last executing test programs: 3m40.311961656s ago: executing program 2 (id=662): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r2, &(0x7f00000000c0)="3f030e00", 0x4, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x14) open$dir(0x0, 0x20600, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) 3m37.677678408s ago: executing program 2 (id=667): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x8001, 0x4, {{0x2c, 0x4, 0x0, 0x2c, 0xb0, 0x65, 0x0, 0xc4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x58, 0x3, [{0x2, 0x2}, {0x5, 0xf, "0323250719429338c0ecd134d0"}, {0x0, 0xa, "23e28810b724f26e"}, {0x1, 0x6, "afc0db7f"}, {0x7, 0x11, "df6d28b4b3e33f16377e8d4bf3549a"}, {0x5, 0x9, "0c8976a0458441"}, {0x6, 0xd, "209fd47acbc93d1bcda20a"}, {0x5, 0xa, "97f67f1767c499a7"}]}, @cipso={0x86, 0x22, 0x3, [{0x2, 0x7, "4ac7ac8a97"}, {0x5, 0x2}, {0x5, 0xd, "4b05dfe0f3a3dabb4d84c4"}, {0x7, 0x6, "c2adec14"}]}, @generic={0x82, 0x11, "9f79b45063f8e757463cf97776105d"}, @noop, @ssrr={0x89, 0x3, 0x4}, @end, @ssrr={0x89, 0x3, 0x41}, @noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x9, 0x1, {{0x2f, 0x4, 0x1, 0x33, 0xbc, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @local, {[@cipso={0x86, 0x3d, 0xfffffffffffffffc, [{0x6, 0x5, "288efc"}, {0x2, 0x10, "2f19a3bc5f2a33101276ce08039b"}, {0x1, 0x3, 'A'}, {0x7, 0x2}, {0x6, 0x4, "a7fe"}, {0x1, 0x9, "a0f02fdb0d1ca7"}, {0x2, 0x9, "f1fb8188205a3b"}, {0x5, 0x7, "6d621f4fa5"}]}, @timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x0, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0xffff}]}, @timestamp={0x44, 0x14, 0x50, 0x0, 0x7, [0x0, 0x0, 0x6, 0x3]}, @timestamp_prespec={0x44, 0x1c, 0x9f, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x927}, {@local, 0x8}]}, @rr={0x7, 0x1f, 0xb7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @private=0xa010101, @multicast2, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd7000ffdbdf25180000001c000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="080000000300000014000200697036746e6c300000000000000000008a55c0476293a1ab9d4b520acc9b5267ad7ba004309a2faf646c1eaec035e8be275d901e06cad3d6c393083cf912650d7a96f6691f6552ab8dad581d4bfdd28f3075bc9b992277a6a829f55664def09845e397d3284c82fae76de8d056f04b7a585a7086d04fa7"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000844) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xe38}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0x10000, './file0\x00'}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 3m32.940587493s ago: executing program 2 (id=676): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000af59"], 0x18}, 0xd1) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x20044094, &(0x7f0000000040)={0x1a, 0x6, 0xdc, 0x0, 0x12, 0x6, @random="dbe4359e0ad7"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x16, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x570, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x7718f1ff, 0x7c7, {{0x31, 0x4, 0x0, 0x36, 0xc4, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, {[@generic={0x88, 0x2}, @lsrr={0x83, 0x1f, 0xb2, [@remote, @loopback, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0x5f, 0x1, 0x9, [{@loopback, 0x1}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp_addr={0x44, 0x24, 0x74, 0x1, 0x3, [{@local, 0x2}, {@multicast2, 0x3f}, {@multicast2, 0x3}, {@empty, 0x6}]}, @generic={0x44, 0x11, "14465d526658c2311cfda861d8dc0c"}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x9}, {@empty, 0x9}, {@multicast1, 0x6}, {@multicast2, 0x6}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}]}]}}}}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000540)={0xc8, 0xaf1}) bind$can_raw(r3, &(0x7f0000000340)={0x1d, r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00887c7317d9e444f9da2b304f0565727370616e0000001000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40008}, 0x0) 3m32.582567643s ago: executing program 2 (id=678): syz_open_dev$cec(0x0, 0x0, 0x210380) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01005c804beab361de3e030000004c0001800d0001007564703a73797a300000000038000400140001000a0000ca67000001000000000000000020000200"], 0x60}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) r7 = fcntl$dupfd(r6, 0x0, r6) read$rfkill(r7, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000000)=r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, 0x0, 0x0) bind$inet(r10, 0x0, 0x0) 3m31.360665734s ago: executing program 2 (id=680): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800020000000000000000000000000095000000000000002f06b046a0bb703cdc3b83c0ce848c6dfca1bcd8c1a3b1346d5877680e87a3f433ba09faf2386aeda5e0d74d2b6be4ade998908cfe4d67a380c0ecf32a4d811516dac3aa"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x1) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r1, r1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200000000000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}], 0x18}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x6, 0xffffffffffffffff}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2f4}) finit_module(r1, 0x0, 0x100000000000000) 3m29.40747314s ago: executing program 2 (id=683): fsopen(&(0x7f0000000140)='efs\x00', 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000004, 0x30}, &(0x7f0000000140)=0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = epoll_create(0x10000e9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x3ab3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r10, 0x0, [0x40000020, 0x8]}, {r9, 0x0, 0x0, [0xc1b, 0xfffffff9]}, 0x1, [0x1, 0x8]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 3m13.663645422s ago: executing program 32 (id=683): fsopen(&(0x7f0000000140)='efs\x00', 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000004, 0x30}, &(0x7f0000000140)=0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = epoll_create(0x10000e9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd74) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, 0x0, 0x0, 0x3ab3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000100), &(0x7f0000000180)}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r10, 0x0, [0x40000020, 0x8]}, {r9, 0x0, 0x0, [0xc1b, 0xfffffff9]}, 0x1, [0x1, 0x8]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2m36.625370441s ago: executing program 5 (id=778): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2m36.335790162s ago: executing program 5 (id=783): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x7}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r2, &(0x7f00000000c0)=""/45, 0x2d) getdents64(r2, 0x0, 0x300) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000440)={0x1, 0xff, 0x81, 0x0, 0x10000}) syz_emit_ethernet(0xc2, &(0x7f0000000480)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@generic={0xd, "fa28c27c12c06b6c653e9c2120c15e0e4b45a61ba0acc099473df6758490b6bd6d28c7da3197d5b5beef816a982dc5ac20af57c1e4c0cc99d5afe593e7df9fd9d4038f55f193a8bb3c558735a360554ba6efb9ab8bec86709618527d463152ac9b2db27495fe4ca97ca24ac74ad7de19891298f7056e28f35b2b7ce1fbb419da5c1e3df99ecb8a1bcbd3628e05f10e36e23b22519da79b2109f5c940c0538009d853ab91b6eb5e869229991763a62a006e5a57e9"}}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup3(r3, 0xffffffffffffffff, 0x80000) syz_open_dev$ptys(0xc, 0x3, 0x1) 2m29.980542225s ago: executing program 5 (id=792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2m29.758578192s ago: executing program 5 (id=793): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m22.717886635s ago: executing program 5 (id=809): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(r0, 0x0, 0x17) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe, 0x3}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x0, &(0x7f0000000140), &(0x7f0000000240)=[0x1], 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x20) socket$isdn(0x22, 0x2, 0x11) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000000100400500010006000000050005000200000005000400000000000900020073797a31000000000c00078008000840000000d81100030068"], 0x58}}, 0x0) 2m16.755062921s ago: executing program 5 (id=819): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m0.680608215s ago: executing program 33 (id=819): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x52) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x5d0, 0x20050000) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15.085983228s ago: executing program 6 (id=1084): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r3, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 13.592570121s ago: executing program 6 (id=1088): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000004000000030000000000"], 0x48) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9.193684778s ago: executing program 6 (id=1100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = open(0x0, 0x145142, 0x0) ftruncate(r6, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 8.269765726s ago: executing program 3 (id=1101): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r3, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 8.157940161s ago: executing program 4 (id=1102): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r3, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 7.696833011s ago: executing program 3 (id=1103): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0xfffffffffffffed8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5c}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) chdir(&(0x7f0000000100)='./file0\x00') 6.936810922s ago: executing program 6 (id=1105): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) syz_io_uring_setup(0x3cb5, &(0x7f00000001c0)={0x0, 0x4cef, 0x2000, 0x1, 0x2ea}, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) 6.659881829s ago: executing program 3 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000001c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xb0b90b5460a932b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) syz_io_uring_setup(0x143c, &(0x7f0000000440)={0x0, 0x4205, 0x4, 0x2, 0x40002c, 0x0, r4}, &(0x7f0000000000), 0x0) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close_range(r5, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 5.812539236s ago: executing program 0 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24040000) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) flock(0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 5.683497044s ago: executing program 1 (id=1108): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 5.59299821s ago: executing program 3 (id=1109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = open(0x0, 0x145142, 0x0) ftruncate(r6, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.551811951s ago: executing program 1 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x8085) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 4.080311264s ago: executing program 4 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) 4.070682208s ago: executing program 1 (id=1112): socket$nl_route(0x10, 0x3, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x100000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100"], 0x188}}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) 4.011820385s ago: executing program 3 (id=1113): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) syz_io_uring_setup(0x3cb5, &(0x7f00000001c0)={0x0, 0x4cef, 0x2000, 0x1, 0x2ea}, 0x0, &(0x7f0000000140)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x32) 3.999350612s ago: executing program 0 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 3.936629247s ago: executing program 4 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xb0b90b5460a932b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast1, 0x5}}, {{0xa, 0x3, 0x80, @loopback}}}, 0x108) syz_io_uring_setup(0x143c, &(0x7f0000000440)={0x0, 0x4205, 0x4, 0x2, 0x40002c, 0x0, r5}, &(0x7f0000000000), 0x0) getsockopt$inet6_buf(r7, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) close_range(r6, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 3.810094558s ago: executing program 1 (id=1116): mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000000000a960, 0x0, 0x201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xdf}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, 0x0, 0xfffffffffffffed8, 0x8000000000000002, 0x0, 0x0, 0x0, 0x5c}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) chdir(&(0x7f0000000100)='./file0\x00') 3.694236748s ago: executing program 0 (id=1117): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 2.637420125s ago: executing program 4 (id=1118): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r2 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 2.636909511s ago: executing program 1 (id=1119): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) times(&(0x7f0000000100)) r2 = syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0xa395, 0x8, 0x1, 0x1b4}, &(0x7f0000000340)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xf87, 0x10}, &(0x7f0000000180)=0xc) 2.529195388s ago: executing program 6 (id=1120): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000180)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350006000000fbab694ccf9d2b930368bae0c190"], 0x30}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 2.154049032s ago: executing program 0 (id=1121): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x306, @random="40407e20b0dd"}, 0xa8, {0x2, 0x4e20, @private=0xa010102}, 'bridge_slave_1\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.042412435s ago: executing program 0 (id=1122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x8085) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 977.232619ms ago: executing program 4 (id=1123): socket$netlink(0x10, 0x3, 0x4) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r2, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 919.014999ms ago: executing program 6 (id=1124): socket$netlink(0x10, 0x3, 0x4) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r2, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 899.466831ms ago: executing program 1 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x24040000) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) flock(0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 418.104462ms ago: executing program 0 (id=1126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = open(0x0, 0x145142, 0x0) ftruncate(r7, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 74.591184ms ago: executing program 4 (id=1127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = open(0x0, 0x145142, 0x0) ftruncate(r7, 0x2007ffc) syz_init_net_socket$ax25(0x3, 0x2, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 0s ago: executing program 3 (id=1128): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x5, 0x0) socket(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0xb, 0x103205) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x8}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r2, &(0x7f0000000300)=""/86, 0x56, 0x4000000000000f3) read$usbmon(r2, &(0x7f0000000480)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r4 = dup(r3) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x2, 0x8800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) kernel console output (not intermixed with test programs): eate } for pid=6915 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 154.417798][ T30] audit: type=1400 audit(1743911838.799:308): avc: denied { connect } for pid=6915 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.074684][ T30] audit: type=1400 audit(1743911841.449:309): avc: denied { read } for pid=6933 comm="syz.2.243" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.569374][ T6951] ubi: mtd0 is already attached to ubi31 [ 158.281839][ T30] audit: type=1400 audit(1743911842.639:310): avc: denied { connect } for pid=6952 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.035189][ T6967] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 159.045411][ T6967] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 160.015162][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 160.029626][ T30] audit: type=1400 audit(1743911844.449:311): avc: denied { write } for pid=6972 comm="syz.4.