last executing test programs: 2m41.893703238s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2m41.613507008s ago: executing program 4 (id=690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3}}, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x1, 0xa, 0x65, 0x6d, 0xf2, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x0, 0x6}}]}}]}}]}}, 0x0) 2m38.251039859s ago: executing program 4 (id=698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x0, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 2m37.230069892s ago: executing program 4 (id=703): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x6, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 2m31.859994607s ago: executing program 4 (id=723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2m30.447652546s ago: executing program 4 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 2m24.635555544s ago: executing program 0 (id=749): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x6, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16, 0xfd}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0xe, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0xff, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xd000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x3000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x84, 0xfff]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.148704214s ago: executing program 0 (id=752): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xfb, 0x1, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x8, 0x2, 0x1, 0x4d, 0x7, 0x0, 0x44, 0x20, 0x9, 0xc, 0x6, 0x6f, 0x20e}, {0x0, 0x5, 0x38, 0x4, 0x84, 0x7, 0x3, 0x50, 0xc, 0x2, 0x7, 0x8, 0x20024a9}], 0xdfffffff}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x6, 0xf, 0x5, 0x8000000000000006, 0x3, 0x48000000000, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') 2m17.117856576s ago: executing program 0 (id=769): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) 2m15.06809093s ago: executing program 32 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='tcp 2049', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='2\n\x00', 0x2) 2m14.785936559s ago: executing program 0 (id=776): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = socket$inet6(0xa, 0x80002, 0x4) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getown(r0, 0x9) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x8000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) socket$key(0xf, 0x3, 0x2) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m11.709127201s ago: executing program 0 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000280)='nfsd\x00', 0x440, 0x0) 2m8.244495525s ago: executing program 0 (id=787): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) 1m52.427132812s ago: executing program 33 (id=787): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) 47.510059496s ago: executing program 6 (id=915): socket$can_raw(0x1d, 0x3, 0x1) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 45.357917574s ago: executing program 6 (id=918): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r0, &(0x7f000004b680)=""/102392, 0x18ff8) kexec_load(0x0, 0x5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000740), &(0x7f0000000800)=0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x200000000000005e, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x5000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0x0, 'veth0_to_team\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0x0, 0x1000, 0x5, 0x9, 0x9}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'virt_wifi0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x67, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) readv(r2, 0x0, 0x0) 34.531252599s ago: executing program 6 (id=941): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 30.000032072s ago: executing program 6 (id=949): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 23.0533002s ago: executing program 6 (id=959): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x4) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102400, 0x19000) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) 21.463763832s ago: executing program 6 (id=961): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) 19.608451877s ago: executing program 1 (id=967): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000840)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r7, 0x40044620, 0x0) 17.843090071s ago: executing program 2 (id=970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 16.376024352s ago: executing program 2 (id=972): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) 14.930239386s ago: executing program 2 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) accept4(r3, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 13.869893009s ago: executing program 2 (id=977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x457}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x188) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1', 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) close(r4) 13.54628731s ago: executing program 1 (id=978): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r3, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) 13.52845888s ago: executing program 5 (id=979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x101, 0xe7, 0x6, 0xfffffff8}]}) time(0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000140)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r5, 0x0, 0x0}) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee", 0x15}], 0x1) 12.773945624s ago: executing program 2 (id=980): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r5 = fanotify_init(0x40, 0x101000) fanotify_mark(r5, 0x1, 0x8000039, r4, 0x0) io_setup(0x9, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240)=0x1) 10.019379207s ago: executing program 5 (id=981): syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4000) setresgid(0xee00, 0xee01, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) 10.017152157s ago: executing program 2 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r4) 9.870731856s ago: executing program 1 (id=983): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 9.868508172s ago: executing program 3 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x61) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x48001000, 0xffffffffffffffff, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') lseek(r5, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 8.492717617s ago: executing program 5 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) setgroups(0x0, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000640)={{0x0, 0x3938700}}, 0x0) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) openat$vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read(r6, &(0x7f0000000240)=""/123, 0x7b) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x103}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.459532484s ago: executing program 3 (id=986): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e4000000000000000000000030000000002"], 0x0, 0x56}, 0x28) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) 6.077294461s ago: executing program 34 (id=961): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) 6.06795379s ago: executing program 3 (id=988): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x30000009}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x7, 0x9, 0x49a, {{0x14, 0x4, 0x2, 0x3b, 0x50, 0x67, 0x0, 0xd, 0x2f, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0xea, [@loopback]}, @timestamp_addr={0x44, 0x34, 0xf, 0x1, 0x8, [{@multicast2, 0x7}, {@rand_addr=0x64010101, 0x8}, {@local, 0xec}, {@local, 0x80000000}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}]}]}}}}}) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x140f, 0xa09, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008044}, 0x20008001) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x8080362, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r11, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 6.061674254s ago: executing program 5 (id=989): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {&(0x7f0000000300)=""/126, 0x7e}, {0x0}, {0x0}, {&(0x7f0000000240)=""/134, 0x86}, {0x0}, {&(0x7f0000000380)=""/153, 0x99}], 0x7}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) 5.265816283s ago: executing program 1 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="14000000040000000400"], 0x50) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x20) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b000600007a0001", 0x12, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r5, r4}, &(0x7f00000000c0)=""/83, 0x53, 0x0) keyctl$set_timeout(0xf, r5, 0x4) 4.692594687s ago: executing program 3 (id=991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0xd, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4b, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0) r4 = socket(0x18, 0x0, 0x1) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0xfd, 0x0, 0x0, 0x3}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) 4.689672771s ago: executing program 5 (id=992): pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, &(0x7f00000021c0)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa9f38f76eaac4202, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) 4.273795163s ago: executing program 1 (id=993): mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) creat(0x0, 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x102000000000001, 0x9, 0x1) r3 = socket(0x25, 0x801, 0x7) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0/file1\x00', 0x40, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x42, 0x0, &(0x7f0000000100)) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) getpeername$unix(r3, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 3.564587641s ago: executing program 3 (id=994): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300000000000000000000030000000003000000020000000000200000000000000000010500000020000004010000000000000f020000000061"], 0x0, 0x4f, 0x0, 0x1, 0x2}, 0x28) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000003000000040000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d1410c613d3f15ee5897251b7d070649db098c55bfd686bf9ad4fafcc20c4edcbd627594b095a62f18fa4054cf6d908b56ac243752cbe5033e467e03d71540d7ef7d678cc36bfeb30a69ad49a557e3427fabcf2670ef99d1e60a66e1c27f1f65382fce3aa46c635327627f7a10e5169d8fe0fd3c63ece8dabbcdd8a85e78c1254db7a7efd67fe5d07cd402243a7aac1b47cfca64d2175600d99c7f3c9345b4fafabd1f9481c3fd85f65947d5f48c145f96680061"], 0x50) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@broadcast]}) 2.928835527s ago: executing program 1 (id=995): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b00000000001c0016801800018014000b00330005dc"], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.741475068s ago: executing program 3 (id=996): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55", 0x3f}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000300000000001400000046ad00201d680000ac1e0001ffff02009404016011f3305280f125e6"], 0x2e) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 5 (id=997): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e40000000000000000000000300000000020000"], 0x0, 0x56}, 0x28) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7f028699e019 code=0x7ffc0000 [ 274.327000][ T30] audit: type=1326 audit(1785901093.554:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028699e019 code=0x7ffc0000 [ 274.410089][ T30] audit: type=1326 audit(1785901093.554:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f028699e019 code=0x7ffc0000 [ 277.099767][ T30] audit: type=1326 audit(1785901093.554:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7426 comm="syz.1.345" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028699e019 code=0x7ffc0000 [ 277.762002][ T7463] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 279.654936][ T7474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 280.623326][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12304 sclass=netlink_route_socket pid=7490 comm=syz.4.359 [ 280.804668][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 280.805623][ T5628] Bluetooth: hci5: command 0x1003 tx timeout [ 281.671887][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 281.671932][ T30] audit: type=1800 audit(1785901103.824:806): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.361" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 282.711042][ T30] audit: type=1400 audit(1785901104.864:807): avc: denied { getopt } for pid=7505 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 282.888259][ T7510] FAT-fs (nbd1): unable to read boot sector [ 283.017812][ T7510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'. [ 283.265864][ T7512] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 283.273833][ T7512] netlink: 756 bytes leftover after parsing attributes in process `syz.4.364'. [ 283.474757][ T7516] audit: audit_backlog=65 > audit_backlog_limit=64 [ 283.481423][ T7516] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 283.489274][ T7516] audit: backlog limit exceeded [ 283.786974][ T30] audit: type=1400 audit(1785901105.124:808): avc: denied { write } for pid=7505 comm="syz.1.363" name="functions" dev="configfs" ino=9146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 284.112105][ T30] audit: type=1400 audit(1785901105.224:809): avc: denied { bind } for pid=7505 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.022080][ T30] audit: type=1400 audit(1785901105.334:810): avc: denied { listen } for pid=7505 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.043752][ T30] audit: type=1326 audit(1785901105.354:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.4.364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f884779e019 code=0x7ffc0000 [ 286.070096][ T30] audit: type=1326 audit(1785901105.354:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7507 comm="syz.4.364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884779e019 code=0x7ffc0000 [ 291.327998][ T7555] No source specified [ 291.564837][ T7559] input: syz1 as /devices/virtual/input/input11 [ 292.122329][ T7557] syzkaller0: entered promiscuous mode [ 292.129539][ T7557] syzkaller0: entered allmulticast mode [ 292.142958][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 292.142997][ T30] audit: type=1400 audit(1785901114.134:878): avc: denied { write } for pid=7549 comm="syz.2.382" path="socket:[15188]" dev="sockfs" ino=15188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 292.563961][ T7558] misc userio: Invalid payload size [ 294.696028][ T7583] netlink: 'syz.4.371': attribute type 10 has an invalid length. [ 294.704896][ T7583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.371'. [ 294.745096][ T7583] bridge0: port 3(dummy0) entered blocking state [ 294.752694][ T7583] bridge0: port 3(dummy0) entered disabled state [ 294.760253][ T7583] dummy0: entered allmulticast mode [ 294.784970][ T7583] dummy0: entered promiscuous mode [ 295.011394][ T30] audit: type=1400 audit(1785901117.164:879): avc: denied { mount } for pid=7584 comm="syz.2.379" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 295.092983][ T7575] netlink: 'syz.3.376': attribute type 6 has an invalid length. [ 295.102034][ T7575] netlink: 'syz.3.376': attribute type 6 has