T5810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.040549][ T5809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 376.052185][ T5809] audit: audit_lost=3684 audit_rate_limit=0 audit_backlog_limit=64 [ 376.061379][ T5480] audit: audit_lost=3685 audit_rate_limit=0 audit_backlog_limit=64 [ 376.062177][ T30] audit: type=1400 audit(375.805:60101): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 376.271773][ T9845] No such timeout policy "syz1" [ 376.707581][ T9854] snd_dummy snd_dummy.0: control 1:9:195:Û:53367 is already present [ 378.094283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.102231][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.018419][ T9900] capability: warning: `syz.3.1085' uses 32-bit capabilities (legacy support in use) [ 379.052069][ T9900] Falling back ldisc for ttyS3. [ 380.832161][ T30] kauditd_printk_skb: 9466 callbacks suppressed [ 380.832176][ T30] audit: type=1400 audit(380.805:68739): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 380.860484][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 380.880419][ T9925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 380.909746][ T9925] audit: audit_lost=3962 audit_rate_limit=0 audit_backlog_limit=64 [ 380.920242][ T9925] audit: backlog limit exceeded [ 380.940768][ T30] audit: type=1400 audit(380.815:68740): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 380.952150][ T5480] audit: audit_lost=3963 audit_rate_limit=0 audit_backlog_limit=64 [ 381.014464][ T30] audit: type=1400 audit(380.815:68741): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 381.032111][ T5480] audit: backlog limit exceeded [ 381.087271][ T30] audit: type=1400 audit(380.815:68742): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 385.313578][ T9986] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 385.845624][ T30] kauditd_printk_skb: 11180 callbacks suppressed [ 385.845658][ T30] audit: type=1400 audit(385.815:77013): avc: denied { read } for pid=9999 comm="syz.5.1118" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 385.903040][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 385.909971][ T5480] audit: audit_lost=4934 audit_rate_limit=0 audit_backlog_limit=64 [ 385.933845][ T30] audit: type=1400 audit(385.815:77014): avc: denied { read write } for pid=9999 comm="syz.5.1118" name="vbi2" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 385.962149][ T5480] audit: backlog limit exceeded [ 385.962174][ T30] audit: type=1400 audit(385.815:77015): avc: denied { create } for pid=9999 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 385.997366][ T30] audit: type=1400 audit(385.815:77016): avc: denied { write } for pid=9999 comm="syz.5.1118" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 385.997835][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 386.021759][ T30] audit: type=1400 audit(385.825:77017): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.062810][ T30] audit: type=1400 audit(385.825:77018): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 386.535916][ T793] libceph: connect (1)[c::]:6789 error -101 [ 386.541919][ T793] libceph: mon0 (1)[c::]:6789 connect error [ 386.574543][T10010] ceph: No mds server is up or the cluster is laggy [ 386.634509][T10013] ip6tnl1: entered promiscuous mode [ 387.707225][ T7122] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.738232][T10020] sp0: Synchronizing with TNC [ 388.876499][T10042] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 390.852278][ T30] kauditd_printk_skb: 9260 callbacks suppressed [ 390.852287][ T30] audit: type=1400 audit(390.835:86067): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 390.891668][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 390.914536][ T5480] audit: audit_lost=5006 audit_rate_limit=0 audit_backlog_limit=64 [ 390.915648][ T30] audit: type=1400 audit(390.865:86068): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 390.952178][ T30] audit: type=1400 audit(390.865:86069): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 390.975093][ T30] audit: type=1400 audit(390.865:86070): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.008269][ T5480] audit: backlog limit exceeded [ 391.027000][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.038989][ T30] audit: type=1400 audit(390.865:86071): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 391.078022][ T5480] audit: audit_lost=5007 audit_rate_limit=0 audit_backlog_limit=64 [ 394.750126][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1148'. [ 