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.072990][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.252'. [ 160.109305][ T30] audit: type=1400 audit(1743911844.519:312): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.335794][ T30] audit: type=1400 audit(1743911844.519:313): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 160.359746][ T30] audit: type=1400 audit(1743911844.519:314): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 163.903277][ T7008] vlan2: entered promiscuous mode [ 163.914284][ T7008] vlan2: entered allmulticast mode [ 163.919548][ T7008] hsr_slave_1: entered allmulticast mode [ 164.008464][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 164.896520][ T7019] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 164.905515][ T7019] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 166.123475][ T7031] macsec0: entered promiscuous mode [ 166.129354][ T7031] macsec0: entered allmulticast mode [ 166.134818][ T7031] veth1_macvtap: entered allmulticast mode [ 166.613350][ T7034] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 166.622340][ T7034] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 168.917578][ T30] audit: type=1400 audit(1743911853.069:315): avc: denied { read } for pid=7042 comm="syz.0.270" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.941339][ T30] audit: type=1400 audit(1743911853.069:316): avc: denied { open } for pid=7042 comm="syz.0.270" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.965168][ T30] audit: type=1400 audit(1743911853.079:317): avc: denied { append } for pid=7042 comm="syz.0.270" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.006995][ T30] audit: type=1400 audit(1743911853.439:318): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.809555][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.978408][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.051746][ T5904] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 170.065123][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.073691][ T5904] usb 2-1: Product: syz [ 170.077940][ T5904] usb 2-1: Manufacturer: syz [ 170.085201][ T5904] usb 2-1: SerialNumber: syz [ 170.162818][ T5904] usb 2-1: config 0 descriptor?? [ 170.180341][ T5904] s2255 2-1:0.0: Could not find bulk-in endpoint [ 170.191992][ T5904] Sensoray 2255 driver load failed: 0xfffffff4 [ 170.198288][ T5904] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 170.611666][ T7057] netlink: 'syz.1.274': attribute type 21 has an invalid length. [ 170.691203][ T7057] netlink: 'syz.1.274': attribute type 20 has an invalid length. [ 170.814243][ T5873] usb 2-1: USB disconnect, device number 6 [ 171.212999][ T7075] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 171.224225][ T7075] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 172.362455][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.558284][ T5873] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 172.598462][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.627493][ T5873] usb 5-1: config 0 descriptor?? [ 175.175835][ T30] audit: type=1400 audit(1743911859.419:319): avc: denied { unlink } for pid=7110 comm="syz.1.286" name="#1" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 175.238849][ T30] audit: type=1400 audit(1743911859.429:320): avc: denied { mount } for pid=7110 comm="syz.1.286" name="/" dev="overlay" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 175.573526][ T30] audit: type=1400 audit(1743911860.009:321): avc: denied { setopt } for pid=7113 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 176.376109][ T5873] pegasus 5-1:0.0: setup Pegasus II specific registers [ 177.127547][ T5873] pegasus 5-1:0.0: can't locate MII phy, using default [ 178.114967][ T30] audit: type=1400 audit(1743911862.219:322): avc: denied { execute } for pid=7135 comm="syz.3.292" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 178.200681][ T5873] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a2:e4:f7:7f:34:75 [ 178.241413][ T5873] usb 5-1: USB disconnect, device number 5 [ 178.311975][ T30] audit: type=1400 audit(1743911862.599:323): avc: denied { bind } for pid=7130 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.917395][ T30] audit: type=1400 audit(1743911862.599:324): avc: denied { name_bind } for pid=7130 comm="syz.1.291" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 178.956732][ T30] audit: type=1400 audit(1743911862.599:325): avc: denied { node_bind } for pid=7130 comm="syz.1.291" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 180.016464][ T30] audit: type=1400 audit(1743911862.599:326): avc: denied { listen } for pid=7130 comm="syz.1.291" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 180.150945][ T30] audit: type=1400 audit(1743911862.609:327): avc: denied { accept } for pid=7130 comm="syz.1.291" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 180.209809][ T30] audit: type=1400 audit(1743911862.609:328): avc: denied { write } for pid=7130 comm="syz.1.291" laddr=::1 lport=20000 faddr=::1 fport=44442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 180.232837][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.310406][ T7162] No control pipe specified [ 180.367919][ T30] audit: type=1400 audit(1743911864.779:329): avc: denied { create } for pid=7158 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 180.383178][ T7162] block device autoloading is deprecated and will be removed. [ 182.933051][ T30] audit: type=1400 audit(1743911867.369:330): avc: denied { map } for pid=7187 comm="syz.2.306" path="socket:[12441]" dev="sockfs" ino=12441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 183.048427][ T30] audit: type=1400 audit(1743911867.399:331): avc: denied { accept } for pid=7187 comm="syz.2.306" path="socket:[12441]" dev="sockfs" ino=12441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 184.086510][ T30] audit: type=1400 audit(1743911868.519:332): avc: denied { read write } for pid=7199 comm="syz.3.311" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.081103][ T30] audit: type=1400 audit(1743911868.519:333): avc: denied { open } for pid=7199 comm="syz.3.311" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.105710][ T30] audit: type=1400 audit(1743911869.189:334): avc: denied { create } for pid=7199 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 186.049691][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 186.057180][ T7210] capability: warning: `syz.2.310' uses deprecated v2 capabilities in a way that may be insecure [ 186.069194][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 186.076122][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 186.081139][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 186.353689][ T30] audit: type=1400 audit(1743911870.779:335): avc: denied { module_load } for pid=7212 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 189.465087][ T30] audit: type=1400 audit(1743911873.549:336): avc: denied { create } for pid=7237 comm="syz.3.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 189.773528][ T30] audit: type=1400 audit(1743911873.569:337): avc: denied { execmem } for pid=7231 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 190.297685][ T30] audit: type=1400 audit(1743911873.719:338): avc: denied { create } for pid=7228 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.320378][ T30] audit: type=1400 audit(1743911873.719:339): avc: denied { setopt } for pid=7228 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.487161][ T30] audit: type=1400 audit(1743911874.129:340): avc: denied { map_create } for pid=7231 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.967320][ T30] audit: type=1400 audit(1743911874.129:341): avc: denied { map_read map_write } for pid=7231 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.986976][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.996378][ T30] audit: type=1400 audit(1743911874.129:342): avc: denied { perfmon } for pid=7231 comm="syz.4.316" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.324776][ T30] audit: type=1400 audit(1743911874.129:343): avc: denied { prog_load } for pid=7231 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.389922][ T30] audit: type=1400 audit(1743911874.129:344): avc: denied { bpf } for pid=7231 comm="syz.4.316" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.417833][ T30] audit: type=1400 audit(1743911874.129:345): avc: denied { prog_run } for pid=7231 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 191.527549][ T30] audit: type=1400 audit(1743911874.359:346): avc: denied { read } for pid=5178 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 191.527588][ T30] audit: type=1400 audit(1743911874.359:347): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.527617][ T30] audit: type=1400 audit(1743911874.359:348): avc: denied { append } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.527651][ T30] audit: type=1400 audit(1743911874.359:349): avc: denied { open } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.527683][ T30] audit: type=1400 audit(1743911874.359:350): avc: denied { getattr } for pid=5178 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 191.527715][ T30] audit: type=1400 audit(1743911874.379:351): avc: denied { read write } for pid=5821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.527746][ T30] audit: type=1400 audit(1743911874.379:352): avc: denied { open } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.527778][ T30] audit: type=1400 audit(1743911874.379:353): avc: denied { ioctl } for pid=5821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.894160][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.900594][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.991491][ T7292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 195.613949][ T7292] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 196.632583][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 196.632597][ T30] audit: type=1400 audit(1743911881.069:391): avc: denied { create } for pid=7290 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.765109][ T30] audit: type=1400 audit(1743911881.109:392): avc: denied { connect } for pid=7290 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.788007][ T30] audit: type=1400 audit(1743911881.219:393): avc: denied { write } for pid=7290 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.812101][ T30] audit: type=1400 audit(1743911881.249:394): avc: denied { read } for pid=7290 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 197.788129][ T30] audit: type=1400 audit(1743911881.329:395): avc: denied { bind } for pid=7312 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.052216][ T30] audit: type=1400 audit(1743911882.459:396): avc: denied { write } for pid=7316 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.493441][ T30] audit: type=1400 audit(1743911882.459:397): avc: denied { connect } for pid=7316 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.514917][ T30] audit: type=1400 audit(1743911882.459:398): avc: denied { name_connect } for pid=7316 comm="syz.3.339" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 198.562661][ T30] audit: type=1400 audit(1743911882.589:399): avc: denied { create } for pid=7321 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 199.483722][ T30] audit: type=1400 audit(1743911883.769:400): avc: denied { create } for pid=7328 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.933068][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 201.933083][ T30] audit: type=1400 audit(1743911886.369:406): avc: denied { mounton } for pid=7357 comm="syz.1.350" path="/67/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.446172][ T30] audit: type=1400 audit(1743911886.399:407): avc: denied { mount } for pid=7357 comm="syz.1.350" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.468722][ T30] audit: type=1400 audit(1743911886.479:408): avc: denied { write } for pid=7355 comm="syz.3.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 203.109368][ T30] audit: type=1400 audit(1743911887.429:409): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.177362][ T30] audit: type=1400 audit(1743911887.599:410): avc: denied { create } for pid=7370 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.206553][ T5825] Bluetooth: hci4: link tx timeout [ 203.213316][ T5825] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.227186][ T5836] Bluetooth: hci4: link tx timeout [ 203.235901][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.244883][ T5836] Bluetooth: hci4: link tx timeout [ 203.250325][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.252194][ T30] audit: type=1400 audit(1743911887.599:411): avc: denied { setopt } for pid=7370 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.279637][ T5836] Bluetooth: hci4: link tx timeout [ 203.284805][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.293522][ T5836] Bluetooth: hci4: link tx timeout [ 203.298685][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.306924][ T30] audit: type=1400 audit(1743911887.639:412): avc: denied { connect } for pid=7370 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.327884][ T30] audit: type=1400 audit(1743911887.639:413): avc: denied { setopt } for pid=7370 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.348496][ T30] audit: type=1400 audit(1743911887.639:414): avc: denied { write } for pid=7370 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.368314][ T30] audit: type=1400 audit(1743911887.729:415): avc: denied { read write } for pid=7372 comm="syz.1.353" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.240277][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 205.898088][ T7406] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.119335][ T5832] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.679024][ T5832] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 207.816118][ T5832] usb 2-1: config 0 has no interface number 0 [ 207.832796][ T5832] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 208.104115][ T5832] usb 2-1: config 0 interface 11 has no altsetting 0 [ 208.111682][ T5832] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 208.123024][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.147081][ T5832] usb 2-1: config 0 descriptor?? [ 208.167990][ T7415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.178752][ T5832] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 208.314845][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 208.314873][ T30] audit: type=1400 audit(1743911892.679:429): avc: denied { sqpoll } for pid=7426 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.635200][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 208.650093][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 