an invalid length. [ 295.115260][ T7586] afs: Unknown parameter '@' [ 295.269387][ T7587] siw: device registration error -23 [ 297.060684][ T30] audit: type=1400 audit(1785901119.214:880): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 299.525241][ T7598] block nbd3: shutting down sockets [ 300.561765][ T7617] syzkaller0: entered promiscuous mode [ 300.567684][ T7617] syzkaller0: entered allmulticast mode [ 301.087777][ T7633] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5614] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7633] [ 301.543087][ T5760] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.822666][ T5760] usb 5-1: Using ep0 maxpacket: 8 [ 301.868636][ T7638] dummy0: entered allmulticast mode [ 301.887061][ T7638] dummy0: left allmulticast mode [ 302.353196][ T7640] syz_tun: entered allmulticast mode [ 302.680542][ T5630] Bluetooth: hci2: unexpected event for opcode 0x202d [ 305.666854][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 306.005666][ T10] usb 1-1: config 100 has an invalid interface number: 124 but max is 0 [ 306.116219][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.118569][ T10] usb 1-1: config 100 has no interface number 0 [ 306.325081][ T10] usb 1-1: config 100 interface 124 has no altsetting 0 [ 307.243334][ T10] usb 1-1: string descriptor 0 read error: -71 [ 307.330625][ T10] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 307.407148][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.971082][ T5760] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 308.047158][ T10] usb 1-1: can't set config #100, error -71 [ 308.057250][ T5760] usb 5-1: can't read configurations, error -71 [ 308.152837][ T30] audit: type=1400 audit(1785901130.264:881): avc: denied { accept } for pid=7675 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 308.178510][ T5630] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 308.193698][ T10] usb 1-1: USB disconnect, device number 2 [ 309.925080][ T7709] pim6reg: entered allmulticast mode [ 310.195471][ T7686] pim6reg: left allmulticast mode [ 313.448756][ T7736] capability: warning: `syz.0.404' uses deprecated v2 capabilities in a way that may be insecure [ 313.934716][ T7730] syzkaller0: entered promiscuous mode [ 313.940350][ T7730] syzkaller0: entered allmulticast mode [ 314.456267][ T7743] netlink: 'syz.1.401': attribute type 7 has an invalid length. [ 316.220733][ T30] audit: type=1400 audit(1785901138.204:882): avc: denied { execute } for pid=7749 comm="syz.1.407" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 316.325097][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 316.944768][ T30] audit: type=1400 audit(1785901138.474:883): avc: denied { connect } for pid=7755 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 316.974723][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.152237][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 318.534175][ T30] audit: type=1400 audit(1785901140.484:884): avc: denied { write } for pid=7772 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 318.977947][ T7785] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 319.628522][ T30] audit: type=1400 audit(1785901141.784:885): avc: denied { connect } for pid=7792 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 320.940833][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 321.097099][ T10] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 321.112440][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.130782][ T10] usb 4-1: Product: syz [ 321.136856][ T10] usb 4-1: Manufacturer: syz [ 321.145447][ T10] usb 4-1: SerialNumber: syz [ 321.164449][ T10] usb 4-1: config 0 descriptor?? [ 321.191842][ T10] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 007 [ 321.242610][ T5724] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 321.388196][ T7794] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 321.444042][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 321.464499][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.492939][ T5724] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 321.512403][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.577029][ T5724] usb 3-1: config 0 descriptor?? [ 321.647519][ T7794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.740688][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.469013][ T10] (null): failure reading functionality [ 322.588112][ T7816] syzkaller0: entered promiscuous mode [ 322.593845][ T7816] syzkaller0: entered allmulticast mode [ 322.864060][ T10] i2c i2c-1: failure reading functionality [ 323.340805][ T30] audit: type=1400 audit(1785901145.414:886): avc: denied { accept } for pid=7808 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 323.385576][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 323.438312][ T10] usb 4-1: USB disconnect, device number 7 [ 323.444079][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 323.455809][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 323.462859][ T7822] ceph: Unknown parameter 'addr' [ 323.499333][ T7822] netlink: 'syz.1.425': attribute type 61 has an invalid length. [ 323.532094][ T5724] usb 3-1: USB disconnect, device number 3 [ 323.884006][ T30] audit: type=1400 audit(1785901146.014:887): avc: denied { connect } for pid=7821 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.856072][ T30] audit: type=1400 audit(1785901146.014:888): avc: denied { write } for pid=7821 comm="syz.1.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.951127][ T7831] rdma_rxe: rxe_newlink: failed to add lo [ 325.728612][ T30] audit: type=1400 audit(1785901147.884:889): avc: denied { connect } for pid=7844 comm="syz.3.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.761530][ T7843] trusted_key: encrypted_key: keylen parameter is missing [ 325.774996][ T7847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7847 comm=syz.1.429 [ 326.089196][ T7850] input: syz1 as /devices/virtual/input/input12 [ 326.095734][ T7850] input: failed to attach handler leds to device input12, error: -6 [ 328.153853][ T7861] misc userio: Invalid payload size [ 330.352854][ T30] audit: type=1400 audit(1785901152.504:890): avc: denied { write } for pid=7870 comm="syz.2.437" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 330.451082][ T30] audit: type=1400 audit(1785901152.544:891): avc: denied { open } for pid=7870 comm="syz.2.437" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 331.443789][ T7874] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 332.119782][ T30] audit: type=1400 audit(1785901154.264:892): avc: denied { write } for pid=7870 comm="syz.2.437" name="usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 332.219852][ T5630] Bluetooth: Unexpected start frame (len 10) [ 332.249138][ T30] audit: type=1400 audit(1785901154.264:893): avc: denied { open } for pid=7870 comm="syz.2.437" path="/dev/usbmon4" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.264778][ T30] audit: type=1400 audit(1785901154.304:894): avc: denied { ioctl } for pid=7870 comm="syz.2.437" path="/dev/usbmon4" dev="devtmpfs" ino=729 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 333.365196][ T7894] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 335.227374][ T30] audit: type=1400 audit(1785901154.574:895): avc: denied { shutdown } for pid=7882 comm="syz.0.441" lport=58233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.461164][ T30] audit: type=1400 audit(1785901154.614:896): avc: denied { block_suspend } for pid=7882 comm="syz.0.441" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 335.792493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 336.789255][ T7906] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 337.529190][ T7926] CIFS: Attempting to mount //127.0.0.1/share [ 337.803581][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 338.340439][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 338.372676][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 338.939791][ T7936] bridge0: port 3(dummy0) entered disabled state [ 338.946270][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.953612][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.983909][ T7926] CIFS: VFS: Error connecting to socket. Aborting operation. [ 339.008143][ T7926] CIFS: VFS: cifs_mount failed w/return code = -4 [ 339.037203][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.046852][ T7936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.076609][ T7936] veth0_vlan: left promiscuous mode [ 339.264221][ T7943] netlink: 'syz.4.455': attribute type 2 has an invalid length. [ 339.322483][ T5821] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.342264][ T30] audit: type=1326 audit(1785901161.494:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7946 comm="syz.1.456" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f028699e019 code=0x0 [ 339.498833][ T30] audit: type=1400 audit(1785901161.534:898): avc: denied { accept } for pid=7942 comm="syz.4.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 339.588587][ T9] syz2: Port: 1 Link DOWN [ 339.994332][ T7960] comedi comedi1: pcl724: I/O base address or length out of range [ 341.396958][ T7976] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 341.521904][ T5630] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 341.752481][ T7714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.775038][ T7714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.983163][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.145727][ T30] audit: type=1400 audit(1785901164.304:899): avc: denied { write } for pid=7951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.909489][ T30] audit: type=1400 audit(1785901165.064:900): avc: denied { write } for pid=7994 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.168408][ T8004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.465'. [ 344.012773][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 344.286555][ T8035] xt_connbytes: Forcing CT accounting to be enabled [ 344.732462][ T30] audit: type=1400 audit(1785901166.864:901): avc: denied { write } for pid=8011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.717897][ T30] audit: type=1400 audit(1785901167.874:902): avc: denied { write } for pid=8047 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.723560][ T5630] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 345.837157][ T5630] Bluetooth: hci4: Injecting HCI hardware error event [ 345.851799][ T5628] Bluetooth: hci4: hardware error 0x00 [ 347.088698][ T5630] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 347.926723][ T8085] syzkaller0: entered promiscuous mode [ 347.932310][ T8085] syzkaller0: entered allmulticast mode [ 348.464697][ T5628] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 348.546195][ T8102] openvswitch: netlink: Flow actions attr not present in new flow. [ 348.965339][ T8109] virtio-fs: tag < : kernel [ 348.965339][ T8109] priority : 100 [ 348.965339][ T8109] refcnt : 1 [ 348.965339][ T8109] selftest : passed [ 348.965339][ T8109] internal : no [ 348.965339][ T8109] type : sig [ 348.965339][ T8109] [ 348.965339][ T8109] name : ecdh-nist-p384 [ 348.965339][ T8109] driver : ecdh-nist-p384-generic [ 348.965339][ T8109] module : kernel [ 348.965339][ T8109] priority : 100 [ 348.965339][ T8109] refcnt : 1 [ 348.965339][ T8109] selftest : passed [ 348.965339][ T8109] internal : no [ 348.965339][ T8109] type : kpp [ 348.965339][ T8109] [ 348.965339][ T8109] name : ecdh-nist-p256 [ 348.965339][ T8109] driver : ecdh-nist-p256-generic [ 348.965339][ T8109] module : kernel [ 348.965339][ T8109] priority : 100 [ 348.965339][ T8109] refcnt : 1 [ 348.965339][ T8109] selftest : passed [ 348.965339][ T8109] internal : no [ 348.965339][ T8109] type : kpp [ 348.965339][ T8109] [ 348.965339][ T8109] name : ecdh-nist-p192 [ 348.965339][ T8109] driver : ecdh-nist-p192-generic [ 348.965339][ T8109] module : kernel [ 348.965339][ T8109] priority : 100 [ 348.965339][ T8109] refcnt : 1 [ 348.965339][ T8109] selftest : passed [ 348.965339][ T8109] internal : no [ 348.965339][ T8109] type : kpp [ 348.965339][ T8109] [ 348.965339][ T8109] name : zstd [ 348.965339][ T8109] driver : zstd-generic [ 348.965339][ T8109] module : kernel [ 348.965339][ T8109] priority : 0 [ 348.965339][ T8109] refcnt : 2 [ 348.965339][ T8109] selftest : passed [ 348.965339][ T8109] internal : no [ 348.965339][ T8109] type : acomp [ 348.965339][ T8109] [ 348.965339][ T8109] name : 842 [ 348.965339][ T8109] driver : 842-scomp [ 348.965339][ T8109] module : kernel [ 348.965339][ T8109] priority : 100 [ 349.062244][ T8109] netlink: 'syz.1.486': attribute type 11 has an invalid length. [ 349.768548][ T30] audit: type=1400 audit(1785901171.754:903): avc: denied { write } for pid=8063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.929728][ T8121] sg_write: data in/out 117331068/6 bytes for SCSI command 0x3-- guessing data in; [ 349.929728][ T8121] program syz.3.495 not setting count and/or reply_len properly [ 350.662634][ T8135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.498'. [ 351.167778][ T30] audit: type=1400 audit(1785901173.324:904): avc: denied { write } for pid=8126 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.372530][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 351.503487][ T30] audit: type=1400 audit(1785901173.654:905): avc: denied { read } for pid=8148 comm="syz.3.504" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 351.592224][ T30] audit: type=1400 audit(1785901173.744:906): avc: denied { map } for pid=8148 comm="syz.3.504" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 351.634633][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 351.662115][ T10] usb 5-1: config 4 has an invalid interface number: 17 but max is 0 [ 351.682231][ T10] usb 5-1: config 4 has no interface number 0 [ 351.731999][ T10] usb 5-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 351.812787][ T8153] FAT-fs (nbd0): unable to read boot sector [ 351.841500][ T10] usb 5-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 351.880609][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 351.931029][ T10] usb 5-1: config 4 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 351.995605][ T10] usb 5-1: config 4 interface 17 has no altsetting 0 [ 352.042508][ T10] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 352.071709][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.121245][ T10] usb 5-1: Product: syz [ 352.158271][ T10] usb 5-1: Manufacturer: syz [ 352.238600][ T10] usb 5-1: SerialNumber: syz [ 352.592758][ T8138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 352.868159][ T30] audit: type=1400 audit(1785901175.024:907): avc: denied { read write } for pid=8162 comm="syz.2.509" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 352.898731][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 352.932605][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.508'. [ 353.002460][ T30] audit: type=1400 audit(1785901175.054:908): avc: denied { open } for pid=8162 comm="syz.2.509" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.086901][ T10] kvaser_usb 5-1:4.17: error -ENODEV: Cannot get usb endpoint(s) [ 354.026108][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.027277][ T10] usb 5-1: USB disconnect, device number 8 [ 354.045031][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.072422][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.094992][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.105940][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.113991][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.130846][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.140565][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.252465][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 354.268640][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.321997][ T5760] hid-generic 0006:0004:0009.0001: unknown main item tag 0x0 [ 354.554905][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 80, changing to 7 [ 354.709646][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 354.720852][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.732496][ T9] usb 1-1: Product: syz [ 354.805008][ T9] usb 1-1: Manufacturer: syz [ 354.805943][ T5760] hid-generic 0006:0004:0009.