394.830040][T10102] bridge0: entered promiscuous mode [ 394.858666][T10102] macvlan2: entered promiscuous mode [ 395.862146][ T30] kauditd_printk_skb: 10423 callbacks suppressed [ 395.862161][ T30] audit: type=1400 audit(395.835:95900): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 395.928152][ T30] audit: type=1400 audit(395.865:95901): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 395.949022][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 395.969098][ T5480] audit: audit_lost=5206 audit_rate_limit=0 audit_backlog_limit=64 [ 395.994670][ T5480] audit: backlog limit exceeded [ 396.011223][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.013424][ T6314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 396.018068][ T30] audit: type=1400 audit(395.865:95902): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 396.052226][ T5480] audit: audit_lost=5207 audit_rate_limit=0 audit_backlog_limit=64 [ 396.070959][ T5480] audit: backlog limit exceeded [ 398.675944][T10142] x_tables: duplicate underflow at hook 1 [ 399.321948][ T3417] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.401385][ T3417] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.479868][ T3417] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.583867][ T3417] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.771392][ T3417] bridge_slave_1: left allmulticast mode [ 399.778958][ T3417] bridge_slave_1: left promiscuous mode [ 399.802395][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.827200][T10155] netlink: 'syz.3.1163': attribute type 4 has an invalid length. [ 399.842022][ T3417] bridge_slave_0: left allmulticast mode [ 399.854457][ T3417] bridge_slave_0: left promiscuous mode [ 399.871853][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.897573][T10160] netlink: 'syz.3.1163': attribute type 4 has an invalid length. [ 400.716739][ T5866] libceph: connect (1)[c::]:6789 error -101 [ 400.724692][ T5866] libceph: mon0 (1)[c::]:6789 connect error [ 400.787962][T10169] ceph: No mds server is up or the cluster is laggy [ 400.799467][ T3417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.843537][ T3417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.874993][ T30] kauditd_printk_skb: 11439 callbacks suppressed [ 400.875008][ T30] audit: type=1400 audit(400.855:106194): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 400.911812][ T30] audit: type=1400 audit(400.855:106195): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 400.915878][ T3417] bond0 (unregistering): Released all slaves [ 400.939016][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 400.939482][ T30] audit: type=1400 audit(400.855:106196): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 400.945626][ T5480] audit: audit_lost=5591 audit_rate_limit=0 audit_backlog_limit=64 [ 401.017600][ T5480] audit: backlog limit exceeded [ 401.022799][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 401.031121][ T5480] audit: audit_lost=5592 audit_rate_limit=0 audit_backlog_limit=64 [ 401.042631][ T5480] audit: backlog limit exceeded [ 401.050462][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 401.606095][T10172] ip6tnl1: entered promiscuous mode [ 402.268132][ T3417] hsr_slave_0: left promiscuous mode [ 402.279705][ T3417] hsr_slave_1: left promiscuous mode [ 402.308951][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.327091][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.349242][ T3417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.371824][ T3417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.445213][ T3417] veth1_macvtap: left promiscuous mode [ 402.450852][ T3417] veth0_macvtap: left promiscuous mode [ 402.472715][ T3417] veth1_vlan: left promiscuous mode [ 402.489053][ T3417] veth0_vlan: left promiscuous mode [ 403.667158][ T3417] team0 (unregistering): Port device team_slave_1 removed [ 403.781811][ T3417] team0 (unregistering): Port device team_slave_0 removed [ 405.882450][ T30] kauditd_printk_skb: 13240 callbacks suppressed [ 405.882465][ T30] audit: type=1400 audit(405.865:117917): avc: denied { create } for pid=10205 comm="syz.2.