208.657919][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 208.704073][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 208.779562][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 208.797657][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 209.343991][ T7439] vlan2: entered promiscuous mode [ 209.349195][ T7439] veth0_virt_wifi: entered promiscuous mode [ 209.357852][ T7439] vlan2: entered allmulticast mode [ 209.363153][ T7439] veth0_virt_wifi: entered allmulticast mode [ 209.531163][ T30] audit: type=1400 audit(1743911893.709:430): avc: denied { ioctl } for pid=7429 comm="syz.4.370" path="socket:[13484]" dev="sockfs" ino=13484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.673466][ T7443] tipc: Started in network mode [ 209.678499][ T7443] tipc: Node identity ac14140f, cluster identity 4711 [ 209.685969][ T7443] tipc: New replicast peer: 255.255.255.255 [ 209.693095][ T7443] tipc: Enabled bearer , priority 10 [ 209.917384][ T30] audit: type=1400 audit(1743911894.299:431): avc: denied { write } for pid=7437 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.053008][ T5832] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 210.064327][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 210.079690][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 210.088535][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 210.099073][ T30] audit: type=1400 audit(1743911894.309:432): avc: denied { create } for pid=7437 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 210.119972][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 210.155855][ T5825] block nbd4: Receive control failed (result -107) [ 210.157725][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 210.187772][ T5832] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 210.212777][ T5832] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 210.244929][ T30] audit: type=1400 audit(1743911894.609:433): avc: denied { setopt } for pid=7450 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.265632][ T7446] nbd4: detected capacity change from 0 to 12 [ 210.289866][ T5832] usb 2-1: USB disconnect, device number 7 [ 210.316513][ T7453] block nbd4: Dead connection, failed to find a fallback [ 210.324306][ T7453] block nbd4: shutting down sockets [ 210.330369][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.339816][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 210.349819][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.351721][ T5832] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 210.358952][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 210.371231][ T30] audit: type=1400 audit(1743911894.749:434): avc: denied { mounton } for pid=7445 comm="syz.4.373" path="/75/file1" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 210.804598][ T5832] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 210.814152][ T6747] tipc: Node number set to 2886997007 [ 210.821131][ T5832] keyspan 2-1:0.11: device disconnected [ 210.827294][ T30] audit: type=1400 audit(1743911894.859:435): avc: denied { bind } for pid=7450 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.847782][ T30] audit: type=1400 audit(1743911894.859:436): avc: denied { node_bind } for pid=7450 comm="syz.2.375" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 210.874169][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.963505][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.019555][ T30] audit: type=1400 audit(1743911894.869:437): avc: denied { connect } for pid=7450 comm="syz.2.375" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.059565][ T30] audit: type=1400 audit(1743911894.869:438): avc: denied { write } for pid=7450 comm="syz.2.375" laddr=224.0.0.1 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.147832][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.164652][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.173180][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.726570][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.809853][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.819012][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.837225][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.850852][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.858879][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.869145][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.877268][ T7453] ldm_validate_partition_table(): Disk read failed. [ 211.884597][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.894137][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.902494][ T7453] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.911892][ T7453] Buffer I/O error on dev nbd4, logical block 0, async page read [ 211.932771][ T7453] Dev nbd4: unable to read RDB block 0 [ 211.938644][ T7453] nbd4: unable to read partition table [ 211.992147][ T7453] nbd4: partition table beyond EOD, truncated [ 212.010414][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 212.028742][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=5, location=5 [ 212.063616][ T5835] ldm_validate_partition_table(): Disk read failed. [ 212.092318][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4 [ 212.290821][ T5835] Dev nbd4: unable to read RDB block 0 [ 212.291050][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3 [ 212.297259][ T5835] nbd4: unable to read partition table [ 212.328832][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 212.368985][ T5835] nbd4: partition table beyond EOD, truncated [ 212.390292][ T5835] ldm_validate_partition_table(): Disk read failed. [ 212.420611][ T5835] Dev nbd4: unable to read RDB block 0 [ 212.426655][ T5835] nbd4: unable to read partition table [ 212.443557][ T5835] nbd4: partition table beyond EOD, truncated [ 212.460185][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 212.499139][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2 [ 212.537718][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 212.569660][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 212.604550][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 212.700590][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 212.729879][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 212.739101][ T7453] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 212.779658][ T7453] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 214.634299][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 214.634314][ T30] audit: type=1400 audit(1743911899.069:448): avc: denied { unlink } for pid=7468 comm="syz.2.379" name="#3" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.074800][ T30] audit: type=1400 audit(1743911899.069:449): avc: denied { mount } for pid=7468 comm="syz.2.379" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.284647][ T30] audit: type=1800 audit(1743911899.079:450): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.379" name="file0" dev="overlay" ino=348 res=0 errno=0 [ 215.471195][ T30] audit: type=1400 audit(1743911899.109:451): avc: denied { append } for pid=7485 comm="syz.3.383" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 215.633893][ T30] audit: type=1400 audit(1743911899.109:452): avc: denied { create } for pid=7485 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.819902][ T30] audit: type=1400 audit(1743911899.109:453): avc: denied { read write } for pid=7485 comm="syz.3.383" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 215.893436][ T30] audit: type=1400 audit(1743911899.109:454): avc: denied { open } for pid=7485 comm="syz.3.383" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 215.916462][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.924823][ T30] audit: type=1400 audit(1743911899.239:455): avc: denied { name_bind } for pid=7484 comm="syz.1.384" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 215.945964][ T30] audit: type=1400 audit(1743911899.239:456): avc: denied { setopt } for pid=7484 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.965142][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.972513][ T30] audit: type=1400 audit(1743911900.379:457): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 216.076954][ T5825] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 216.461922][ T7507] sp0: Synchronizing with TNC [ 216.540625][ T7511] ubi: mtd0 is already attached to ubi31 [ 216.572690][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.122102][ T5825] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 220.221251][ T5825] Bluetooth: hci0: Injecting HCI hardware error event [ 220.229635][ T5825] Bluetooth: hci0: hardware error 0x00 [ 221.615188][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 221.615200][ T30] audit: type=1400 audit(1743911906.049:478): avc: denied { watch watch_reads } for pid=7552 comm="syz.1.402" path="/77" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.359495][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 222.572839][ T7565] sp0: Synchronizing with TNC [ 222.952582][ T7566] ubi: mtd0 is already attached to ubi31 [ 222.994408][ T30] audit: type=1400 audit(1743911907.419:479): avc: denied { create } for pid=7570 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 223.284097][ T30] audit: type=1400 audit(1743911907.429:480): avc: denied { setopt } for pid=7570 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.641467][ T30] audit: type=1400 audit(1743911907.509:481): avc: denied { write } for pid=7570 comm="syz.2.406" path="socket:[13740]" dev="sockfs" ino=13740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 224.955434][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 224.964514][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 224.973528][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 224.982593][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 224.991612][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.000615][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.009506][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.018464][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.027479][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.036451][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 225.478580][ T30] audit: type=1400 audit(1743911909.909:482): avc: denied { mount } for pid=7593 comm="syz.4.412" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 226.455274][ T30] audit: type=1400 audit(1743911910.139:483): avc: denied { bind } for pid=7597 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 226.624758][ T30] audit: type=1400 audit(1743911910.139:484): avc: denied { name_bind } for pid=7597 comm="syz.0.413" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 226.701526][ T30] audit: type=1400 audit(1743911910.139:485): avc: denied { node_bind } for pid=7597 comm="syz.0.413" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 226.994220][ T30] audit: type=1400 audit(1743911910.149:486): avc: denied { listen } for pid=7597 comm="syz.0.413" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.015029][ T30] audit: type=1400 audit(1743911910.149:487): avc: denied { connect } for pid=7597 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.069471][ T30] audit: type=1400 audit(1743911910.149:488): avc: denied { name_connect } for pid=7597 comm="syz.0.413" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 227.139621][ T30] audit: type=1400 audit(1743911910.349:489): avc: denied { write } for pid=7597 comm="syz.0.413" laddr=172.20.20.170 lport=38842 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 227.251169][ T30] audit: type=1400 audit(1743911910.979:490): avc: denied { unmount } for pid=7593 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 227.273946][ T30] audit: type=1400 audit(1743911911.039:491): avc: denied { execute } for pid=7600 comm="syz.3.414" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 227.303937][ T30] audit: type=1400 audit(1743911911.629:492): avc: denied { bind } for pid=7600 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.682627][ T30] audit: type=1400 audit(1743911912.119:493): avc: denied { audit_read } for pid=7617 comm="syz.3.417" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.499597][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 230.343386][ T7627] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 230.354089][ T7627] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 230.452391][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 230.467249][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.495076][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.623930][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.047897][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.063599][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.073065][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.700502][ T9] usb 1-1: usb_control_msg returned -71 [ 231.745527][ T9] usbtmc 1-1:16.0: can't read capabilities [ 231.775019][ T9] usb 1-1: USB disconnect, device number 2 [ 232.436391][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 232.436406][ T30] audit: type=1400 audit(1743911916.869:497): avc: denied { accept } for pid=7650 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 232.827328][ T7651] nfs: Bad value for 'source' [ 233.303203][ T7663] : renamed from bond_slave_0 (while UP) [ 234.159585][ T30] audit: type=1400 audit(1743911916.879:498): avc: denied { execute } for pid=7650 comm="syz.0.424" name="file1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.225447][ T30] audit: type=1400 audit(1743911916.879:499): avc: denied { execute_no_trans } for pid=7650 comm="syz.0.424" path="/94/file1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.684562][ T30] audit: type=1400 audit(1743911917.339:500): avc: denied { write } for pid=7650 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 234.713300][ T7672] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 234.838182][ T30] audit: type=1400 audit(1743911919.229:501): avc: denied { mounton } for pid=7669 comm="syz.2.428" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 235.254008][ T30] audit: type=1400 audit(1743911919.689:502): avc: denied { create } for pid=7675 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 236.370751][ T30] audit: type=1400 audit(1743911920.509:503): avc: denied { create } for pid=7680 comm="syz.0.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 236.395636][ T30] audit: type=1400 audit(1743911920.529:504): avc: denied { mount } for pid=7680 comm="syz.0.432" name="/" dev="ramfs" ino=13191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.604083][ T7691] syzkaller1: entered promiscuous mode [ 236.612460][ T7691] syzkaller1: entered allmulticast mode [ 236.644785][ T30] audit: type=1400 audit(1743911921.079:505): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 237.472451][ T30] audit: type=1400 audit(1743911921.789:506): avc: denied { bind } for pid=7692 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.614519][ T30] audit: type=1400 audit(1743911921.799:507): avc: denied { name_bind } for pid=7692 comm="syz.4.436" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 237.650789][ T30] audit: type=1400 audit(1743911921.799:508): avc: denied { node_bind } for pid=7692 comm="syz.4.436" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 240.430418][ T30] audit: type=1400 audit(1743911924.859:509): avc: denied { create } for pid=7709 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.463183][ T30] audit: type=1400 audit(1743911924.859:510): avc: denied { connect } for pid=7709 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.485651][ T30] audit: type=1400 audit(1743911924.869:511): avc: denied { listen } for pid=7709 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 243.695389][ T30] audit: type=1326 audit(1743911928.129:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7725 comm="syz.2.