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 354.823897][ T9] usb 1-1: SerialNumber: syz [ 355.114808][ T9] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 355.127546][ T9] usb 1-1: found format II with max.bitrate = 32769, frame size=65535 [ 355.147128][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 355.417788][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 355.437004][ T8183] fido_id[8183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.799842][ T9] usb 1-1: USB disconnect, device number 3 [ 356.124129][ T30] audit: type=1400 audit(1785901178.284:909): avc: denied { name_bind } for pid=8218 comm="syz.0.529" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 356.632441][ T5760] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 356.653399][ T7714] wlan0: Trigger new scan to find an IBSS to join [ 356.814313][ T5760] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 356.853943][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.906775][ T5760] usb 3-1: config 0 descriptor?? [ 357.165099][ T5760] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 357.366006][ T5760] [drm:udl_init] *ERROR* Selecting channel failed [ 357.572180][ T5760] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 357.602559][ T5760] [drm] Initialized udl on minor 2 [ 357.669296][ T5760] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 357.711786][ T5760] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 357.793183][ T5760] usb 3-1: USB disconnect, device number 4 [ 357.828572][ T805] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 358.633611][ T8256] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.682502][ T57] wlan0: Trigger new scan to find an IBSS to join [ 359.781818][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 359.995119][ T5760] usb 1-1: Using ep0 maxpacket: 8 [ 360.451893][ T5760] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 360.502055][ T5760] usb 1-1: config 0 has no interface number 0 [ 360.575351][ T5760] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 360.683348][ T5760] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 360.757484][ T5760] usb 1-1: config 0 interface 200 has no altsetting 0 [ 360.890284][ T5760] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 360.919990][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.940864][ T5760] usb 1-1: Product: syz [ 360.949944][ T5760] usb 1-1: Manufacturer: syz [ 360.975113][ T5760] usb 1-1: SerialNumber: syz [ 361.023907][ T5760] usb 1-1: config 0 descriptor?? [ 361.310707][ T5760] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input13 [ 361.348706][ T5760] usb 1-1: USB disconnect, device number 4 [ 361.434617][ T30] audit: type=1326 audit(1785901183.594:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.482483][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 361.554119][ T13] wlan0: Creating new IBSS network, BSSID f6:32:92:58:f9:e1 [ 361.567817][ T30] audit: type=1326 audit(1785901183.594:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.674055][ T30] audit: type=1326 audit(1785901183.594:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.677030][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.772494][ T30] audit: type=1326 audit(1785901183.594:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.794232][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 361.822621][ T30] audit: type=1326 audit(1785901183.604:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.858842][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.873826][ T30] audit: type=1326 audit(1785901183.614:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac3d9e019 code=0x7ffc0000 [ 361.919258][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 361.968098][ T30] audit: type=1326 audit(1785901183.664:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdac3d5e84e code=0x7ffc0000 [ 362.035186][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.053836][ T8293] bridge0: entered allmulticast mode [ 362.059355][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.078936][ T10] usb 2-1: Product: syz [ 362.106706][ T10] usb 2-1: Manufacturer: syz [ 362.136001][ T10] usb 2-1: SerialNumber: syz [ 362.140659][ T30] audit: type=1326 audit(1785901183.664:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdac3d5e84e code=0x7ffc0000 [ 362.174380][ T30] audit: type=1326 audit(1785901183.674:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdac3d5e84e code=0x7ffc0000 [ 362.239428][ T30] audit: type=1326 audit(1785901183.674:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.3.545" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdac3d5e84e code=0x7ffc0000 [ 362.266121][ T8272] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 363.006033][ T8272] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.241707][ T8357] tipc: Started in network mode [ 366.255952][ T8357] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 366.281478][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 366.724242][ T8366] openvswitch: netlink: Flow actions attr not present in new flow. [ 367.423905][ T10] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 367.474251][ T10] cdc_ncm 2-1:1.0: bind() failure [ 367.515465][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 367.535608][ T10] cdc_ncm 2-1:1.1: bind() failure [ 367.592537][ T10] usb 2-1: USB disconnect, device number 3 [ 369.655528][ T5622] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 369.830095][ T5622] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 369.868010][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.898026][ T5622] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.936897][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.035389][ T8398] syzkaller0: entered promiscuous mode [ 370.041029][ T8398] syzkaller0: entered allmulticast mode [ 370.448810][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 370.465456][ T5622] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 370.482569][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 370.503800][ T5622] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.558548][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.588864][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 370.615503][ T5622] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 370.627475][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 370.640800][ T5622] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.659509][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 370.672553][ T5622] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 370.705940][ T5622] usb 2-1: string descriptor 0 read error: -22 [ 370.713684][ T5622] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 370.726475][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.829213][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 370.867240][ T5622] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 371.022467][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 371.037081][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.063189][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 371.082319][ T10] usb 1-1: string descriptor 0 read error: -22 [ 371.100164][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 371.148272][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 371.234745][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 371.270499][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 371.679810][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 371.876046][ T10] usb 1-1: media controller created [ 374.045133][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.080737][ T5622] usb 2-1: USB disconnect, device number 4 [ 374.135025][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 374.366128][ T10] usb 1-1: USB disconnect, device number 5 [ 374.440858][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 374.440877][ T30] audit: type=1400 audit(1785901196.594:972): avc: denied { load_policy } for pid=8428 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 374.442902][ T805] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 374.451208][ T8430] SELinux: ebitmap: empty map [ 374.515276][ T8430] SELinux: failed to load policy [ 374.659788][ T8432] syzkaller0: entered promiscuous mode [ 374.665618][ T8432] syzkaller0: entered allmulticast mode [ 374.683294][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 374.761745][ T805] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.789041][ T805] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 374.879481][ T805] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 375.003154][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.130917][ T805] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 375.142738][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.151660][ T805] usb 4-1: Product: syz [ 375.166768][ T805] usb 4-1: Manufacturer: syz [ 375.180980][ T805] usb 4-1: SerialNumber: syz [ 375.227247][ T805] usb 4-1: config 0 descriptor?? [ 375.268065][ T8434] netlink: 'syz.2.592': attribute type 12 has an invalid length. [ 375.289405][ T8434] netlink: 'syz.2.592': attribute type 29 has an invalid length. [ 375.300361][ T8434] netlink: 148 bytes leftover after parsing attributes in process `syz.2.592'. [ 375.320864][ T8434] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 375.348728][ T8434] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 375.357116][ T30] audit: type=1400 audit(1785901197.514:973): avc: denied { read } for pid=8437 comm="syz.0.594" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 375.429867][ T30] audit: type=1400 audit(1785901197.514:974): avc: denied { open } for pid=8437 comm="syz.0.594" path="/116/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 375.516345][ T30] audit: type=1400 audit(1785901197.674:975): avc: denied { create } for pid=8442 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.544350][ T805] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 375.577068][ T4962] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 375.585069][ T30] audit: type=1400 audit(1785901197.674:976): avc: denied { connect } for pid=8442 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.637824][ T30] audit: type=1400 audit(1785901197.774:977): avc: denied { write } for pid=8442 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.677252][ T4962] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 375.743718][ T4962] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 375.833362][ T4962] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 375.899207][ T5611] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 375.902330][ T805] usb 4-1: USB disconnect, device number 8 [ 375.959241][ T4962] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 376.103857][ T30] audit: type=1400 audit(1785901198.194:978): avc: denied { map } for pid=8452 comm="syz.4.601" path="socket:[18332]" dev="sockfs" ino=18332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 377.621931][ T8473] syzkaller0: entered promiscuous mode [ 377.628652][ T8473] syzkaller0: entered allmulticast mode [ 377.995578][ T8474] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.607'. [ 378.298612][ T8485] fuse: Bad value for 'fd' [ 378.455497][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.497073][ T10] IPVS: starting estimator thread 0... [ 378.593113][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 379.042753][ T8489] IPVS: using max 38 ests per chain, 91200 per kthread [ 379.084357][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 379.114117][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 379.128785][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.151979][ T9] usb 3-1: Product: syz [ 379.163622][ T9] usb 3-1: Manufacturer: syz [ 379.168398][ T9] usb 3-1: SerialNumber: syz [ 379.223000][ T9] usb 3-1: config 0 descriptor?? [ 380.729564][ T30] audit: type=1400 audit(1785901202.884:979): avc: denied { ioctl } for pid=8491 comm="syz.0.614" path="cgroup:[4026532792]" dev="nsfs" ino=4026532792 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 380.964442][ T9] airspy 3-1:0.0: Board ID: 00 [ 380.972489][ T9] airspy 3-1:0.0: Firmware version: [ 381.175435][ T9] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 381.275536][ T9] airspy 3-1:0.0: Registered as swradio24 [ 381.301511][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 381.331142][ T9] usb 3-1: USB disconnect, device number 5 [ 381.632702][ T805] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 381.803858][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 381.820574][ T805] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 381.858937][ T805] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 381.891214][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.915706][ T805] usb 2-1: Product: syz [ 381.935692][ T805] usb 2-1: Manufacturer: syz [ 381.951196][ T805] usb 2-1: SerialNumber: syz [ 381.976427][ T805] usb 2-1: config 0 descriptor?? [ 382.014241][ T805] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 382.027548][ T805] usb 2-1: setting power ON [ 382.038185][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 382.068791][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 382.090532][ T805] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 382.603752][ T805] usb 2-1: media controller created [ 382.608461][ T8515] dvb-usb: bulk message failed: -22 (3/0) [ 382.624951][ T5760] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 382.638345][ T8515] dvb-usb: bulk message failed: -22 (5/0) [ 382.713570][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.804958][ T5760] usb 3-1: Using ep0 maxpacket: 16 [ 382.822870][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.847923][ T5760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.864812][ T805] usb 2-1: selecting invalid altsetting 6 [ 382.872435][ T5760] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.888784][ T805] usb 2-1: digital interface selection failed (-22) [ 382.905156][ T5760] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.915012][ T805] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 382.931795][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.941137][ T805] usb 2-1: setting power OFF [ 382.957823][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 382.984195][ T805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 382.998253][ T805] (NULL device *): no alternate interface [ 383.014443][ T5760] usb 3-1: config 0 descriptor?? [ 