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 405.924808][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.931750][T10210] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.932941][T10209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 405.940146][T10210] audit: audit_lost=6100 audit_rate_limit=0 audit_backlog_limit=64 [ 405.944934][ T30] audit: type=1400 audit(405.865:117918): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 405.962125][ T5480] audit: audit_lost=6101 audit_rate_limit=0 audit_backlog_limit=64 [ 405.974719][T10209] audit: audit_lost=6102 audit_rate_limit=0 audit_backlog_limit=64 [ 405.988422][ T5480] audit: backlog limit exceeded [ 405.990727][T10209] audit: backlog limit exceeded [ 410.902258][ T30] kauditd_printk_skb: 20486 callbacks suppressed [ 410.902272][ T30] audit: type=1400 audit(410.885:137805): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 410.972571][ T30] audit: type=1400 audit(410.885:137806): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.050548][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.057250][T10252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.065554][T10242] audit: audit_backlog=65 > audit_backlog_limit=64 [ 411.072183][T10252] audit: audit_lost=6303 audit_rate_limit=0 audit_backlog_limit=64 [ 411.080151][ T30] audit: type=1400 audit(410.885:137807): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 411.113589][T10252] audit: backlog limit exceeded [ 411.122222][ T5480] audit: audit_lost=6304 audit_rate_limit=0 audit_backlog_limit=64 [ 411.131271][T10242] audit: audit_lost=6305 audit_rate_limit=0 audit_backlog_limit=64 [ 412.784327][T10263] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 412.816980][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 412.835630][T10263] dummy0: entered promiscuous mode [ 412.855149][T10263] bridge0: port 3(dummy0) entered blocking state [ 412.866852][T10263] bridge0: port 3(dummy0) entered disabled state [ 412.881263][T10263] dummy0: entered allmulticast mode [ 412.899064][T10263] bridge0: port 3(dummy0) entered blocking state [ 412.905474][T10263] bridge0: port 3(dummy0) entered forwarding state [ 413.523469][T10258] [U]  [ 415.912285][ T30] kauditd_printk_skb: 14899 callbacks suppressed [ 415.912300][ T30] audit: type=1400 audit(415.885:152644): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 415.956640][ T30] audit: type=1400 audit(415.895:152645): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 415.966560][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 415.992218][ T5480] audit: audit_lost=6326 audit_rate_limit=0 audit_backlog_limit=64 [ 416.000166][ T5480] audit: backlog limit exceeded [ 416.000210][ T30] audit: type=1400 audit(415.895:152646): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 416.036055][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 416.045114][ T30] audit: type=1400 audit(415.895:152647): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 416.045195][ T5480] audit: audit_lost=6327 audit_rate_limit=0 audit_backlog_limit=64 [ 416.066090][ T30] audit: type=1400 audit(415.895:152648): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.429237][ T13] smc: removing ib device syz1 [ 417.456878][ T5873] syz1: Port: 1 Link DOWN [ 417.801157][ T3417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.937670][ T3417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.060165][ T3417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.195709][ T3417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.518203][ T3417] bridge_slave_1: left allmulticast mode [ 418.539189][ T3417] bridge_slave_1: left promiscuous mode [ 418.552307][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.561241][ T3417] bridge_slave_0: left allmulticast mode [ 418.577714][ T13] ------------[ cut here ]------------ [ 418.583764][ T13] GID entry ref leak for dev syz1 index 2 ref=1 [ 418.589996][ T13] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#1: kworker/u8:1/13 [ 418.602275][ T13] Modules linked in: [ 418.602425][ T3417] bridge_slave_0: left promiscuous mode [ 418.606315][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.611963][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.623282][ T13] Tainted: [L]=SOFTLOCKUP [ 418.634348][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.644788][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 418.650692][ T13] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 418.657125][ T13] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 9a 67 4d f9 48 8d 3d 13 ae 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 80 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 418.677134][ T13] RSP: 0018:ffffc90000127ac8 EFLAGS: 00010293 [ 418.683558][ T13] RAX: 0000000000000000 RBX: ffff888012782000 RCX: 0000000000000001 [ 418.691526][ T13] RDX: 0000000000000002 RSI: ffff8880202dbc60 RDI: ffffffff90952d10 [ 418.700278][ T13] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1006ab9600 [ 418.709086][ T13] R10: ffff8880355cb003 R11: ffffffff812ba1ca R12: ffffed10024f041b [ 418.717419][ T13] R13: ffff888021a8c000 R14: 0000000000000002 R15: dffffc0000000000 [ 418.725758][ T13] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 418.735078][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.741660][ T13] CR2: 00007ffd8f50cf6f CR3: 000000003463f000 CR4: 00000000003526f0 [ 418.750026][ T13] Call Trace: [ 418.753660][ T13] [ 418.756594][ T13] ib_device_release+0xef/0x1e0 [ 418.761448][ T13] ? __pfx_ib_device_release+0x10/0x10 [ 418.767230][ T13] device_release+0xa4/0x240 [ 418.771821][ T13] kobject_put+0x1ef/0x6f0 [ 418.776502][ T13] put_device+0x1f/0x30 [ 418.780841][ T13] process_one_work+0x9ba/0x1b20 [ 418.785995][ T13] ? __pfx_process_one_work+0x10/0x10 [ 418.791373][ T13] ? assign_work+0x1a0/0x250 [ 418.796201][ T13] worker_thread+0x6c8/0xf10 [ 418.800801][ T13] ? __pfx_worker_thread+0x10/0x10 [ 418.806438][ T13] kthread+0x3c5/0x780 [ 418.810506][ T13] ? __pfx_kthread+0x10/0x10 [ 418.815505][ T13] ? rcu_is_watching+0x12/0xc0 [ 418.820266][ T13] ? __pfx_kthread+0x10/0x10 [ 418.824889][ T13] ret_from_fork+0x983/0xb10 [ 418.829478][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 418.834646][ T13] ? __switch_to+0x7af/0x10d0 [ 418.839320][ T13] ? __pfx_kthread+0x10/0x10 [ 418.843950][ T13] ret_from_fork_asm+0x1a/0x30 [ 418.848728][ T13] [ 418.851739][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.859012][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.869872][ T13] Tainted: [L]=SOFTLOCKUP [ 418.874238][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.884307][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 418.890207][ T13] Call Trace: [ 418.893479][ T13] [ 418.896433][ T13] dump_stack_lvl+0x3d/0x1f0 [ 418.901032][ T13] vpanic+0x640/0x6f0 [ 418.905014][ T13] ? gid_table_release_one+0x1ad/0x450 [ 418.910461][ T13] panic+0xca/0xd0 [ 418.914164][ T13] ? __pfx_panic+0x10/0x10 [ 418.918566][ T13] ? check_panic_on_warn+0x1f/0xb0 [ 418.923656][ T13] check_panic_on_warn+0xab/0xb0 [ 418.928574][ T13] __warn+0x108/0x3c0 [ 418.932538][ T13] __report_bug+0x2a0/0x520 [ 418.937018][ T13] ? gid_table_release_one+0x1ad/0x450 [ 418.942461][ T13] ? __pfx___report_bug+0x10/0x10 [ 418.947476][ T13] report_bug_entry+0xe1/0x290 [ 418.952218][ T13] ? gid_table_release_one+0x1b6/0x450 [ 418.957653][ T13] handle_bug+0x18a/0x260 [ 418.961966][ T13] exc_invalid_op+0x17/0x50 [ 418.966466][ T13] asm_exc_invalid_op+0x1a/0x20 [ 418.971293][ T13] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 418.977340][ T13] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 9a 67 4d f9 48 8d 3d 13 ae 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 80 67 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 418.996925][ T13] RSP: 0018:ffffc90000127ac8 EFLAGS: 00010293 [ 419.002972][ T13] RAX: 0000000000000000 RBX: ffff888012782000 RCX: 0000000000000001 [ 419.010921][ T13] RDX: 0000000000000002 RSI: ffff8880202dbc60 RDI: ffffffff90952d10 [ 419.018871][ T13] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1006ab9600 [ 419.026823][ T13] R10: ffff8880355cb003 R11: ffffffff812ba1ca R12: ffffed10024f041b [ 419.034770][ T13] R13: ffff888021a8c000 R14: 0000000000000002 R15: dffffc0000000000 [ 419.042719][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 419.047646][ T13] ? gid_table_release_one+0x1a6/0x450 [ 419.053089][ T13] ib_device_release+0xef/0x1e0 [ 419.057922][ T13] ? __pfx_ib_device_release+0x10/0x10 [ 419.063362][ T13] device_release+0xa4/0x240 [ 419.067931][ T13] kobject_put+0x1ef/0x6f0 [ 419.072330][ T13] put_device+0x1f/0x30 [ 419.076464][ T13] process_one_work+0x9ba/0x1b20 [ 419.081396][ T13] ? __pfx_process_one_work+0x10/0x10 [ 419.086752][ T13] ? assign_work+0x1a0/0x250 [ 419.091322][ T13] worker_thread+0x6c8/0xf10 [ 419.095897][ T13] ? __pfx_worker_thread+0x10/0x10 [ 419.100989][ T13] kthread+0x3c5/0x780 [ 419.105038][ T13] ? __pfx_kthread+0x10/0x10 [ 419.109607][ T13] ? rcu_is_watching+0x12/0xc0 [ 419.114346][ T13] ? __pfx_kthread+0x10/0x10 [ 419.118918][ T13] ret_from_fork+0x983/0xb10 [ 419.123485][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 419.128574][ T13] ? __switch_to+0x7af/0x10d0 [ 419.133230][ T13] ? __pfx_kthread+0x10/0x10 [ 419.137801][ T13] ret_from_fork_asm+0x1a/0x30 [ 419.142555][ T13] [ 419.145747][ T13] Kernel Offset: disabled [ 419.150045][ T13] Rebooting in 86400 seconds..