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c3398d169 code=0x0 [ 243.722248][ T30] audit: type=1400 audit(1743911928.159:513): avc: denied { bind } for pid=7735 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 243.944160][ T30] audit: type=1400 audit(1743911928.379:514): avc: denied { ioctl } for pid=7752 comm="syz.1.452" path="socket:[13299]" dev="sockfs" ino=13299 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 244.485298][ T30] audit: type=1400 audit(1743911928.919:515): avc: denied { write } for pid=7753 comm="syz.3.451" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.020423][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 246.800118][ T7777] 9pnet_fd: Insufficient options for proto=fd [ 247.397111][ T30] audit: type=1400 audit(1743911931.799:516): avc: denied { create } for pid=7781 comm="syz.3.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 248.245994][ T7795] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 248.271307][ T7795] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 250.087188][ T7812] siw: device registration error -23 [ 251.082723][ T7823] __nla_validate_parse: 43 callbacks suppressed [ 251.089070][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 252.769669][ T30] audit: type=1400 audit(1743911937.079:517): avc: denied { map } for pid=7821 comm="syz.4.468" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 252.926339][ T30] audit: type=1400 audit(1743911937.079:518): avc: denied { execute } for pid=7821 comm="syz.4.468" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 253.412784][ T7841] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 253.421753][ T7841] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 254.019230][ T30] audit: type=1400 audit(1743911937.809:519): avc: denied { cmd } for pid=7835 comm="syz.0.471" path="socket:[14519]" dev="sockfs" ino=14519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 254.805117][ T30] audit: type=1400 audit(1743911939.239:520): avc: denied { create } for pid=7847 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.398127][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.410353][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.627549][ T30] audit: type=1400 audit(1743911941.059:521): avc: denied { connect } for pid=7864 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.651434][ T7870] input: syz0 as /devices/virtual/input/input9 [ 256.693956][ T30] audit: type=1400 audit(1743911941.099:522): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2786 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.756086][ T30] audit: type=1400 audit(1743911941.099:523): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2786 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.820547][ T30] audit: type=1400 audit(1743911941.099:524): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2786 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.949167][ T30] audit: type=1400 audit(1743911941.179:525): avc: denied { setopt } for pid=7872 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.968483][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.487876][ T30] audit: type=1400 audit(1743911942.519:526): avc: denied { create } for pid=7883 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 258.682669][ T5826] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 258.688999][ T5826] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 258.709777][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 258.749559][ T3078] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 258.790487][ T7893] ======================================================= [ 258.790487][ T7893] WARNING: The mand mount option has been deprecated and [ 258.790487][ T7893] and is ignored by this kernel. Remove the mand [ 258.790487][ T7893] option from the mount to silence this warning. [ 258.790487][ T7893] ======================================================= [ 258.826454][ T7893] new mount options do not match the existing superblock, will be ignored [ 258.875308][ T7893] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 258.909233][ T30] audit: type=1400 audit(1743911943.299:527): avc: denied { remount } for pid=7889 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 259.249445][ T3078] usb 4-1: Using ep0 maxpacket: 32 [ 259.724065][ T3078] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 259.732760][ T3078] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 259.741408][ T3078] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 259.753072][ T3078] usb 4-1: config 1 has no interface number 0 [ 259.772324][ T3078] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.811559][ T3078] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 260.008511][ T3078] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 260.017714][ T3078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.463086][ T3078] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 260.902440][ T30] audit: type=1400 audit(1743911944.959:528): avc: denied { relabelfrom } for pid=7904 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 260.932787][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 261.469489][ T30] audit: type=1400 audit(1743911944.959:529): avc: denied { relabelto } for pid=7904 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 261.491747][ T5826] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 261.497893][ T5826] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 261.600614][ T3078] snd_usb_pod 4-1:1.1: set_interface failed [ 261.606815][ T3078] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 261.624768][ T3078] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 261.684227][ T3078] usb 4-1: USB disconnect, device number 2 [ 262.406588][ T30] audit: type=1400 audit(1743911946.749:530): avc: denied { ioctl } for pid=7921 comm="syz.2.493" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.709650][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 264.045371][ T5826] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 264.045413][ T5826] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 264.119152][ T7930] tty tty23: ldisc open failed (-12), clearing slot 22 [ 264.416217][ T30] audit: type=1400 audit(1743911948.849:531): avc: denied { listen } for pid=7941 comm="syz.0.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.513182][ T7945] Invalid source name [ 266.119622][ T5826] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 266.121123][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 266.248083][ T5826] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 266.912949][ T30] audit: type=1400 audit(1743911951.349:532): avc: denied { shutdown } for pid=7956 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.957417][ T30] audit: type=1400 audit(1743911951.869:533): avc: denied { create } for pid=7969 comm="syz.2.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 268.386525][ T30] audit: type=1400 audit(1743911952.809:534): avc: denied { name_bind } for pid=7979 comm="syz.4.507" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 268.505891][ T7987] syz_tun: entered allmulticast mode [ 269.009564][ T5826] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 269.139553][ T5826] usb 5-1: device descriptor read/64, error -71 [ 270.049528][ T5826] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 270.189496][ T5826] usb 5-1: device descriptor read/64, error -71 [ 270.312314][ T7996] input: syz0 as /devices/virtual/input/input10 [ 270.320681][ T5826] usb usb5-port1: attempt power cycle [ 270.599708][ T8001] syz.2.511: attempt to access beyond end of device [ 270.599708][ T8001] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 270.613050][ T8001] SQUASHFS error: Failed to read block 0x0: -5 [ 270.619523][ T8001] unable to read squashfs_super_block [ 270.961539][ T30] audit: type=1400 audit(1743911955.019:535): avc: denied { view } for pid=7998 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 271.019586][ T5826] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.158534][ T5826] usb 5-1: device descriptor read/8, error -71 [ 271.514943][ T30] audit: type=1400 audit(1743911955.929:536): avc: denied { read } for pid=8002 comm="syz.0.512" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.786069][ T30] audit: type=1400 audit(1743911955.939:537): avc: denied { open } for pid=8002 comm="syz.0.512" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 271.999676][ T30] audit: type=1400 audit(1743911955.939:538): avc: denied { ioctl } for pid=8002 comm="syz.0.512" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 272.170276][ T30] audit: type=1400 audit(1743911956.519:539): avc: denied { open } for pid=8005 comm="syz.4.513" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 273.254790][ T30] audit: type=1326 audit(1743911957.589:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.4.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8460d8d169 code=0x0 [ 274.807716][ T30] audit: type=1400 audit(1743911958.819:541): avc: denied { watch } for pid=8036 comm="syz.4.519" path="/110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 274.975932][ T8042] input: syz1 as /devices/virtual/input/input11 [ 275.220358][ T30] audit: type=1400 audit(1743911958.819:542): avc: denied { watch_sb watch_reads } for pid=8036 comm="syz.4.519" path="/110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 277.273073][ T6836] Bluetooth: hci5: Frame reassembly failed (-84) [ 278.352295][ T30] audit: type=1400 audit(1743911962.519:543): avc: denied { write } for pid=8068 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.994886][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 280.039525][ T30] audit: type=1400 audit(1743911963.559:544): avc: denied { override_creds } for pid=8079 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 280.039574][ T30] audit: type=1400 audit(1743911963.849:545): avc: denied { read } for pid=8079 comm="iou-wrk-8085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 280.559472][ T30] audit: type=1326 audit(1743911964.929:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.3.531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafdd58d169 code=0x0 [ 281.285360][ T8097] ubi: mtd0 is already attached to ubi31 [ 281.569095][ T30] audit: type=1400 audit(1743911965.999:547): avc: denied { create } for pid=8099 comm="syz.4.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 281.853692][ T30] audit: type=1400 audit(1743911966.279:548): avc: denied { setopt } for pid=8106 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.873706][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.079642][ T3078] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 282.413887][ T3078] usb 5-1: config 0 has no interfaces? [ 282.434749][ T3078] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.447613][ T3078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.459518][ T3078] usb 5-1: Product: syz [ 282.463727][ T3078] usb 5-1: Manufacturer: syz [ 282.479158][ T3078] usb 5-1: SerialNumber: syz [ 282.494244][ T3078] usb 5-1: config 0 descriptor?? [ 284.058903][ T8131] sp0: Synchronizing with TNC [ 284.074133][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 285.169432][ T9] usb 5-1: USB disconnect, device number 10 [ 285.775121][ T8148] usb usb1: usbfs: process 8148 (syz.4.544) did not claim interface 0 before use [ 286.426148][ T30] audit: type=1400 audit(1743911970.179:549): avc: denied { append } for pid=8144 comm="syz.4.544" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 287.454663][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 287.469624][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 288.034042][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 288.067435][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.547'. [ 288.227756][ T30] audit: type=1400 audit(1743911972.619:550): avc: denied { accept } for pid=8162 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 288.512038][ T30] audit: type=1400 audit(1743911972.629:551): avc: denied { bind } for pid=8162 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.816433][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.550'. [ 289.220713][ T30] audit: type=1400 audit(1743911973.289:552): avc: denied { accept } for pid=8168 comm="syz.3.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 290.078477][ T8183] sp0: Synchronizing with TNC [ 293.736523][ T30] audit: type=1400 audit(1743911978.109:553): avc: denied { remount } for pid=8195 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 295.022941][ T5987] udevd[5987]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 296.598828][ T8229] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551550) [ 296.609309][ T8229] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 298.080411][ T8236] ubi: mtd0 is already attached to ubi31 [ 298.512402][ T30] audit: type=1400 audit(1743911982.379:554): avc: denied { write } for pid=8225 comm="syz.1.565" name="ip6_tables_matches" dev="proc" ino=4026533328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 299.185933][ T8247] syzkaller0: entered promiscuous mode [ 299.347403][ T8247] syzkaller0: entered allmulticast mode [ 300.769821][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 301.066992][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 301.102246][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 301.220808][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 301.228546][ T5917] usb 1-1: can't read configurations, error -61 [ 301.580702][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 301.751484][ T30] audit: type=1400 audit(1743911986.189:555): avc: denied { bind } for pid=8267 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.190519][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 302.237992][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.250906][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 302.264821][ T5917] usb 1-1: can't read configurations, error -61 [ 302.271424][ T5917] usb usb1-port1: attempt power cycle [ 302.715940][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 302.740034][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 302.746888][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.756933][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 302.766615][ T5917] usb 1-1: can't read configurations, error -61 [ 302.969720][ T5917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 303.399182][ T8287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.173662][ T5917] usb 1-1: device descriptor read/8, error -71 [ 304.509840][ T5917] usb usb1-port1: unable to enumerate USB device [ 304.584884][ T30] audit: type=1400 audit(1743911988.909:556): avc: denied { block_suspend } for pid=8292 comm="syz.0.583" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 304.631469][ T5873] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 304.867253][ T30] audit: type=1400 audit(1743911989.299:557): avc: denied { getopt } for pid=8290 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.940953][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 