383.090949][ T805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 383.126479][ T805] usb 2-1: USB disconnect, device number 5 [ 383.275525][ T5760] usbhid 3-1:0.0: can't add hid device: -71 [ 383.310216][ T5760] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 383.377232][ T5760] usb 3-1: USB disconnect, device number 6 [ 384.075276][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.088319][ T8559] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.108721][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.141404][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.152512][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.164385][ T8559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.175344][ T8559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.191415][ T8559] veth1_vlan: left promiscuous mode [ 384.197960][ T8559] veth0_vlan: left promiscuous mode [ 384.206799][ T8559] veth0_vlan: entered promiscuous mode [ 384.216866][ T8559] veth1_vlan: entered promiscuous mode [ 384.229876][ T8559] veth1_macvtap: left promiscuous mode [ 384.236718][ T8559] veth0_macvtap: left promiscuous mode [ 384.243717][ T8559] veth0_macvtap: entered promiscuous mode [ 384.252417][ T8559] veth1_macvtap: entered promiscuous mode [ 384.333341][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.343070][ T7702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.433207][ T8563] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 384.433894][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.451146][ T7702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.122397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 385.994225][ T30] audit: type=1400 audit(1785901208.144:980): avc: denied { write } for pid=8592 comm="syz.1.654" name="functions" dev="configfs" ino=9146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.073240][ T30] audit: type=1400 audit(1785901208.204:981): avc: denied { write } for pid=8592 comm="syz.1.654" name="c.1" dev="configfs" ino=9504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.137298][ T30] audit: type=1400 audit(1785901208.204:982): avc: denied { write } for pid=8592 comm="syz.1.654" name="c.1" dev="configfs" ino=9504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.184592][ T5823] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 386.186447][ T30] audit: type=1400 audit(1785901208.284:983): avc: denied { cmd } for pid=8596 comm="iou-wrk-8597" path="socket:[19579]" dev="sockfs" ino=19579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 386.655404][ T5821] wlan0: Trigger new scan to find an IBSS to join [ 386.794269][ T5823] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 386.837764][ T5823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.880894][ T5823] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 386.907204][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.927822][ T5823] usb 4-1: Product: syz [ 386.936736][ T5823] usb 4-1: Manufacturer: syz [ 386.950450][ T5823] usb 4-1: SerialNumber: syz [ 387.000021][ T5823] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 387.223432][ T4962] bcm5974 4-1:1.0: could not read from device [ 387.421307][ T5823] bcm5974 4-1:1.0: could not read from device [ 387.462450][ T4962] bcm5974 4-1:1.0: could not read from device [ 387.494649][ T5823] input: failed to attach handler mousedev to device input15, error: -5 [ 387.684286][ T4962] bcm5974 4-1:1.0: could not read from device [ 387.689103][ T5823] usb 4-1: USB disconnect, device number 9 [ 388.748695][ T805] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 388.947411][ T805] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.972443][ T805] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.002529][ T805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.011692][ T805] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 389.037686][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.076489][ T805] usb 5-1: config 0 descriptor?? [ 389.105214][ T805] usbhid 5-1:0.0: can't add hid device: -22 [ 389.111910][ T805] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 389.322016][ T805] usb 5-1: USB disconnect, device number 9 [ 390.660917][ T13] wlan0: Trigger new scan to find an IBSS to join [ 391.604692][ T7708] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.689845][ T13] wlan0: Creating new IBSS network, BSSID 1a:f2:74:96:7f:6f [ 392.152377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 392.212373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 392.322386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 393.785032][ T5823] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 394.722510][ T5823] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.127812][ T5823] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.141693][ T5823] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.151073][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.400089][ T5823] usb 5-1: can't set config #16, error -71 [ 397.135160][ T5823] usb 5-1: USB disconnect, device number 10 [ 398.023460][ T30] audit: type=1400 audit(1785901220.174:984): avc: denied { map } for pid=8654 comm="syz.2.674" path="/dev/ublkc1" dev="devtmpfs" ino=2908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.122103][ T5628] Bluetooth: hci1: unexpected event for opcode 0x202d [ 400.429688][ T805] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 400.659533][ T805] usb 2-1: config 100 has an invalid interface number: 124 but max is 0 [ 400.693270][ T805] usb 2-1: config 100 has no interface number 0 [ 400.729738][ T805] usb 2-1: config 100 interface 124 has no altsetting 0 [ 400.800838][ T805] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 400.832489][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.872665][ T805] usb 2-1: Product: syz [ 400.899895][ T805] usb 2-1: Manufacturer: syz [ 400.927785][ T805] usb 2-1: SerialNumber: syz [ 401.189518][ T805] usb 2-1: can't set config #100, error -71 [ 401.274699][ T805] usb 2-1: USB disconnect, device number 6 [ 402.006410][ T805] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 402.143267][ T8691] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 402.195555][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.206048][ T805] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.233107][ T805] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 402.275286][ T805] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 402.315191][ T805] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.348549][ T805] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.389546][ T805] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 402.401928][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.412031][ T805] usb 3-1: Product: syz [ 402.417012][ T805] usb 3-1: Manufacturer: syz [ 402.422120][ T805] usb 3-1: SerialNumber: syz [ 402.706727][ T5716] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 403.034377][ T8707] nbd3: detected capacity change from 0 to 8 [ 404.762448][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 404.856740][ T5628] block nbd3: Receive control failed (result -32) [ 404.868172][ T5716] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 404.876507][ T8708] block nbd3: shutting down sockets [ 404.877167][ T5716] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 404.893440][ T5716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.903839][ T5716] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 404.915868][ T5716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 404.926601][ T5716] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.939970][ T5716] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.952479][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.043219][ T5731] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 405.179698][ T5716] usb 2-1: GET_CAPABILITIES returned 0 [ 405.202244][ T5716] usbtmc 2-1:16.0: can't read capabilities [ 405.226258][ T5731] usb 5-1: config 100 has an invalid interface number: 124 but max is 0 [ 405.260967][ T5731] usb 5-1: config 100 has no interface number 0 [ 405.295902][ T5731] usb 5-1: config 100 interface 124 has no altsetting 0 [ 405.352917][ T5731] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 405.375626][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.412489][ T5731] usb 5-1: Product: syz [ 405.455442][ T5731] usb 5-1: Manufacturer: syz [ 405.483746][ T5731] usb 5-1: SerialNumber: syz [ 405.544386][ T5731] usb 5-1: can't set config #100, error -71 [ 405.617809][ T5731] usb 5-1: USB disconnect, device number 11 [ 405.618684][ T5716] usb 2-1: USB disconnect, device number 7 [ 405.887679][ T805] usb 3-1: USB disconnect, device number 7 [ 406.523319][ T30] audit: type=1400 audit(1785901228.684:985): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 407.112501][ T805] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 407.282683][ T805] usb 1-1: Using ep0 maxpacket: 8 [ 407.308495][ T805] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 407.348348][ T805] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 407.376887][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.408745][ T805] usb 1-1: Product: syz [ 407.438994][ T805] usb 1-1: Manufacturer: syz [ 407.472663][ T805] usb 1-1: SerialNumber: syz [ 407.520083][ T805] usb 1-1: config 0 descriptor?? [ 407.545445][ T805] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 407.589421][ T805] usb 1-1: setting power ON [ 407.611681][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 407.704059][ T805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 407.767883][ T8747] dvb-usb: bulk message failed: -22 (3/0) [ 407.794392][ T805] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 407.816725][ T8747] dvb-usb: bulk message failed: -22 (5/0) [ 407.839621][ T805] usb 1-1: media controller created [ 407.979314][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.081015][ T805] usb 1-1: selecting invalid altsetting 6 [ 408.097651][ T805] usb 1-1: digital interface selection failed (-22) [ 408.105218][ T805] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 408.150856][ T805] usb 1-1: setting power OFF [ 408.582722][ T5716] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 408.788931][ T5716] usb 4-1: config 100 has an invalid interface number: 124 but max is 0 [ 408.887107][ T5716] usb 4-1: config 100 has no interface number 0 [ 408.955364][ T5716] usb 4-1: config 100 interface 124 has no altsetting 0 [ 409.047260][ T5716] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 409.131266][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.222831][ T5716] usb 4-1: Product: syz [ 409.274212][ T5716] usb 4-1: Manufacturer: syz [ 409.343643][ T5716] usb 4-1: SerialNumber: syz [ 409.613533][ T805] dvb-usb: bulk message failed: -22 (2/0) [ 409.677111][ T5823] IPVS: starting estimator thread 0... [ 409.846968][ T8779] IPVS: using max 36 ests per chain, 86400 per kthread [ 410.812883][ T30] audit: type=1400 audit(1785901232.964:986): avc: denied { write } for pid=8783 comm="syz.1.715" name="functions" dev="configfs" ino=9146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 411.132708][ T805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 411.152436][ T805] (NULL device *): no alternate interface [ 411.239140][ T8788] binder: 8786:8788 ioctl c0306201 200000000440 returned -22 [ 411.407407][ T30] audit: type=1400 audit(1785901233.574:987): avc: denied { write } for pid=8783 comm="syz.1.715" name="header" dev="configfs" ino=21350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 411.440755][ T805] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 411.488813][ T805] usb 1-1: USB disconnect, device number 6 [ 411.505775][ T5716] idmouse 4-1:100.124: Unable to find bulk-in endpoint. [ 411.692931][ T5716] usb 4-1: USB disconnect, device number 10 [ 412.212515][ T30] audit: type=1400 audit(1785901234.324:988): avc: denied { shutdown } for pid=8806 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 412.669165][ T5716] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 413.451713][ T5716] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.487837][ T5716] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 413.521833][ T5716] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 413.551907][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.565121][ T30] audit: type=1400 audit(1785901235.724:989): avc: denied { search } for pid=8816 comm="syz.4.726" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 413.622915][ T5724] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 413.639400][ T30] audit: type=1400 audit(1785901235.724:990): avc: denied { write } for pid=8816 comm="syz.4.726" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 413.669840][ T30] audit: type=1400 audit(1785901235.724:991): avc: denied { open } for pid=8816 comm="syz.4.726" path="/142/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 413.676320][ T5716] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 413.702832][ T8815] kvm: pic: level sensitive irq not supported [ 413.703265][ T8815] kvm: pic: single mode not supported [ 413.754123][ T8815] kvm: pic: level sensitive irq not supported [ 413.787581][ T8815] kvm: pic: single mode not supported [ 413.824832][ T8815] kvm: pic: level sensitive irq not supported [ 413.855234][ T5716] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 413.872165][ T8815] kvm: pic: single mode not supported [ 413.872185][ T8815] kvm: pic: level sensitive irq not supported [ 413.913238][ T8815] kvm: pic: single mode not supported [ 414.074289][ T8805] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 414.092102][ T8805] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 414.103148][ T8805] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 414.225916][ T8805] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 414.315722][ T5716] usb 2-1: USB disconnect, device number 8 [ 414.387260][ T5716] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 414.401190][ T5716] spcp8x5 2-1:1.0: device disconnected [ 415.406600][ T8834] syzkaller0: entered promiscuous mode [ 415.412215][ T8834] syzkaller0: entered allmulticast mode [ 415.582859][ T30] audit: type=1400 audit(1785901237.734:992): avc: denied { name_bind } for pid=8838 comm="syz.3.733" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 415.843683][ T5724] usb 1-1: not running at top speed; connect to a high speed hub [ 416.064045][ T5724] usb 1-1: New USB device found, idVendor=046d, idProduct=082d, bcdDevice= 1.00 [ 416.078535][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.150832][ T5724] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:082d) [ 416.389013][ T5724] videodev: could not get a free minor [ 416.409988][ T5724] uvcvideo 1-1:1.1: Failed to register meta-cap device (-23). [ 417.773811][ T5716] usb 1-1: USB disconnect, device number 7 [ 418.460569][ T8892] syzkaller0: entered promiscuous mode [ 418.466296][ T8892] syzkaller0: entered allmulticast mode [ 419.590424][ T30] audit: type=1400 audit(1785901241.744:993): avc: denied { read write } for pid=8898 comm="syz.3.750" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 419.618691][ T30] audit: type=1400 audit(1785901241.744:994): avc: denied { open } for pid=8898 comm="syz.3.750" path="/152/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 421.046352][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 