304.953422][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.965168][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.978740][ T5873] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 304.987988][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.998285][ T5873] usb 5-1: config 0 descriptor?? [ 305.681833][ T5873] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0002/input/input12 [ 305.764698][ T5873] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 305.983986][ T24] usb 5-1: USB disconnect, device number 11 [ 306.238855][ T8318] ubi: mtd0 is already attached to ubi31 [ 306.840545][ T8314] Falling back ldisc for ptm0. [ 306.867170][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'. [ 309.847844][ T30] audit: type=1400 audit(1743911994.279:558): avc: denied { create } for pid=8343 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 313.934201][ T8376] sp0: Synchronizing with TNC [ 313.991449][ T8377] ubi: mtd0 is already attached to ubi31 [ 314.361258][ T8387] sp0: Synchronizing with TNC [ 314.488353][ T8392] syzkaller1: entered promiscuous mode [ 314.493956][ T8392] syzkaller1: entered allmulticast mode [ 314.524320][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 314.540870][ T8393] ubi: mtd0 is already attached to ubi31 [ 314.760954][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.769515][ T5873] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 314.779581][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.789555][ T5917] usb 1-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 314.800214][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.827864][ T5917] usb 1-1: config 0 descriptor?? [ 315.189635][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.200166][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.212136][ T5873] usb 5-1: config 0 has no interfaces? [ 315.642347][ T5917] ntrig 0003:1B96:000E.0003: unknown main item tag 0x0 [ 315.650869][ T8397] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 315.659775][ T8397] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 315.676782][ T5873] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 315.690098][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.698275][ T5873] usb 5-1: Product: syz [ 315.701275][ T5917] ntrig 0003:1B96:000E.0003: unknown main item tag 0x0 [ 315.702582][ T5873] usb 5-1: Manufacturer: syz [ 315.714490][ T5873] usb 5-1: SerialNumber: syz [ 315.733852][ T5873] usb 5-1: config 0 descriptor?? [ 315.747909][ T5917] ntrig 0003:1B96:000E.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000e] on usb-dummy_hcd.0-1/input0 [ 315.777216][ T5917] usb 1-1: USB disconnect, device number 7 [ 316.005195][ T8402] tmpfs: Unknown parameter 'huge½alway' [ 316.320181][ T30] audit: type=1400 audit(1743912000.649:559): avc: denied { ioctl } for pid=8400 comm="syz.3.606" path="socket:[17486]" dev="sockfs" ino=17486 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.419069][ T30] audit: type=1400 audit(1743912000.799:560): avc: denied { getopt } for pid=8404 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.556332][ T30] audit: type=1400 audit(1743912000.969:561): avc: denied { mounton } for pid=8386 comm="syz.4.603" path="/123/file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 316.579226][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.855111][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.861518][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.855282][ T30] audit: type=1400 audit(1743912002.289:562): avc: denied { map } for pid=8422 comm="syz.1.610" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 317.949086][ T5917] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 318.010468][ T30] audit: type=1400 audit(1743912002.369:563): avc: denied { ioctl } for pid=8422 comm="syz.1.610" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17525 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.041285][ T8425] vhci_hcd vhci_hcd.0: port 0 already used [ 318.050311][ T8425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.077480][ T8425] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 318.084135][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.097214][ T8425] vhci_hcd vhci_hcd.0: Device attached [ 318.139543][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 318.150868][ T5917] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 318.159064][ T5917] usb 1-1: config 0 has no interface number 0 [ 318.179789][ T8432] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 318.186419][ T8432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.217321][ T5917] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 318.222455][ T8432] vhci_hcd vhci_hcd.0: Device attached [ 318.242567][ T8425] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 318.249187][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.261693][ T5917] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 318.273533][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.281673][ T8425] vhci_hcd vhci_hcd.0: Device attached [ 318.287721][ T5917] usb 1-1: Product: syz [ 318.294708][ T5917] usb 1-1: Manufacturer: syz [ 318.300070][ T5917] usb 1-1: SerialNumber: syz [ 318.308863][ T5917] usb 1-1: config 0 descriptor?? [ 318.347152][ T8425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.358223][ T8425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 318.371054][ T8425] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 318.377663][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.388036][ T8425] vhci_hcd vhci_hcd.0: Device attached [ 318.452439][ T8433] vhci_hcd: connection closed [ 318.452702][ T8430] vhci_hcd: connection closed [ 318.453838][ T8436] vhci_hcd: connection closed [ 318.459065][ T8440] vhci_hcd: connection closed [ 318.463495][ T13] vhci_hcd: stop threads [ 318.636216][ T13] vhci_hcd: release socket [ 318.932961][ T13] vhci_hcd: disconnect device [ 318.938115][ T13] vhci_hcd: stop threads [ 318.944469][ T13] vhci_hcd: release socket [ 318.953810][ T13] vhci_hcd: disconnect device [ 318.962329][ T13] vhci_hcd: stop threads [ 318.966691][ T13] vhci_hcd: release socket [ 318.972108][ T13] vhci_hcd: disconnect device [ 318.979085][ T13] vhci_hcd: stop threads [ 318.984698][ T13] vhci_hcd: release socket [ 318.989830][ T13] vhci_hcd: disconnect device [ 319.137172][ T5917] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input13 [ 320.025705][ T5832] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 320.580374][ T5873] usb 1-1: USB disconnect, device number 8 [ 320.609728][ T5917] usb 5-1: USB disconnect, device number 12 [ 320.648728][ T30] audit: type=1400 audit(1743912005.079:564): avc: denied { setopt } for pid=8457 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 320.975848][ T5832] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.986412][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.009579][ T5832] usb 3-1: Product: syz [ 321.016635][ T5832] usb 3-1: Manufacturer: syz [ 321.024891][ T5832] usb 3-1: SerialNumber: syz [ 321.033153][ T5832] usb 3-1: config 0 descriptor?? [ 321.096808][ T8463] ubi: mtd0 is already attached to ubi31 [ 321.810101][ T8472] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 321.819087][ T8472] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 322.103365][ T5832] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.980613][ T30] audit: type=1400 audit(1743912008.419:565): avc: denied { bind } for pid=8482 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.016039][ T30] audit: type=1400 audit(1743912008.419:566): avc: denied { listen } for pid=8482 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.046259][ T30] audit: type=1400 audit(1743912008.419:567): avc: denied { connect } for pid=8482 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 324.068758][ T30] audit: type=1400 audit(1743912008.419:568): avc: denied { write } for pid=8482 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.159957][ T30] audit: type=1400 audit(1743912008.909:569): avc: denied { write } for pid=8485 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 325.201966][ T30] audit: type=1400 audit(1743912009.109:570): avc: denied { read } for pid=8485 comm="syz.4.620" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 325.233532][ T5832] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 325.299621][ T5832] usb 3-1: USB disconnect, device number 3 [ 325.349470][ T30] audit: type=1400 audit(1743912009.119:571): avc: denied { open } for pid=8485 comm="syz.4.620" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.457993][ T30] audit: type=1400 audit(1743912010.009:572): avc: denied { watch_sb } for pid=8490 comm="syz.4.624" path="/126" dev="tmpfs" ino=674 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 327.727151][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa35000: rx timeout, send abort [ 328.236317][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa35000: abort rx timeout. Force session deactivation [ 328.381192][ T30] audit: type=1400 audit(1743912010.909:573): avc: denied { bind } for pid=8492 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.409980][ T30] audit: type=1400 audit(1743912010.909:574): avc: denied { write } for pid=8492 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.107169][ T8510] syz.2.628: attempt to access beyond end of device [ 330.107169][ T8510] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 332.382206][ T30] audit: type=1400 audit(1743912016.699:575): avc: denied { ioctl } for pid=8528 comm="syz.0.642" path="socket:[17706]" dev="sockfs" ino=17706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 332.413233][ T30] audit: type=1400 audit(1743912016.729:576): avc: denied { setopt } for pid=8528 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.490811][ T30] audit: type=1400 audit(1743912016.879:577): avc: denied { wake_alarm } for pid=8519 comm="syz.4.629" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.549955][ T8537] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 332.572343][ T8537] cramfs: wrong magic [ 332.944225][ T8545] lo speed is unknown, defaulting to 1000 [ 332.958423][ T8545] lo speed is unknown, defaulting to 1000 [ 332.969149][ T8545] lo speed is unknown, defaulting to 1000 [ 333.312148][ T8544] siw: device registration error -23 [ 333.360735][ T8545] infiniband sz1: set active [ 333.365523][ T8545] infiniband sz1: added lo [ 333.380385][ T3078] lo speed is unknown, defaulting to 1000 [ 333.412930][ T8545] RDS/IB: sz1: added [ 333.417500][ T8545] smc: adding ib device sz1 with port count 1 [ 333.424144][ T8545] smc: ib device sz1 port 1 has pnetid [ 333.431859][ T8545] lo speed is unknown, defaulting to 1000 [ 333.526737][ T8545] lo speed is unknown, defaulting to 1000 [ 333.549451][ T3078] lo speed is unknown, defaulting to 1000 [ 333.883508][ T8545] lo speed is unknown, defaulting to 1000 [ 334.122415][ T8545] lo speed is unknown, defaulting to 1000 [ 334.341894][ T8545] lo speed is unknown, defaulting to 1000 [ 334.639439][ T911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 334.710214][ T8551] tipc: Enabling of bearer rejected, already enabled [ 334.780610][ T30] audit: type=1400 audit(1743912019.169:578): avc: denied { ioctl } for pid=8549 comm="syz.3.635" path="socket:[16669]" dev="sockfs" ino=16669 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 334.931632][ T30] audit: type=1400 audit(1743912019.179:579): avc: denied { ioctl } for pid=8549 comm="syz.3.635" path="socket:[16668]" dev="sockfs" ino=16668 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.939442][ T911] usb 2-1: Using ep0 maxpacket: 8 [ 335.083728][ T911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.379454][ T911] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 335.499431][ T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.530249][ T911] usb 2-1: config 0 descriptor?? [ 335.694458][ T911] usbhid 2-1:0.0: can't add hid device: -71 [ 335.700542][ T911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 335.762764][ T911] usb 2-1: USB disconnect, device number 8 [ 335.814264][ T30] audit: type=1400 audit(1743912020.249:580): avc: denied { mount } for pid=8563 comm="syz.2.638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 336.069574][ T5873] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 336.949765][ T30] audit: type=1400 audit(1743912021.289:581): avc: denied { bind } for pid=8567 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.112398][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.131507][ T5873] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 337.148080][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.158525][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.166791][ T5873] usb 3-1: Product: syz [ 337.329596][ T30] audit: type=1400 audit(1743912021.769:582): avc: denied { ioctl } for pid=8580 comm="syz.1.644" path="socket:[17775]" dev="sockfs" ino=17775 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.355742][ T5873] usb 3-1: Manufacturer: syz [ 337.364078][ T5873] usb 3-1: SerialNumber: syz [ 337.804266][ T30] audit: type=1400 audit(1743912022.239:583): avc: denied { ioctl } for pid=8580 comm="syz.1.644" path="socket:[16719]" dev="sockfs" ino=16719 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 338.247325][ T5873] usb 3-1: bad CDC descriptors [ 339.298635][ T30] audit: type=1400 audit(1743912023.729:584): avc: denied { write } for pid=8602 comm="syz.3.647" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.520954][ T8605] @: renamed from vlan0 (while UP) [ 339.869568][ T30] audit: type=1400 audit(1743912024.039:585): avc: denied { mount } for pid=8602 comm="syz.3.647" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.172510][ T5904] usb 3-1: USB disconnect, device number 4 [ 340.211786][ T30] audit: type=1400 audit(1743912024.619:586): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 340.364420][ T30] audit: type=1400 audit(1743912024.799:587): avc: denied { read } for pid=8614 comm="syz.4.650" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.444745][ T30] audit: type=1400 audit(1743912024.799:588): avc: denied { open } for pid=8614 comm="syz.4.650" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 340.545459][ T30] audit: type=1326 audit(1743912024.829:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz.4.650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8460d8d169 code=0x0 [ 340.687978][ T8621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 340.697342][ T8621] tipc: Started in network mode [ 340.702691][ T8621] tipc: Node identity 1, cluster identity 4711 [ 340.708943][ T8621] tipc: Node number set to 1 [ 340.918827][ T30] audit: type=1400 audit(1743912025.349:590): avc: denied { read } for pid=8622 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.007020][ T30] audit: type=1400 audit(1743912025.349:591): avc: denied { open } for pid=8622 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.084368][ T30] audit: type=1400 audit(1743912025.349:592): avc: denied { getattr } for pid=8622 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.439622][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 343.439638][ T30] audit: type=1400 audit(1743912027.869:601): avc: denied { create } for pid=8674 comm="syz.1.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 343.527202][ T8678] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 343.666767][ T30] audit: type=1400 audit(1743912028.099:602): avc: denied { ioctl } for pid=8674 comm="syz.1.656" path="socket:[16799]" dev="sockfs" ino=16799 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 343.769419][ T9] lo speed is unknown, defaulting to 1000 [ 343.797606][ T9] sz1: Port: 1 Link DOWN [ 343.881848][ T9] lo speed is unknown, defaulting to 1000 [ 344.270825][ T30] audit: type=1400 audit(1743912028.699:603): avc: denied { read } for pid=8681 comm="syz.4.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.291790][ T30] audit: type=1400 audit(1743912029.299:604): avc: denied { setopt } for pid=8691 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 345.703192][ T30] audit: type=1400 audit(1743912029.729:605): avc: denied { write } for pid=8694 comm="syz.0.658" path="socket:[18009]" dev="sockfs" ino=18009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 345.850525][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 346.068415][ T30] audit: type=1400 audit(1743912029.969:606): avc: denied { getopt } for pid=8670 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 346.089918][ T30] audit: type=1400 audit(1743912029.999:607): avc: denied { listen } for pid=8697 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.799597][ T30] audit: type=1400 audit(1743912031.049:608): avc: denied { create } for pid=8706 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 347.188882][ T8719] evm: overlay not supported [ 347.596546][ T9] usb 1-1: config 0 has no interfaces? [ 347.618766][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.627500][ T30] audit: type=1400 audit(1743912031.059:609): avc: denied { ioctl } for pid=8706 comm="syz.2.662" path="socket:[18107]" dev="sockfs" ino=18107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 347.654364][ T30] audit: type=1400 audit(1743912031.119:610): avc: denied { write } for pid=8706 comm="syz.2.662" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 347.801175][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.951735][ T9] usb 1-1: Product: syz [ 348.166093][ T9] usb 1-1: Manufacturer: syz [ 348.188527][ T9] usb 1-1: SerialNumber: syz [ 348.639136][ T9] usb 1-1: config 0 descriptor?? [ 349.135961][ T9] usb 1-1: can't set config #0, error -71 [ 349.202559][ T8735] syz.1.668: attempt to access beyond end of device [ 349.202559][ T8735] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 349.216665][ T8735] syz.1.668: attempt to access beyond end of device [ 349.216665][ T8735] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 349.230091][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 349.244067][ T8735] syz.1.668: attempt to access beyond end of device [ 349.244067][ T8735] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 349.257282][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 349.271080][ T9] usb 1-1: USB disconnect, device number 9 [ 349.426567][ T8735] syz.1.668: attempt to access beyond end of device [ 349.426567][ T8735] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 350.359652][ T8735] syz.1.668: attempt to access beyond end of device [ 350.359652][ T8735] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 350.381717][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 350.410230][ T8735] syz.1.668: attempt to access beyond end of device [ 350.410230][ T8735] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 350.429583][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 350.441614][ T8735] syz.1.668: attempt to access beyond end of device [ 350.441614][ T8735] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 350.469475][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 350.469492][ T30] audit: type=1400 audit(1743912034.879:612): avc: denied { write } for pid=8746 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 350.501218][ T8735] syz.1.668: attempt to access beyond end of device [ 350.501218][ T8735] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 350.519074][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 350.545693][ T8735] syz.1.668: attempt to access beyond end of device [ 350.545693][ T8735] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 350.600098][ T30] audit: type=1400 audit(1743912034.939:613): avc: denied { listen } for pid=8739 comm="syz.0.671" lport=50692 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 350.624366][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 350.650517][ T8735] syz.1.668: attempt to access beyond end of device [ 350.650517][ T8735] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 350.663916][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 350.680885][ T8752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.585124][ T8735] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 351.727679][ T8735] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 351.746884][ T8741] sctp: failed to load transform for md5: -2 [ 352.043696][ T8757] Cannot find del_set index 0 as target [ 352.189506][ T30] audit: type=1400 audit(1743912036.559:614): avc: denied { write } for pid=8753 comm="syz.4.673" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 352.328410][ T30] audit: type=1400 audit(1743912036.569:615): avc: denied { ioctl } for pid=8753 comm="syz.4.673" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 352.428127][ T8731] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 352.459535][ T8731] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 352.996991][ T8771] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 353.117170][ T30] audit: type=1400 audit(1743912037.549:616): avc: denied { map } for pid=8770 comm="syz.2.676" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 353.828652][ T8783] tipc: Enabling of bearer rejected, failed to enable media [ 354.624938][ T8789] dns_resolver: Unsupported content type (152) [ 356.372084][ T8798] warning: `syz.3.681' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.539526][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 357.699560][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 357.816535][ T5873] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 357.987827][ T5873] usb 2-1: config 0 has no interface number 0 [ 358.006476][ T5873] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=e9.0e [ 358.370421][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.389986][ T5873] usb 2-1: Product: syz [ 358.418949][ T5873] usb 2-1: Manufacturer: syz [ 358.458716][ T5873] usb 2-1: SerialNumber: syz [ 358.580228][ T5873] usb 2-1: config 0 descriptor?? [ 358.588214][ T5873] usb 2-1: can't set config #0, error -71 [ 358.617177][ T5873] usb 2-1: USB disconnect, device number 9 [ 360.004364][ T30] audit: type=1400 audit(1743912044.419:617): avc: denied { read } for pid=8835 comm="syz.4.691" path="socket:[18291]" dev="sockfs" ino=18291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 361.105457][ T8846] lo speed is unknown, defaulting to 1000 [ 363.894383][ T8855] tipc: Enabled bearer , priority 10 [ 363.922550][ T8855] netlink: 14 bytes leftover after parsing attributes in process `syz.0.694'. [ 364.073699][ T8855] tipc: Resetting bearer [ 364.323121][ T8855] tipc: Disabling bearer [ 364.854215][ T8856] sctp: failed to load transform for md5: -2 [ 367.906622][ T30] audit: type=1400 audit(1743912052.339:618): avc: denied { setopt } for pid=8874 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.865132][ T30] audit: type=1400 audit(1743912053.299:619): avc: denied { ioctl } for pid=8884 comm="syz.1.701" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 370.300696][ T30] audit: type=1400 audit(1743912054.539:620): avc: denied { nlmsg_write } for pid=8897 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 370.651229][ T8907] lo speed is unknown, defaulting to 1000 [ 371.054976][ T30] audit: type=1400 audit(1743912055.479:621): avc: denied { ioctl } for pid=8898 comm="syz.0.705" path="socket:[18419]" dev="sockfs" ino=18419 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 372.566745][ T8926] netlink: 277 bytes leftover after parsing attributes in process `syz.4.710'. [ 372.692647][ T30] audit: type=1400 audit(1743912057.119:622): avc: denied { ioctl } for pid=8924 comm="syz.0.711" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 372.915106][ T8812] syz.2.683 (8812): drop_caches: 3 [ 373.516914][ T8936] sp0: Synchronizing with TNC [ 375.281046][ T8936] ubi: mtd0 is already attached to ubi31 [ 375.299702][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.312118][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.321578][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.338685][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.346421][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.358902][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.366298][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.376558][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.394953][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.409137][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.526574][ T30] audit: type=1400 audit(1743912059.849:623): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 375.802396][ T8812] syz_tun (unregistering): left allmulticast mode [ 376.591261][ T8943] lo speed is unknown, defaulting to 1000 [ 377.148684][ T8963] netlink: 277 bytes leftover after parsing attributes in process `syz.0.718'. [ 377.458856][ T8957] sctp: failed to load transform for md5: -2 [ 377.479808][ T5825] Bluetooth: hci5: command tx timeout [ 377.615093][ T30] audit: type=1400 audit(1743912062.009:624): avc: denied { name_connect } for pid=8966 comm="syz.0.719" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 377.816983][ T8975] netlink: 277 bytes leftover after parsing attributes in process `syz.4.720'. [ 377.916360][ T8978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.201983][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.208428][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.828495][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 379.730349][ T5825] Bluetooth: hci5: command tx timeout [ 381.458176][ T30] audit: type=1400 audit(1743912065.849:625): avc: denied { write } for pid=9014 comm="syz.3.726" lport=60505 faddr=::ffff:172.20.255.187 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 381.782493][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.791796][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.809312][ T5825] Bluetooth: hci5: command tx timeout [ 381.815635][ T8943] bridge_slave_0: entered allmulticast mode [ 381.847736][ T8943] bridge_slave_0: entered promiscuous mode [ 381.879231][ T8981] syz.1.721 (8981): drop_caches: 3 [ 382.188826][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.229299][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.259295][ T8943] bridge_slave_1: entered allmulticast mode [ 382.283239][ T8943] bridge_slave_1: entered promiscuous mode [ 382.425705][ T9029] netlink: 277 bytes leftover after parsing attributes in process `syz.3.730'. [ 382.627566][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.697894][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.930973][ T5825] Bluetooth: hci5: command tx timeout [ 385.557409][ T8943] team0: Port device team_slave_0 added [ 385.581346][ T8943] team0: Port device team_slave_1 added [ 385.714479][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.721562][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.133039][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.192634][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.199823][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.245592][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.528842][ T5904] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 386.985272][ T30] audit: type=1800 audit(1743912071.089:626): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.735" name="file1" dev="tmpfs" ino=819 res=0 errno=0 [ 387.253633][ T8943] hsr_slave_0: entered promiscuous mode [ 387.270199][ T8943] hsr_slave_1: entered promiscuous mode [ 387.276303][ T8943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.322570][ T8943] Cannot create hsr debugfs directory [ 387.339445][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 387.369478][ T5904] usb 1-1: config 0 has an invalid interface number: 201 but max is 0 [ 387.381178][ T5904] usb 1-1: config 0 has no interface number 0 [ 387.496701][ T5904] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=e9.0e [ 387.509879][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.518665][ T5904] usb 1-1: Product: syz [ 388.095571][ T5904] usb 1-1: Manufacturer: syz [ 388.138782][ T5904] usb 1-1: SerialNumber: syz [ 388.174353][ T5904] usb 1-1: config 0 descriptor?? [ 388.479987][ T9064] rdma_rxe: rxe_newlink: failed to add lo [ 388.519973][ T9064] siw: device registration error -23 [ 389.381419][ T8943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.455957][ T5904] pcwd_usb: The device isn't a Human Interface Device [ 389.463962][ T8943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.493013][ T5904] usb 1-1: USB disconnect, device number 10 [ 389.610030][ T8943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.999945][ T8943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.426692][ T9086] sp0: Synchronizing with TNC [ 391.748576][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.776014][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.177531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.184696][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.215443][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.222543][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.243484][ T9090] ubi: mtd0 is already attached to ubi31 [ 395.261603][ T9112] x_tables: duplicate underflow at hook 3 [ 395.264874][ T8943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.087356][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 396.096229][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 396.105381][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 396.118042][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 396.126881][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 396.201300][ T30] audit: type=1400 audit(1743912080.119:627): avc: denied { module_load } for pid=9109 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 396.622429][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 396.631421][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 397.583858][ T30] audit: type=1400 audit(1743912082.019:628): avc: denied { execute } for pid=9141 comm="syz.1.754" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 397.624573][ T8943] veth0_vlan: entered promiscuous mode [ 397.658019][ T8943] veth1_vlan: entered promiscuous mode [ 397.786213][ T30] audit: type=1400 audit(1743912082.219:629): avc: denied { ioctl } for pid=9143 comm="syz.0.755" path="socket:[19108]" dev="sockfs" ino=19108 ioctlcmd=0x8937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 398.240338][ T8943] veth0_macvtap: entered promiscuous mode [ 398.274573][ T8943] veth1_macvtap: entered promiscuous mode [ 398.322459][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.400450][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.473504][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.545153][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.586468][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.686508][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.710644][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.736483][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.780624][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.792965][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.883100][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 