421.061229][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 421.086987][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x64c4 instead [ 421.147040][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xa730 instead [ 421.197928][ T8921] jffs2: Empty flash at 0x00000040 ends at 0x00000e3c [ 421.208594][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e3c: 0xffff instead [ 421.221815][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e40: 0x4942 instead [ 421.260499][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e44: 0x0001 instead [ 421.299287][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e48: 0xefff instead [ 421.341275][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e7c: 0xbdb3 instead [ 421.383930][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000f28: 0xc316 instead [ 421.421188][ T8921] jffs2: Further such events for this erase block will not be printed [ 421.456417][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 421.499875][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 421.515280][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x64c4 instead [ 421.526888][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xa730 instead [ 421.557190][ T8921] jffs2: Empty flash at 0x00001040 ends at 0x00001e3c [ 421.572167][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e3c: 0xffff instead [ 421.677683][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e40: 0x4942 instead [ 421.919217][ T30] audit: type=1400 audit(1785901244.064:996): avc: denied { bind } for pid=8929 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.166134][ T30] audit: type=1400 audit(1785901243.984:995): avc: denied { ioctl } for pid=8929 comm="syz.1.757" path="socket:[20208]" dev="sockfs" ino=20208 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.199000][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e44: 0x0001 instead [ 422.532802][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e48: 0xefff instead [ 422.553853][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e7c: 0xf9ef instead [ 422.564916][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001f28: 0xc316 instead [ 422.575469][ T8921] jffs2: Further such events for this erase block will not be printed [ 422.583879][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 422.596273][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 422.606845][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x64c4 instead [ 422.669326][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xa730 instead [ 422.703404][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 422.723999][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 422.738052][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x64c4 instead [ 422.753451][ T8938] binder: 8937:8938 ioctl c0306201 200000000080 returned -14 [ 422.765187][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xa730 instead [ 422.781900][ T8938] binder: 8937:8938 ioctl c0306201 2000000003c0 returned -14 [ 422.801689][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 422.812976][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 422.825089][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x64c4 instead [ 422.838099][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xa730 instead [ 422.857793][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 422.930051][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 422.947641][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x64c4 instead [ 422.961212][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xa730 instead [ 422.974479][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 422.992701][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 423.126090][ T8944] syzkaller0: entered promiscuous mode [ 423.131689][ T8944] syzkaller0: entered allmulticast mode [ 423.226764][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x64c4 instead [ 423.536066][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xa730 instead [ 423.571352][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 423.611478][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 423.628087][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x64c4 instead [ 423.641232][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xa730 instead [ 423.657487][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 423.681933][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 423.742553][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x64c4 instead [ 423.776267][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xa730 instead [ 423.816017][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 423.831161][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 423.868187][ T140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 423.870718][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x64c4 instead [ 423.899211][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xa730 instead [ 424.063777][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 424.167127][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 424.406538][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.433439][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x64c4 instead [ 424.464086][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xa730 instead [ 424.505814][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 424.561172][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 424.583227][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x64c4 instead [ 424.594480][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xa730 instead [ 424.608473][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 424.622515][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 424.636220][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x64c4 instead [ 424.647144][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xa730 instead [ 424.682692][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 424.703411][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 424.742664][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x64c4 instead [ 424.778819][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xa730 instead [ 426.029526][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 426.040672][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 426.051734][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x64c4 instead [ 426.063868][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xa730 instead [ 426.077206][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 426.088323][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 426.098948][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x64c4 instead [ 426.109983][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xa730 instead [ 426.120751][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 426.131339][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 426.141876][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x64c4 instead [ 426.152403][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xa730 instead [ 426.162952][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 426.173423][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 426.183940][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x64c4 instead [ 426.194507][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xa730 instead [ 426.205626][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 426.216744][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 426.235895][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x64c4 instead [ 426.248595][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xa730 instead [ 426.259693][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 426.270315][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 426.281007][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x64c4 instead [ 426.291590][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xa730 instead [ 426.344895][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 426.377914][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 426.402865][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x64c4 instead [ 426.422558][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xa730 instead [ 426.444854][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 426.468077][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 426.494077][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x64c4 instead [ 426.519035][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xa730 instead [ 426.545740][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 426.573814][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 426.592612][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x64c4 instead [ 426.613430][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xa730 instead [ 426.645778][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 426.662563][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 426.695838][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x64c4 instead [ 426.724464][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xa730 instead [ 426.737988][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 426.759521][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 426.782696][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x64c4 instead [ 426.802572][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xa730 instead [ 426.842870][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 426.864811][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 426.887598][ T805] hid_parser_main: 7 callbacks suppressed [ 426.887648][ T805] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 426.892449][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x64c4 instead [ 426.946051][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xa730 instead [ 426.956212][ T805] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.010057][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 427.182563][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 427.299288][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x64c4 instead [ 427.384271][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xa730 instead [ 427.437585][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 427.497195][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 427.557554][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x64c4 instead [ 427.596445][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xa730 instead [ 427.622524][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 427.642145][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 427.663094][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x64c4 instead [ 427.699024][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xa730 instead [ 427.747648][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 427.786865][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 427.820558][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x64c4 instead [ 427.850635][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xa730 instead [ 427.869938][ T8973] syzkaller0: entered promiscuous mode [ 427.872468][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 427.892580][ T8973] syzkaller0: entered allmulticast mode [ 427.896452][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 427.921573][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x64c4 instead [ 427.946638][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xa730 instead [ 427.968315][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 427.979178][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 427.989971][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x64c4 instead [ 428.015215][ T8921] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xa730 instead [ 428.031476][ T8921] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 428.041025][ T8921] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 428.532126][ T8990] syzkaller0: entered promiscuous mode [ 428.543106][ T8990] syzkaller0: entered allmulticast mode [ 428.985946][ T8991] syzkaller0: entered promiscuous mode [ 428.998661][ T8991] syzkaller0: entered allmulticast mode [ 429.176416][ T8994] syzkaller0: entered promiscuous mode [ 429.201989][ T8994] syzkaller0: entered allmulticast mode [ 429.244751][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.301638][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.313272][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.327078][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.335177][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.573893][ T9014] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 431.762722][ T5630] Bluetooth: hci5: command tx timeout [ 431.942190][ T9030] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 431.952195][ T9030] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 431.993435][ T30] audit: type=1400 audit(1785901254.154:997): avc: denied { ioctl } for pid=9027 comm="syz.1.780" path="socket:[22321]" dev="sockfs" ino=22321 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.851104][ T5630] Bluetooth: hci5: command tx timeout [ 435.773335][ T9052] syzkaller0: entered promiscuous mode [ 435.779675][ T9052] syzkaller0: entered allmulticast mode [ 435.925480][ T5630] Bluetooth: hci5: command tx timeout [ 436.001462][ T30] audit: type=1400 audit(1785901258.154:998): avc: denied { relabelfrom } for pid=9058 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 436.061792][ T30] audit: type=1400 audit(1785901258.184:999): avc: denied { relabelto } for pid=9058 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 436.146229][ T9062] syzkaller0: entered promiscuous mode [ 436.172491][ T9062] syzkaller0: entered allmulticast mode [ 436.201035][ T9062] tc action pedit 'at' offset 20 out of bounds [ 436.746560][ T9075] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 436.948884][ T30] audit: type=1400 audit(1785901259.104:1000): avc: denied { read } for pid=9082 comm="syz.3.795" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 437.904197][ T9089] NILFS (nullb0): couldn't find nilfs on the device [ 438.003018][ T5630] Bluetooth: hci5: command tx timeout [ 438.105074][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.115587][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.123738][ T9002] bridge_slave_0: entered allmulticast mode [ 438.133048][ T9002] bridge_slave_0: entered promiscuous mode [ 438.147633][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.157097][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.165825][ T9002] bridge_slave_1: entered allmulticast mode [ 438.175397][ T9002] bridge_slave_1: entered promiscuous mode [ 438.260532][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.296438][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.348833][ T30] audit: type=1400 audit(1785901260.504:1001): avc: denied { bind } for pid=9100 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.506191][ T9002] team0: Port device team_slave_0 added [ 439.522070][ T9002] team0: Port device team_slave_1 added [ 440.513081][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.520100][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.496632][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.543860][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.508166][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.515192][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.530406][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.045939][ T9002] hsr_slave_0: entered promiscuous mode [ 446.082849][ T9002] hsr_slave_1: entered promiscuous mode [ 446.118550][ T9002] debugfs: 'hsr0' already exists in 'hsr' [ 446.141874][ T9002] Cannot create hsr debugfs directory [ 449.043657][ T9002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.074826][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.089542][ T9002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.117247][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.126964][ T9002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.142983][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.159830][ T9002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.190620][ T9002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.435460][ T9122] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 449.444909][ T9122] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 450.065825][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.184942][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.515128][ T5724] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 450.663151][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.670463][ T7708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.358074][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.362529][ T5724] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 451.365282][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.420522][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.464595][ T5724] usb 3-1: Product: syz [ 451.498817][ T5724] usb 3-1: Manufacturer: syz [ 451.532259][ T5724] usb 3-1: SerialNumber: syz [ 452.491869][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 452.541583][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 452.572570][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.590951][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.600565][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.667159][ T9160] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 452.704349][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.768802][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.496211][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 453.952449][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 454.244458][ T5724] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 454.300036][ T9169] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 454.310752][ T9162] IPVS: stopping backup sync thread 9169 ... [ 454.335118][ T5724] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 454.433494][ T5724] usb 3-1: USB disconnect, device number 8 [ 454.962517][ T5628] Bluetooth: hci6: command tx timeout [ 456.511438][ T5821] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.042429][ T5628] Bluetooth: hci6: command tx timeout [ 457.144057][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.165312][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.282311][ T9199] binder: BINDER_SET_CONTEXT_MGR already set [ 458.294925][ T9199] binder: 9198:9199 ioctl 4018620d 200000004a80 returned -16 [ 458.979318][ T9002] veth0_vlan: entered promiscuous mode [ 459.041223][ T9002] veth1_vlan: entered promiscuous mode [ 459.124385][ T5628] Bluetooth: hci6: command tx timeout [ 459.227321][ T9002] veth0_macvtap: entered promiscuous mode [ 459.265951][ T9002] veth1_macvtap: entered promiscuous mode [ 459.495349][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.940644][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.088033][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.199703][ T30] audit: type=1400 audit(1785901282.354:1002): avc: denied { create } for pid=9227 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 460.222900][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.295392][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.064369][ T7702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.343466][ T9228] syz.1.825 (9228): drop_caches: 2 [ 461.365499][ T5628] Bluetooth: hci6: command tx timeout [ 461.826851][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.835841][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.844211][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.852268][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.860498][ T9155] bridge_slave_0: entered allmulticast mode [ 461.870943][ T9155] bridge_slave_0: entered promiscuous mode [ 461.885615][ T30] audit: type=1400 audit(1785901284.044:1003): avc: denied { create } for pid=9249 comm="syz.3.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 461.897634][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.913939][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.931313][ T9155] bridge_slave_1: entered allmulticast mode [ 461.955365][ T9155] bridge_slave_1: entered promiscuous mode [ 461.976821][ T30] audit: type=1400 audit(1785901284.134:1004): avc: denied { watch watch_reads } for pid=9253 comm="syz.1.830" path="pipe:[4849]" dev="pipefs" ino=4849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 462.046117][ T9255] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 462.052937][ T9255] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.091754][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.096796][ T9259] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 462.107426][ T9259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.115455][ T9250] mount: server 127.0.0.1 not responding, timed out [ 462.127295][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.142883][ T9255] vhci_hcd vhci_hcd.0: Device attached [ 462.179266][ T9262] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 462.185939][ T9262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 462.195642][ T9259] vhci_hcd vhci_hcd.0: Device attached [ 462.206757][ T9262] vhci_hcd vhci_hcd.0: Device attached [ 462.220969][ T9255] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 462.227600][ T9255] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 462.249468][ T9255] vhci_hcd vhci_hcd.0: Device attached [ 462.332449][ T5823] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 462.343644][ T5821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.377365][ T5821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.390693][ T9155] team0: Port device team_slave_0 added [ 462.423001][ T30] audit: type=1400 audit(1785901284.574:1005): avc: denied { mounton } for pid=9002 comm="syz-executor" path="/root/syzkaller.ySrvQg/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 462.515029][ T30] audit: type=1400 audit(1785901284.584:1006): avc: denied { mounton } for pid=9002 comm="syz-executor" path="/root/syzkaller.ySrvQg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 462.533254][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 462.547993][ T9155] team0: Port device team_slave_1 added [ 462.612313][ T30] audit: type=1400 audit(1785901284.584:1007): avc: denied { mounton } for pid=9002 comm="syz-executor" path="/root/syzkaller.ySrvQg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 462.676832][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.695411][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.708090][ T30] audit: type=1400 audit(1785901284.644:1008): avc: denied { create } for pid=9269 comm="syz.2.831" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.734836][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 462.755024][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 462.771981][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.783440][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 462.802137][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.810332][ T30] audit: type=1400 audit(1785901284.654:1009): avc: denied { mounton } for pid=9002 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 462.818666][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.869717][ T9274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.882176][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 462.893896][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.905448][ T9] usb 2-1: Product: syz [ 462.911181][ T9] usb 2-1: Manufacturer: syz [ 462.916470][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.927554][ T9] usb 2-1: SerialNumber: syz [ 462.943709][ T9] usb 2-1: config 0 descriptor?? [ 463.002648][ T9259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 463.051393][ T9259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 463.094682][ T9] usb 2-1: ucan: probing device on interface #0 [ 463.144985][ T9155] hsr_slave_0: entered promiscuous mode [ 463.171285][ T9155] hsr_slave_1: entered promiscuous mode [ 463.284181][ T30] audit: type=1400 audit(1785901285.354:1010): avc: denied { map } for pid=9267 comm="syz.3.832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 463.330148][ T9155] debugfs: 'hsr0' already exists in 'hsr' [ 463.336081][ T9155] Cannot create hsr debugfs directory [ 463.394879][ T30] audit: type=1400 audit(1785901285.354:1011): avc: denied { read write } for pid=9267 comm="syz.3.832" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 464.755128][ T9] ucan 2-1:0.0: probe with driver ucan failed with error -110 [ 465.667664][ T9301] syzkaller0: entered promiscuous mode [ 465.673326][ T9301] syzkaller0: entered allmulticast mode [ 466.263706][ T9306] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 466.622684][ T30] audit: type=1400 audit(1785901288.414:1012): avc: denied { mounton } for pid=9302 comm="syz.5.839" path="/3/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 466.693743][ T5610] usb 2-1: USB disconnect, device number 9 [ 466.704428][ T9263] vhci_hcd: connection closed [ 466.705844][ T9257] vhci_hcd: connection reset by peer [ 466.709602][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 466.725704][ T9265] vhci_hcd: connection closed [ 466.730216][ T9260] vhci_hcd: connection closed [ 466.769172][ T5821] vhci_hcd vhci_hcd.1: release socket [ 466.814646][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 466.830787][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 467.029480][ T5821] vhci_hcd vhci_hcd.1: release socket [ 467.047447][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 467.412170][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 467.418121][ T5821] vhci_hcd vhci_hcd.1: release socket [ 467.445799][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 467.472812][ T5823] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 467.496852][ T5821] vhci_hcd vhci_hcd.1: stop threads [ 467.506981][ T5821] vhci_hcd vhci_hcd.1: release socket [ 467.520615][ T5821] vhci_hcd vhci_hcd.1: disconnect device [ 467.751836][ T30] audit: type=1400 audit(1785901289.904:1013): avc: denied { setopt } for pid=9311 comm="syz.5.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 467.938368][ T9155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.116954][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.125216][ T9155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.137431][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.148776][ T9155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.864383][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.981690][ T9155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.021679][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.039804][ T9319] syzkaller0: entered promiscuous mode [ 469.052634][ T9319] syzkaller0: entered allmulticast mode [ 471.071531][ T9155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.367340][ T9155] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.128384][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.135593][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.268341][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.275630][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.664634][ T9155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.754790][ T30] audit: type=1400 audit(1785901295.864:1014): avc: denied { sys_module } for pid=9155 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 475.552518][ T5823] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 475.717123][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.748644][ T5823] usb 4-1: not running at top speed; connect to a high speed hub [ 475.781138][ T5823] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 475.828052][ T5823] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 475.877884][ T5823] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.036797][ T9372] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 477.099193][ T5823] usb 4-1: string descriptor 0 read error: -22 [ 477.106008][ T5823] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 477.115122][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.140995][ T5823] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 477.150004][ T5823] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 477.158725][ T5823] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 477.167256][ T5823] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 477.285910][ T9155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.499926][ T9364] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 477.767337][ T30] audit: type=1400 audit(1785901299.894:1015): avc: denied { read } for pid=9378 comm="syz.2.853" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 477.980626][ T30] audit: type=1400 audit(1785901299.894:1016): avc: denied { open } for pid=9378 comm="syz.2.853" path="/172/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 478.170224][ T9364] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 478.181447][ T9364] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 478.191251][ T9364] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 478.225357][ T9364] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 478.295720][ T9364] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 478.346616][ T9364] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 478.430112][ T9364] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 478.468535][ T9364] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 478.491636][ T9364] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 478.772127][ T9395] 9pnet_fd: p9_fd_create_unix (9395): problem connecting socket: ./cgroup: -111 [ 478.810651][ T9393] tipc: Started in network mode [ 478.820814][ T9393] tipc: Node identity 5aac9e412d69, cluster identity 4711 [ 478.896031][ T9393] tipc: Enabled bearer , priority 12 [ 478.982075][ T9155] veth0_vlan: entered promiscuous mode [ 479.055861][ T9155] veth1_vlan: entered promiscuous mode [ 479.227618][ T9155] veth0_macvtap: entered promiscuous mode [ 479.270284][ T9155] veth1_macvtap: entered promiscuous mode [ 479.413796][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.430637][ T5823] usb 4-1: USB disconnect, device number 11 [ 479.711462][ T9155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.325515][ T9] tipc: Node number set to 2009439809 [ 480.342903][ T6157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.452547][ T140] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.496257][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.530610][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.555904][ T9417] rt1711h 0-004e: probe with driver rt1711h failed with error -5 [ 480.564943][ T9417] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 480.867458][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.907068][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.071497][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.103433][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.347627][ T9449] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 482.517281][ T9449] bond1: entered promiscuous mode [ 482.588077][ T9449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.851621][ T9452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.863090][ T9452] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 482.887998][ T9452] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 483.099834][ T9452] bond1: (slave ip6gre1): making interface the new active one [ 483.142597][ T9452] ip6gre1: entered promiscuous mode [ 483.651034][ T9452] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 487.315431][ T30] audit: type=1400 audit(1785901308.664:1017): avc: denied { read } for pid=9473 comm="syz.2.