398.916408][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 398.989285][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.348983][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.379738][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.399232][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.412074][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.450714][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.462881][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.524958][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.569422][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.616194][ T8943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.714142][ T8943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.730624][ T8943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.759067][ T8943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.799931][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 399.813806][ T8943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.839489][ T8943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.856667][ T8943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.965561][ T9] usb 1-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 399.983610][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 399.992810][ T6833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.003957][ T6833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.084238][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.501262][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.512105][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.520265][ T9] usb 1-1: Product: syz [ 401.524472][ T9] usb 1-1: Manufacturer: syz [ 401.529698][ T9] usb 1-1: SerialNumber: syz [ 401.548982][ T9] usb 1-1: bad CDC descriptors [ 401.647543][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.527869][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.142904][ T30] audit: type=1400 audit(1743912087.539:630): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/root/syzkaller.iMoF5Y/syz-tmp" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 403.586784][ T9] usb 1-1: USB disconnect, device number 11 [ 403.642577][ T30] audit: type=1400 audit(1743912087.539:631): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/root/syzkaller.iMoF5Y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 403.642625][ T30] audit: type=1400 audit(1743912087.559:632): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/root/syzkaller.iMoF5Y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 403.642664][ T30] audit: type=1400 audit(1743912087.569:633): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 403.642701][ T30] audit: type=1400 audit(1743912087.569:634): avc: denied { mount } for pid=8943 comm="syz-executor" name="/" dev="gadgetfs" ino=6075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 403.642738][ T30] audit: type=1800 audit(1743912087.679:635): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.762" name="file1" dev="tmpfs" ino=889 res=0 errno=0 [ 403.687426][ T30] audit: type=1400 audit(1743912088.119:636): avc: denied { mounton } for pid=8943 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 403.707838][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.400445][ T30] audit: type=1800 audit(1743912089.829:637): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.764" name="file1" dev="tmpfs" ino=895 res=0 errno=0 [ 406.778010][ T30] audit: type=1800 audit(1743912090.829:638): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.768" name="file1" dev="tmpfs" ino=880 res=0 errno=0 [ 406.799532][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.353969][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 407.367781][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 408.673254][ T30] audit: type=1800 audit(1743912093.099:639): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.776" name="file1" dev="tmpfs" ino=28 res=0 errno=0 [ 409.386987][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 409.429552][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.778'. [ 412.279865][ T30] audit: type=1800 audit(1743912096.329:640): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.784" name="file1" dev="tmpfs" ino=901 res=0 errno=0 [ 412.305858][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.310805][ T30] audit: type=1800 audit(1743912098.739:641): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.788" name="file1" dev="tmpfs" ino=911 res=0 errno=0 [ 415.675886][ T30] audit: type=1800 audit(1743912100.109:642): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.787" name="file1" dev="tmpfs" ino=912 res=0 errno=0 [ 418.777524][ T9325] rdma_rxe: rxe_newlink: failed to add lo [ 418.890354][ T9326] siw: device registration error -23 [ 419.330181][ T9322] netlink: 'syz.3.797': attribute type 4 has an invalid length. [ 424.398636][ T9351] delete_channel: no stack [ 427.890323][ T9378] delete_channel: no stack [ 432.291309][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.825'. [ 432.357994][ T9444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.825'. [ 435.144168][ T9422] delete_channel: no stack [ 440.668873][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.675258][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.660483][ T9484] delete_channel: no stack [ 447.195087][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 447.206241][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.226926][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.237038][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.269989][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.586164][ T9537] lo speed is unknown, defaulting to 1000 [ 447.853883][ T6833] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.015912][ T6833] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.191456][ T6833] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.231176][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 448.518924][ T6833] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.856258][ T30] audit: type=1400 audit(1743912133.219:643): avc: denied { ioctl } for pid=9551 comm="syz.4.851" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 449.139791][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.151794][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.159049][ T9537] bridge_slave_0: entered allmulticast mode [ 449.167491][ T9537] bridge_slave_0: entered promiscuous mode [ 449.178356][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.185712][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.194910][ T9537] bridge_slave_1: entered allmulticast mode [ 449.206238][ T9529] delete_channel: no stack [ 449.210498][ T9537] bridge_slave_1: entered promiscuous mode [ 449.449951][ T5836] Bluetooth: hci1: command tx timeout [ 449.947872][ T9532] delete_channel: no stack [ 449.971966][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.610530][ T5836] Bluetooth: hci1: command tx timeout [ 451.636782][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.096848][ T6833] bridge_slave_1: left allmulticast mode [ 452.264015][ T6833] bridge_slave_1: left promiscuous mode [ 452.288980][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.302436][ T6833] bridge_slave_0: left allmulticast mode [ 452.308127][ T6833] bridge_slave_0: left promiscuous mode [ 452.721015][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.601942][ T6833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.626502][ T6833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.639449][ T5836] Bluetooth: hci1: command tx timeout [ 453.645878][ T6833] bond0 (unregistering): Released all slaves [ 453.755430][ T9537] team0: Port device team_slave_0 added [ 453.841830][ T9537] team0: Port device team_slave_1 added [ 454.663442][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.670616][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.877162][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.953277][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.975095][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.039492][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.583265][ T9537] hsr_slave_0: entered promiscuous mode [ 455.608424][ T9537] hsr_slave_1: entered promiscuous mode [ 455.628401][ T9537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.656535][ T9537] Cannot create hsr debugfs directory [ 455.723218][ T5836] Bluetooth: hci1: command tx timeout [ 455.843596][ T6833] hsr_slave_0: left promiscuous mode [ 455.943602][ T6833] hsr_slave_1: left promiscuous mode [ 455.954947][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.967405][ T6833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.090336][ T6833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.097963][ T6833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.671480][ T9595] delete_channel: no stack [ 458.676307][ T9586] delete_channel: no stack [ 458.694475][ T6833] veth1_macvtap: left promiscuous mode [ 458.711388][ T6833] veth0_macvtap: left promiscuous mode [ 458.717382][ T6833] veth1_vlan: left promiscuous mode [ 458.726353][ T6833] veth0_vlan: left promiscuous mode [ 459.585861][ T9621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.591974][ T9621] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 459.743429][ T30] audit: type=1400 audit(1743912143.869:644): avc: denied { write } for pid=9614 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 459.839632][ T6835] Bluetooth: hci5: Frame reassembly failed (-84) [ 462.019517][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 462.019676][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 464.663890][ T9633] Bluetooth: hci5: Frame reassembly failed (-84) [ 465.612799][ T6833] team0 (unregistering): Port device team_slave_1 removed [ 466.180413][ T6833] team0 (unregistering): Port device team_slave_0 removed [ 466.456119][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 466.624185][ T9656] delete_channel: no stack [ 466.881646][ T4309] Bluetooth: hci5: Frame reassembly failed (-84) [ 468.508989][ T9537] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.660325][ T9683] delete_channel: no stack [ 468.894902][ T9537] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.929398][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 468.969465][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 468.987465][ T9537] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.016472][ T9537] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.082348][ T6028] Bluetooth: hci5: Frame reassembly failed (-84) [ 469.116055][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.147099][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.197315][ T9537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.621204][ T9537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.173262][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.180397][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.207015][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.214214][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.079827][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 471.086757][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 471.427421][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.487618][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 472.022746][ T9710] delete_channel: no stack [ 472.437104][ T9783] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 472.480690][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 472.491588][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 472.835240][ T9537] veth0_vlan: entered promiscuous mode [ 473.660714][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 474.131622][ T9537] veth1_vlan: entered promiscuous mode [ 474.530433][ T5831] Bluetooth: hci6: command 0x1003 tx timeout [ 474.530638][ T5836] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 474.610675][ T9537] veth0_macvtap: entered promiscuous mode [ 474.621997][ T9537] veth1_macvtap: entered promiscuous mode [ 474.920392][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.994734][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.044081][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.254752][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.359917][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.372268][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.397757][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.973606][ T9827] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 476.093254][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 476.242389][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.272836][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.407890][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.436939][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.935424][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.016144][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.031621][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.044828][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.058656][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.177412][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.191201][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.194483][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 478.203584][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.208071][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 478.260128][ T9537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.279706][ T9537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.320291][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.416885][ T9537] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.489498][ T9537] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.498382][ T9537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.527222][ T9537] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.716992][ T9857] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 478.851495][ T9859] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 478.873616][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.876071][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 480.141706][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.165146][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.701831][ T6836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.714803][ T6836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.789775][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 480.919755][ T5836] Bluetooth: hci6: command 0x1003 tx timeout [ 480.952526][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 483.613000][ T4309] Bluetooth: hci5: Frame reassembly failed (-84) [ 484.255769][ T9874] delete_channel: no stack [ 485.641259][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 485.645567][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 485.668962][ T9906] delete_channel: no stack [ 487.036877][ T9971] sp0: Synchronizing with TNC [ 487.075636][ T9975] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 487.163219][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 