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 489.085479][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.128919][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.592684][ T30] audit: type=1400 audit(1785901311.724:1018): avc: denied { create } for pid=9503 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 492.532582][ T5823] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 492.704461][ T5823] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 492.732249][ T5823] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 492.764402][ T5823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.800207][ T5823] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.852133][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 492.889059][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.930478][ T5823] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.955257][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.986610][ T5823] usb 3-1: Product: syz [ 493.002135][ T5823] usb 3-1: Manufacturer: syz [ 493.031646][ T9509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 493.050512][ T5823] cdc_wdm 3-1:1.0: skipping garbage [ 493.066214][ T5823] cdc_wdm 3-1:1.0: skipping garbage [ 493.128258][ T9518] sctp: [Deprecated]: syz.1.882 (pid 9518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.128258][ T9518] Use struct sctp_sack_info instead [ 493.149553][ T5823] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 493.170645][ T5823] cdc_wdm 3-1:1.0: Unknown control protocol [ 493.361402][ T30] audit: type=1400 audit(1785901315.514:1019): avc: denied { read write } for pid=9508 comm="syz.2.878" name="cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 493.379876][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.392118][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.400711][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.407342][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.414257][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.420881][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.432489][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.439132][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.443616][ T30] audit: type=1400 audit(1785901315.514:1020): avc: denied { open } for pid=9508 comm="syz.2.878" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 493.449815][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.475620][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.482498][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.489122][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.495619][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.502225][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.508798][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.515404][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.521796][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.528399][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.536123][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 493.542734][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 493.642554][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 493.857455][ T9526] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.020786][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 494.509176][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 494.539554][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 494.557253][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 494.674356][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 494.684882][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.693666][ T24] usb 2-1: Product: syz [ 494.698446][ T24] usb 2-1: Manufacturer: syz [ 494.711233][ T24] usb 2-1: SerialNumber: syz [ 494.749950][ T24] usb 2-1: config 0 descriptor?? [ 494.755974][ T9528] i2c i2c-0: Failed to register i2c client rt1711h at 0x4e (-16) [ 494.906207][ T30] audit: type=1400 audit(1785901317.054:1021): avc: denied { setopt } for pid=9529 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 495.052061][ T24] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 496.576476][ T24] usb 3-1: USB disconnect, device number 9 [ 496.580826][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 496.711555][ T9542] o2cb: This node has not been configured. [ 496.719340][ T9542] o2cb: Cluster check failed. Fix errors before retrying. [ 496.727897][ T9542] (syz.3.888,9542,1):user_dlm_register:674 ERROR: status = -22 [ 496.736618][ T9542] (syz.3.888,9542,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 496.774502][ T30] audit: type=1400 audit(1785901318.854:1022): avc: denied { write } for pid=9537 comm="syz.3.888" name="/" dev="ocfs2_dlmfs" ino=26799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.975266][ T30] audit: type=1400 audit(1785901318.854:1023): avc: denied { add_name } for pid=9537 comm="syz.3.888" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.004569][ T30] audit: type=1400 audit(1785901318.864:1024): avc: denied { create } for pid=9537 comm="syz.3.888" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 497.155659][ T30] audit: type=1400 audit(1785901318.864:1025): avc: denied { associate } for pid=9537 comm="syz.3.888" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.948315][ T805] usb 2-1: USB disconnect, device number 10 [ 499.010490][ T30] audit: type=1400 audit(1785901321.154:1026): avc: denied { connect } for pid=9538 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 499.169977][ T9553] tipc: Started in network mode [ 499.184172][ T30] audit: type=1400 audit(1785901321.344:1027): avc: denied { setopt } for pid=9538 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 499.232721][ T9553] tipc: Node identity b6f68cb7d37e, cluster identity 4711 [ 499.244194][ T9553] tipc: Enabled bearer , priority 0 [ 499.258211][ T9553] syzkaller0: entered promiscuous mode [ 499.271385][ T9553] syzkaller0: entered allmulticast mode [ 499.315956][ T9553] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 499.500813][ T9558] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 499.561378][ T9553] tipc: Resetting bearer [ 499.576509][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 499.620091][ T9551] tipc: Resetting bearer [ 499.655223][ T9559] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 499.733924][ T9551] tipc: Disabling bearer [ 499.758369][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 499.769745][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.789842][ T24] usb 2-1: config 0 descriptor?? [ 500.025501][ T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 500.051122][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 500.134783][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 500.163009][ T24] [drm] Initialized udl on minor 2 [ 500.513034][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 501.285916][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.846973][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 501.866895][ T5724] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 501.879150][ T24] usb 2-1: USB disconnect, device number 11 [ 501.890249][ T5724] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 504.857503][ T30] audit: type=1400 audit(1785901326.544:1028): avc: denied { getopt } for pid=9584 comm="syz.6.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.345830][ T30] audit: type=1400 audit(1785901328.504:1029): avc: denied { ioctl } for pid=9589 comm="syz.3.900" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26363 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 506.560314][ T30] audit: type=1400 audit(1785901328.714:1030): avc: denied { create } for pid=9602 comm="syz.6.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 506.838389][ T30] audit: type=1400 audit(1785901328.994:1031): avc: denied { write } for pid=9604 comm="syz.1.902" name="cluster" dev="configfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 507.039207][ T30] audit: type=1400 audit(1785901329.024:1032): avc: denied { write } for pid=9604 comm="syz.1.902" name="heartbeat" dev="configfs" ino=26392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 508.583414][ T9617] syzkaller0: entered promiscuous mode [ 508.612171][ T9617] syzkaller0: entered allmulticast mode [ 508.818326][ T9617] tipc: Enabled bearer , priority 0 [ 508.833360][ T9617] tipc: Resetting bearer [ 508.853572][ T9616] tipc: Resetting bearer [ 508.906487][ T9616] tipc: Disabling bearer [ 511.770478][ T9631] xt_hashlimit: size too large, truncated to 1048576 [ 513.949994][ T9646] syzkaller0: entered promiscuous mode [ 513.955636][ T9646] syzkaller0: entered allmulticast mode [ 516.653771][ T5731] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 517.033042][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 518.448049][ T5731] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 518.628503][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.731583][ T5731] pvrusb2: Hardware description: Terratec Grabster AV400 [ 518.745198][ T5731] pvrusb2: ********** [ 518.772918][ T5731] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 518.833106][ T5731] pvrusb2: Important functionality might not be entirely working. [ 518.865760][ T5731] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 518.954840][ T5731] pvrusb2: ********** [ 518.989769][ T2361] pvrusb2: Invalid write control endpoint [ 519.173284][ T30] audit: type=1400 audit(1785901341.334:1033): avc: denied { connect } for pid=9674 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 519.232884][ T9653] netlink: 'syz.3.914': attribute type 21 has an invalid length. [ 519.285345][ T9653] netlink: 156 bytes leftover after parsing attributes in process `syz.3.914'. [ 519.339723][ T5731] usb 4-1: USB disconnect, device number 12 [ 519.452619][ T5724] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 519.584088][ T2361] pvrusb2: Invalid write control endpoint [ 519.598769][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 519.614429][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 519.632998][ T5724] usb 6-1: Using ep0 maxpacket: 32 [ 519.648275][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 519.679437][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.701633][ T2361] pvrusb2: Device being rendered inoperable [ 519.725832][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 519.725838][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.728878][ T5724] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 520.084830][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.275094][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 520.295790][ T5724] usb 6-1: Product: syz [ 520.306141][ T5724] usb 6-1: Manufacturer: syz [ 520.315702][ T5724] usb 6-1: SerialNumber: syz [ 520.331004][ T5724] usb 6-1: config 0 descriptor?? [ 520.402232][ T2361] pvrusb2: Attached sub-driver cx25840 [ 520.423600][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 520.537424][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 520.561566][ T30] audit: type=1400 audit(1785901342.694:1034): avc: denied { append } for pid=9686 comm="syz.3.923" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 521.315503][ T10] usb 6-1: USB disconnect, device number 2 [ 521.400583][ T9669] kexec: Could not allocate control_code_buffer [ 522.642909][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.928'. [ 522.775579][ T140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.480484][ T150] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 524.050042][ T30] audit: type=1400 audit(1785901345.954:1035): avc: denied { listen } for pid=9704 comm="syz.5.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 525.426788][ T9721] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 527.074857][ T9730] tipc: Started in network mode [ 527.080597][ T9730] tipc: Node identity 4, cluster identity 4711 [ 527.086891][ T9730] tipc: Node number set to 4 [ 527.303535][ T30] audit: type=1400 audit(1785901349.224:1036): avc: denied { setopt } for pid=9727 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 529.080623][ T9734] gadgetfs: bound to dummy_udc driver [ 529.372891][ T5716] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 529.373775][ C0] gadgetfs: connected [ 529.516889][ T5716] gadgetfs: disconnected [ 529.549062][ T9754] syzkaller0: entered promiscuous mode [ 529.554862][ T9754] syzkaller0: entered allmulticast mode [ 530.018116][ C0] gadgetfs: connected [ 530.043183][ T5716] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 530.060040][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 530.093871][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.125578][ C0] gadgetfs: configuration #1 [ 530.252754][ T9733] gadgetfs: suspended from state 4 [ 530.258694][ T5716] usb 1-1: can't set config #1, error -71 [ 530.272825][ T9733] gadgetfs: disconnected [ 530.290202][ T5716] usb 1-1: USB disconnect, device number 8 [ 535.972512][ T30] audit: type=1400 audit(1785901358.124:1037): avc: denied { set_context_mgr } for pid=9791 comm="syz.5.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 536.081992][ T30] audit: type=1400 audit(1785901358.234:1038): avc: denied { call } for pid=9791 comm="syz.5.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 536.164891][ T30] audit: type=1400 audit(1785901358.234:1039): avc: denied { transfer } for pid=9791 comm="syz.5.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 536.423269][ T9796] syzkaller0: entered promiscuous mode [ 536.428977][ T9796] syzkaller0: entered allmulticast mode [ 540.424956][ T9822] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 540.953931][ T30] audit: type=1400 audit(1785901363.084:1040): avc: denied { open } for pid=9823 comm="syz.2.960" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 540.983126][ T30] audit: type=1400 audit(1785901363.094:1041): avc: denied { ioctl } for pid=9823 comm="syz.2.960" path="/dev/ptyq8" dev="devtmpfs" ino=127 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 544.014473][ T30] audit: type=1400 audit(1785901366.164:1042): avc: denied { mount } for pid=9839 comm="syz.2.964" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 544.731488][ T9849] syzkaller0: entered promiscuous mode [ 544.737360][ T9849] syzkaller0: entered allmulticast mode [ 544.834773][ T30] audit: type=1400 audit(1785901366.994:1043): avc: denied { read write } for pid=9851 comm="syz.2.968" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 545.125152][ T30] audit: type=1400 audit(1785901367.024:1044): avc: denied { open } for pid=9851 comm="syz.2.968" path="/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 545.577837][ T30] audit: type=1400 audit(1785901367.024:1045): avc: denied { ioctl } for pid=9851 comm="syz.2.968" path="/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 548.352535][ T30] audit: type=1400 audit(1785901370.484:1046): avc: denied { read } for pid=9881 comm="syz.5.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.706521][ T9906] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9002] was attempted by ""[9906] [ 553.416105][ T30] audit: type=1400 audit(1785901374.484:1047): avc: denied { write } for pid=9905 comm="syz.2.980" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 554.013323][ T30] audit: type=1400 audit(1785901374.484:1048): avc: denied { audit_write } for pid=9905 comm="syz.2.980" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 555.311681][ T30] audit: type=1400 audit(1785901374.484:1049): avc: denied { watch watch_reads } for pid=9905 comm="syz.2.980" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 555.992447][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 557.024874][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.451104][ T5628] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 558.462011][ T5628] Bluetooth: hci6: link tx timeout [ 558.468367][ T5628] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 558.496584][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.822510][ T5628] Bluetooth: hci6: link tx timeout [ 559.037050][ T5628] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 559.612403][ T9956] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 559.981077][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 560.007267][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 560.023284][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 560.035075][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 560.052468][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 560.708557][ T9950] Bluetooth: hci6: command 0x0406 tx timeout [ 560.724809][ T30] audit: type=1400 audit(1785901382.554:1050): avc: denied { create } for pid=9962 comm="syz.1.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 561.221201][ T9975] xt_hashlimit: size too large, truncated to 1048576 [ 562.065851][ T9980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.882515][ T9914] Bluetooth: hci7: command tx timeout [ 562.918973][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.002861][ T31] INFO: task syz.4.726:8818 blocked for more than 143 seconds. [ 564.073659][ T31] Tainted: G L syzkaller #0 [ 564.081207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.091466][ T31] task:syz.4.726 state:D stack:28744 pid:8818 tgid:8816 ppid:5614 task_flags:0x400040 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 564.125235][ T31] Call Trace: [ 564.188876][ T31] [ 564.192232][ T31] __schedule+0x125c/0x6730 [ 564.205304][ T31] ? __pfx___schedule+0x10/0x10 [ 564.211009][ T31] ? find_held_lock+0x2b/0x80 [ 564.223689][ T31] ? schedule+0x225/0x2c0 [ 564.229295][ T31] schedule+0xdd/0x2c0 [ 564.241911][ T31] schedule_preempt_disabled+0x13/0x30 [ 564.592920][ T31] __mutex_lock+0xccc/0x1bd0 [ 564.598161][ T31] ? write_threads+0x278/0x570 [ 564.604386][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 564.610069][ T31] ? irqentry_exit+0x24d/0xa00 [ 564.616195][ T31] ? write_threads+0x25c/0x570 [ 564.621587][ T31] ? write_threads+0x278/0x570 [ 564.627353][ T31] write_threads+0x278/0x570 [ 564.689352][ T31] ? __pfx_write_threads+0x10/0x10 [ 564.841645][ T31] ? __might_fault+0xc5/0x140 [ 564.854818][ T30] audit: type=1400 audit(1785901386.964:1051): avc: denied { bpf } for pid=9994 comm="syz.1.998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.966531][ T31] ? _copy_from_user+0x59/0xd0 [ 565.178211][ T9914] Bluetooth: hci7: command tx timeout [ 565.382499][ T31] ? __pfx_write_threads+0x10/0x10 [ 565.685186][ T31] nfsctl_transaction_write+0x106/0x1a0 [ 565.945305][ T31] vfs_write+0x2aa/0x1050 [ 566.203987][ T31] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 566.784417][ T31] ? __pfx_vfs_write+0x10/0x10 [ 566.874165][ T31] ? __fget_files+0x215/0x3d0 [ 566.886281][ T31] ? __fget_files+0x21f/0x3d0 [ 566.894876][ T31] ksys_write+0x12a/0x250 [ 566.899430][ T31] ? __pfx_ksys_write+0x10/0x10 [ 566.904745][ T31] do_syscall_64+0x115/0x870 [ 566.910338][ T31] ? clear_bhb_loop+0x40/0x90 [ 566.915430][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.921593][ T31] RIP: 0033:0x7f884779e019 [ 566.927594][ T31] RSP: 002b:00007f8848726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.936584][ T31] RAX: ffffffffffffffda RBX: 00007f8847a26090 RCX: 00007f884779e019 [ 566.945468][ T31] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 566.954358][ T31] RBP: 00007f884783500c R08: 0000000000000000 R09: 0000000000000000 [ 566.963238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.971863][ T31] R13: 00007f8847a26128 R14: 00007f8847a26090 R15: 00007ffdcae23578 [ 566.980908][ T31] [ 566.984444][ T31] [ 566.984444][ T31] Showing all locks held in the system: [ 566.992985][ T31] 3 locks held by kworker/u8:0/12: [ 566.998594][ T31] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 567.014939][ T31] #1: ffffc90000117d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 567.037656][ T31] #2: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 567.074027][ T31] 3 locks held by kworker/1:0/24: [ 567.080880][ T31] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 567.094250][ T31] #1: ffffc900001e7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 567.107522][ T31] #2: ffff88807aa7b250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6310 [ 567.121769][ T31] 1 lock held by khungtaskd/31: [ 567.128469][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 567.140819][ T31] 2 locks held by getty/5368: [ 567.145928][ T31] #0: ffff8880377b70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 567.156528][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 567.167283][ T31] 2 locks held by syz-executor/5613: [ 567.172745][ T31] #0: ffff88807dc220d8 (&type->s_umount_key#78){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 567.183241][ T31] #1: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 567.193027][ T31] 3 locks held by syz.4.726/8817: [ 567.198077][ T31] #0: ffff88807e7077b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 567.207531][ T31] #1: ffff88802ad82450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 567.217620][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 567.226574][ T31] 3 locks held by syz.4.726/8818: [ 567.231614][ T31] #0: ffff888027151b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 567.241640][ T31] #1: ffff88802ad82450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 567.250936][ T31] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 567.260180][ T31] 1 lock held by syz.6.961/9869: [ 567.265156][ T31] #0: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 567.274297][ T31] 1 lock held by syz.3.996/9986: [ 567.279246][ T31] #0: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 567.282546][ T9914] Bluetooth: hci7: command tx timeout [ 567.289328][ T31] 1 lock held by syz.5.997/9995: [ 567.289348][ T31] #0: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 567.289410][ T31] 1 lock held by dhcpcd/9997: [ 567.289422][ T31] #0: ffff88807f240260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 567.573774][ T31] [ 567.580763][ T31] ============================================= [ 567.580763][ T31] [ 567.660694][ T31] NMI backtrace for cpu 0 [ 567.660721][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 567.660751][ T31] Tainted: [L]=SOFTLOCKUP [ 567.660759][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 567.660775][ T31] Call Trace: [ 567.660782][ T31] [ 567.660790][ T31] dump_stack_lvl+0x100/0x190 [ 567.660822][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 567.660856][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 567.660887][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 567.660913][ T31] sys_info+0x141/0x190 [ 567.660943][ T31] watchdog+0xcb1/0x1030 [ 567.660974][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 567.661013][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.661038][ T31] ? __kthread_parkme+0x18c/0x230 [ 567.661072][ T31] ? kthread+0x13a/0x450 [ 567.661091][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.661113][ T31] kthread+0x370/0x450 [ 567.661133][ T31] ? __pfx_kthread+0x10/0x10 [ 567.661155][ T31] ret_from_fork+0x72b/0xd50 [ 567.661185][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 567.661215][ T31] ? __switch_to+0x800/0x10f0 [ 567.661237][ T31] ? __pfx_kthread+0x10/0x10 [ 567.661260][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.661304][ T31] [ 567.661311][ T31] Sending NMI from CPU 0 to CPUs 1: [ 567.793597][ C1] NMI backtrace for cpu 1 [ 567.793617][ C1] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 567.793643][ C1] Tainted: [L]=SOFTLOCKUP [ 567.793650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 567.793661][ C1] RIP: 0010:ktime_get_update_offsets_now+0xe4/0x500 [ 567.793695][ C1] Code: 00 00 e8 8f fc 12 00 44 8b 25 e8 c8 7c 19 44 89 e3 31 ff 83 e3 01 89 de e8 e9 f6 12 00 85 db 0f 85 a1 02 00 00 e8 6c fc 12 00 <48> 8b 05 25 c9 7c 19 48 8b 1d f6 c8 7c 19 48 89 44 24 10 0f 1f 44 [ 567.793712][ C1] RSP: 0018:ffffc90000a08ec0 EFLAGS: 00000046 [ 567.793727][ C1] RAX: 0000000080010002 RBX: 0000000000000000 RCX: ffffffff81f76867 [ 567.793739][ C1] RDX: ffff88807b31a540 RSI: ffffffff81f76874 RDI: ffff88807b31a540 [ 567.793751][ C1] RBP: ffff8880b8528448 R08: 0000000000000005 R09: 0000000000000000 [ 567.793762][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000001a9ba [ 567.793773][ C1] R13: ffff8880b85285a8 R14: ffff8880b8528400 R15: dffffc0000000000 [ 567.793786][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 567.793802][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.793814][ C1] CR2: 0000564238e67970 CR3: 000000005df69000 CR4: 00000000003526f0 [ 567.793825][ C1] Call Trace: [ 567.793831][ C1] [ 567.793841][ C1] hrtimer_interrupt+0x17c/0x940 [ 567.793866][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 567.793887][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 567.793913][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 567.793943][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 567.793965][ C1] [ 567.793970][ C1] [ 567.793976][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.793997][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 567.794018][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 567.794035][ C1] RSP: 0018:ffffc90003167728 EFLAGS: 00000246 [ 567.794048][ C1] RAX: 0000000000000002 RBX: ffffffff9b943fa8 RCX: 0000000000000000 [ 567.794060][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 567.794071][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 567.794081][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 567.794092][ C1] R13: 0000000000000018 R14: 0000000000000018 R15: ffff88805c7bd000 [ 567.794113][ C1] debug_check_no_obj_freed+0x31f/0x630 [ 567.794144][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 567.794168][ C1] ? __page_table_check_zero+0x27f/0x410 [ 567.794195][ C1] ? __page_table_check_zero+0x284/0x410 [ 567.794219][ C1] free_pages_prepare+0x3a7/0xd80 [ 567.794250][ C1] __free_contig_range_common+0x14f/0x250 [ 567.794280][ C1] free_pages_bulk+0x12a/0x200 [ 567.794300][ C1] vm_area_free_pages+0xad/0x2b0 [ 567.794337][ C1] vfree+0x107/0x750 [ 567.794357][ C1] ? kcov_close+0x2b/0x60 [ 567.794376][ C1] ? __pfx_kcov_close+0x10/0x10 [ 567.794394][ C1] ? rcu_is_watching+0x12/0xc0 [ 567.794421][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 567.794440][ C1] ? __pfx_kcov_close+0x10/0x10 [ 567.794459][ C1] ? __pfx_kcov_close+0x10/0x10 [ 567.794478][ C1] kcov_close+0x34/0x60 [ 567.794496][ C1] __fput+0x3ff/0xb50 [ 567.794521][ C1] task_work_run+0x150/0x240 [ 567.794540][ C1] ? __pfx_task_work_run+0x10/0x10 [ 567.794563][ C1] do_exit+0x951/0x2ae0 [ 567.794589][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 567.794609][ C1] ? __pfx_do_exit+0x10/0x10 [ 567.794635][ C1] ? do_raw_spin_lock+0x128/0x260 [ 567.794659][ C1] ? find_held_lock+0x2b/0x80 [ 567.794674][ C1] ? get_signal+0x7e0/0x21e0 [ 567.794698][ C1] do_group_exit+0xd5/0x2a0 [ 567.794715][ C1] get_signal+0x1ec7/0x21e0 [ 567.794743][ C1] ? __pfx_get_signal+0x10/0x10 [ 567.794770][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 567.794791][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 567.794819][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 567.794842][ C1] ? rcu_is_watching+0x12/0xc0 [ 567.794873][ C1] do_syscall_64+0x666/0x870 [ 567.794894][ C1] ? clear_bhb_loop+0x40/0x90 [ 567.794914][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.794932][ C1] RIP: 0033:0x7f4ad2f9d107 [ 567.794945][ C1] Code: Unable to access opcode bytes at 0x7f4ad2f9d0dd. [ 567.794952][ C1] RSP: 002b:00007ffc23b12298 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 567.794969][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4ad2f9d107 [ 567.794980][ C1] RDX: 00007ffc23b122c0 RSI: 00007ffc23b12350 RDI: 00007ffc23b12350 [ 567.794992][ C1] RBP: 00007ffc23b12350 R08: 00007ffc23b13350 R09: 00000000ffffffff [ 567.795003][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc23b133e0 [ 567.795014][ C1] R13: 00007f4ad303445c R14: 00000000000872e6 R15: 00007ffc23b13420 [ 567.795033][ C1] [ 568.554222][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 568.561130][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 568.571815][ T31] Tainted: [L]=SOFTLOCKUP [ 568.576140][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 568.586200][ T31] Call Trace: [ 568.589479][ T31] [ 568.592401][ T31] dump_stack_lvl+0x100/0x190 [ 568.597088][ T31] vpanic+0x552/0x970 [ 568.601071][ T31] ? __pfx_vpanic+0x10/0x10 [ 568.605576][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 568.611738][ T31] panic+0xd1/0xe0 [ 568.615456][ T31] ? __pfx_panic+0x10/0x10 [ 568.619875][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 568.626024][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 568.632179][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 568.638340][ T31] ? watchdog.cold+0x1ec/0x234 [ 568.643119][ T31] ? watchdog+0xcc1/0x1030 [ 568.647539][ T31] watchdog.cold+0x1fd/0x234 [ 568.652137][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 568.657944][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.662624][ T31] ? __kthread_parkme+0x18c/0x230 [ 568.667656][ T31] ? kthread+0x13a/0x450 [ 568.671891][ T31] ? __pfx_watchdog+0x10/0x10 [ 568.676565][ T31] kthread+0x370/0x450 [ 568.680641][ T31] ? __pfx_kthread+0x10/0x10 [ 568.685250][ T31] ret_from_fork+0x72b/0xd50 [ 568.689858][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 568.694979][ T31] ? __switch_to+0x800/0x10f0 [ 568.699661][ T31] ? __pfx_kthread+0x10/0x10 [ 568.704257][ T31] ret_from_fork_asm+0x1a/0x30 [ 568.709041][ T31] [ 568.712327][ T31] Kernel Offset: disabled [ 568.716636][ T31] Rebooting in 86400 seconds..