487.285152][ T9976] ubi: mtd0 is already attached to ubi31 [ 488.550288][ T9935] delete_channel: no stack [ 489.230232][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 489.237420][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 489.258015][ T911] IPVS: starting estimator thread 0... [ 489.390037][T10010] IPVS: using max 78 ests per chain, 187200 per kthread [ 491.667279][T10004] delete_channel: no stack [ 492.440647][T10007] delete_channel: no stack [ 496.659951][T10083] netlink: 173 bytes leftover after parsing attributes in process `syz.1.943'. [ 498.902288][T10122] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 498.911335][T10122] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 499.316980][ T30] audit: type=1400 audit(1743912183.749:645): avc: denied { sys_chroot } for pid=10126 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 499.872177][ T30] audit: type=1400 audit(1743912183.749:646): avc: denied { setgid } for pid=10126 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 500.059136][ T30] audit: type=1400 audit(1743912183.749:647): avc: denied { setrlimit } for pid=10126 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 501.113607][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.120144][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.656783][T10099] delete_channel: no stack [ 507.204403][T10214] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 507.213843][T10214] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 509.165296][ T30] audit: type=1800 audit(1743912193.229:648): pid=10261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.972" name="file1" dev="tmpfs" ino=91 res=0 errno=0 [ 511.502934][T10253] delete_channel: no stack [ 512.872563][T10303] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 512.892678][ T6028] Bluetooth: hci5: Frame reassembly failed (-84) [ 514.928385][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 517.686638][T10321] delete_channel: no stack [ 527.448643][ T6836] Bluetooth: hci5: Frame reassembly failed (-84) [ 527.460676][T10518] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 528.750954][T10538] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 528.811651][ T52] Bluetooth: hci6: Frame reassembly failed (-84) [ 528.843803][T10479] delete_channel: no stack [ 529.551774][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 530.839470][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 532.281139][T10591] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 532.304331][ T52] Bluetooth: hci5: Frame reassembly failed (-84) [ 534.281622][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 536.233149][T10599] delete_channel: no stack [ 538.162060][ T30] audit: type=1800 audit(1743912222.589:649): pid=10701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1050" name="file1" dev="tmpfs" ino=1209 res=0 errno=0 [ 540.641574][T10693] delete_channel: no stack [ 542.253773][T10753] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 542.283644][ T6836] Bluetooth: hci5: Frame reassembly failed (-84) [ 544.221467][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 544.294856][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 544.423959][ T5831] Bluetooth: hci5: command 0x1003 tx timeout [ 544.445107][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 547.786344][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 547.806301][T10828] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 548.815203][T10805] delete_channel: no stack [ 548.924136][T10845] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 549.879460][T10539] Bluetooth: hci5: command 0x1003 tx timeout [ 549.886594][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 550.375172][T10827] delete_channel: no stack [ 550.929403][ T5836] Bluetooth: hci6: command 0x1003 tx timeout [ 550.935706][ T5831] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 552.349740][T10882] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 552.367932][ T9633] Bluetooth: hci5: Frame reassembly failed (-84) [ 554.574082][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 554.574105][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 556.698598][T10932] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 556.748267][ T6011] Bluetooth: hci5: Frame reassembly failed (-84) [ 557.553864][T10895] delete_channel: no stack [ 558.802338][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 559.534811][T10963] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 559.991830][ T6836] Bluetooth: hci5: Frame reassembly failed (-84) [ 560.031080][T10926] delete_channel: no stack [ 561.571361][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 561.997301][T10985] netlink: 173 bytes leftover after parsing attributes in process `syz.1.1112'. [ 562.524540][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.531115][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.711682][T11007] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 563.748080][ T6028] Bluetooth: hci5: Frame reassembly failed (-84) [ 565.802182][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 565.809022][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 566.359600][ T31] INFO: task kworker/0:5:5902 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.471729][ T30] audit: type=1400 audit(1743912250.899:650): avc: denied { write } for pid=5808 comm="syz-executor" path="pipe:[4252]" dev="pipefs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 566.739637][ T31] Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 [ 566.747321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.862157][ T31] task:kworker/0:5 state:D stack:25048 pid:5902 tgid:5902 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 566.959819][ T6772] vhci_hcd: connection reset by peer [ 566.966745][ T13] vhci_hcd: stop threads [ 566.974165][ T13] vhci_hcd: release socket [ 567.029918][ T13] vhci_hcd: disconnect device [ 567.039407][ T31] Workqueue: usb_hub_wq hub_event [ 567.044519][ T31] Call Trace: [ 567.047830][ T31] [ 567.059649][ T5902] vhci_hcd: vhci_device speed not set [ 567.079393][ T31] __schedule+0x116f/0x5de0 [ 567.084008][ T31] ? __lock_acquire+0x9c1/0x1ba0 [ 567.089018][ T31] ? __pfx___schedule+0x10/0x10 [ 567.112331][ T31] ? find_held_lock+0x2b/0x80 [ 567.117021][ T31] ? schedule+0x2d7/0x3a0 [ 567.124569][ T31] ? msleep+0x61/0xf0 [ 567.128548][ T31] schedule+0xe7/0x3a0 [ 567.134768][ T31] schedule_timeout+0x123/0x290 [ 567.141047][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 567.146417][ T31] ? __pfx_process_timeout+0x10/0x10 [ 567.152243][ T31] ? hub_ext_port_status+0x1fa/0x670 [ 567.157534][ T31] msleep+0xa6/0xf0 [ 567.161438][ T31] hub_port_reset+0xb6a/0x1cb0 [ 567.166215][ T31] ? __pfx_hub_port_reset+0x10/0x10 [ 567.171572][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.178072][ T31] hub_port_init+0x716/0x3a70 [ 567.182775][ T31] hub_event+0x2c67/0x4fa0 [ 567.187204][ T31] ? __pfx_hub_event+0x10/0x10 [ 567.192785][ T31] ? lock_acquire+0x62/0x350 [ 567.197378][ T31] ? rcu_is_watching+0x12/0xc0 [ 567.202237][ T31] process_one_work+0x9cc/0x1b70 [ 567.207187][ T31] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 567.213394][ T31] ? __pfx_process_one_work+0x10/0x10 [ 567.218765][ T31] ? assign_work+0x1a0/0x250 [ 567.223375][ T31] worker_thread+0x6c8/0xf10 [ 567.227962][ T31] ? __kthread_parkme+0x19e/0x250 [ 567.233143][ T31] ? __pfx_worker_thread+0x10/0x10 [ 567.240384][ T31] kthread+0x3c2/0x780 [ 567.244444][ T31] ? __pfx_kthread+0x10/0x10 [ 567.249018][ T31] ? __pfx_kthread+0x10/0x10 [ 567.253874][ T31] ? __pfx_kthread+0x10/0x10 [ 567.258465][ T31] ? __pfx_kthread+0x10/0x10 [ 567.263066][ T31] ? rcu_is_watching+0x12/0xc0 [ 567.267824][ T31] ? __pfx_kthread+0x10/0x10 [ 567.272487][ T31] ret_from_fork+0x45/0x80 [ 567.276899][ T31] ? __pfx_kthread+0x10/0x10 [ 567.281720][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.286494][ T31] [ 567.353555][ T31] [ 567.353555][ T31] Showing all locks held in the system: [ 567.409331][ T31] 3 locks held by kworker/0:1/10: [ 567.414386][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 567.509473][ T31] #1: ffffc900000f7d18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 567.519184][ T31] #2: ffffffff8e3ccab8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 567.609485][ T31] 3 locks held by kworker/u8:1/13: [ 567.629362][ T31] 1 lock held by khungtaskd/31: [ 567.634233][ T31] #0: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 567.718842][ T31] 3 locks held by kworker/0:2/911: [ 567.739509][ T31] 2 locks held by getty/5579: [ 567.759498][ T31] #0: ffff8880372220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 567.822422][ T31] #1: ffffc900036e32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 567.839820][ T31] 3 locks held by kworker/0:5/5902: [ 567.845046][ T31] #0: ffff8880222f4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 567.879621][ T31] #1: ffffc9000301fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 567.909342][ T31] #2: ffff8881457dd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 567.922597][ T31] 4 locks held by kworker/u8:14/6833: [ 567.929160][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 567.945020][ T31] #1: ffffc9001c33fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 567.957362][ T31] #2: ffffffff90115ed0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 567.976280][ T31] #3: ffffffff8e3cc980 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 567.987204][ T31] 1 lock held by syz.1.886/9717: [ 567.995244][ T31] #0: ffffffff9012bd68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 568.004948][ T31] 1 lock held by syz.4.933/10033: [ 568.013233][ T31] #0: ffffffff9012bd68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 568.022853][ T31] 1 lock held by syz.6.1124/11026: [ 568.028019][ T31] #0: ffffffff9012bd68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 568.039425][ T31] 1 lock held by syz.0.1126/11039: [ 568.044581][ T31] #0: ffffffff9012bd68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 568.053863][ T31] 1 lock held by syz.3.1128/11041: [ 568.059003][ T31] #0: ffffffff9012bd68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 568.068177][ T31] [ 568.073766][ T31] ============================================= [ 568.073766][ T31] [ 568.083218][ T31] NMI backtrace for cpu 0 [ 568.083233][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 568.083253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.083262][ T31] Call Trace: [ 568.083268][ T31] [ 568.083275][ T31] dump_stack_lvl+0x116/0x1f0 [ 568.083304][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 568.083320][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 568.083342][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 568.083361][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 568.083380][ T31] watchdog+0xf70/0x12c0 [ 568.083403][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.083418][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.083441][ T31] ? __kthread_parkme+0x19e/0x250 [ 568.083468][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.083490][ T31] kthread+0x3c2/0x780 [ 568.083508][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083523][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083538][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083553][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083569][ T31] ? rcu_is_watching+0x12/0xc0 [ 568.083590][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083606][ T31] ret_from_fork+0x45/0x80 [ 568.083622][ T31] ? __pfx_kthread+0x10/0x10 [ 568.083639][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.083672][ T31] [ 568.083678][ T31] Sending NMI from CPU 0 to CPUs 1: [ 568.220636][ C1] NMI backtrace for cpu 1 [ 568.220649][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 568.220666][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.220673][ C1] RIP: 0010:zap_class+0x102/0x340 [ 568.220695][ C1] Code: 00 0f 84 2c 02 00 00 49 c7 c4 00 00 eb 96 49 bf 22 01 00 00 00 00 ad de 49 8b 1c 24 48 85 db 74 5f 48 83 eb 08 74 59 0f b6 2b <8b> 03 40 c0 ed 02 c1 e8 08 40 0f b6 ed 8d 0c 28 39 c8 7d 39 89 c2 [ 568.220706][ C1] RSP: 0018:ffffc90000087d20 EFLAGS: 00000082 [ 568.220718][ C1] RAX: 0000000000045a43 RBX: ffffffff93c13d20 RCX: 0000000000045a47 [ 568.220726][ C1] RDX: 000000000000002c RSI: 0000000000045a46 RDI: 0000000000040c3d [ 568.220734][ C1] RBP: 000000000000000c R08: 0000000000045a47 R09: ffffffff95cf344e [ 568.220741][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff96f25f58 [ 568.220749][ C1] R13: 0000000000000c64 R14: ffffffff972b8018 R15: dead000000000122 [ 568.220757][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 568.220771][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.220779][ C1] CR2: 00002000001bf000 CR3: 000000000e182000 CR4: 00000000003526f0 [ 568.220787][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.220794][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.220801][ C1] Call Trace: [ 568.220806][ C1] [ 568.220811][ C1] ? __is_module_percpu_address+0x1e0/0x440 [ 568.220832][ C1] __lockdep_free_key_range+0x34/0x80 [ 568.220849][ C1] lockdep_unregister_key+0xbb/0x130 [ 568.220864][ C1] pwq_release_workfn+0x5e6/0xa70 [ 568.220881][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 568.220897][ C1] kthread_worker_fn+0x30d/0xc50 [ 568.220908][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 568.220924][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 568.220935][ C1] kthread+0x3c2/0x780 [ 568.220947][ C1] ? __pfx_kthread+0x10/0x10 [ 568.220958][ C1] ? __pfx_kthread+0x10/0x10 [ 568.220970][ C1] ? __pfx_kthread+0x10/0x10 [ 568.220981][ C1] ? __pfx_kthread+0x10/0x10 [ 568.220992][ C1] ? rcu_is_watching+0x12/0xc0 [ 568.221007][ C1] ? __pfx_kthread+0x10/0x10 [ 568.221019][ C1] ret_from_fork+0x45/0x80 [ 568.221033][ C1] ? __pfx_kthread+0x10/0x10 [ 568.221044][ C1] ret_from_fork_asm+0x1a/0x30 [ 568.221066][ C1] [ 568.467437][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 568.474296][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(full) [ 568.485742][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.495781][ T31] Call Trace: [ 568.499045][ T31] [ 568.501966][ T31] dump_stack_lvl+0x3d/0x1f0 [ 568.506550][ T31] panic+0x71c/0x800 [ 568.510433][ T31] ? __pfx_panic+0x10/0x10 [ 568.514823][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 568.520171][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 568.526122][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 568.531473][ T31] ? watchdog+0xdda/0x12c0 [ 568.535878][ T31] ? watchdog+0xdcd/0x12c0 [ 568.540269][ T31] watchdog+0xdeb/0x12c0 [ 568.544484][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.549131][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.554303][ T31] ? __kthread_parkme+0x19e/0x250 [ 568.559310][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.563977][ T31] kthread+0x3c2/0x780 [ 568.568022][ T31] ? __pfx_kthread+0x10/0x10 [ 568.572588][ T31] ? __pfx_kthread+0x10/0x10 [ 568.577148][ T31] ? __pfx_kthread+0x10/0x10 [ 568.581709][ T31] ? __pfx_kthread+0x10/0x10 [ 568.586286][ T31] ? rcu_is_watching+0x12/0xc0 [ 568.591041][ T31] ? __pfx_kthread+0x10/0x10 [ 568.595616][ T31] ret_from_fork+0x45/0x80 [ 568.600009][ T31] ? __pfx_kthread+0x10/0x10 [ 568.604574][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.609346][ T31] [ 568.612555][ T31] Kernel Offset: disabled [ 568.616855][ T31] Rebooting in 86400 seconds..