last executing test programs: 1m11.588635649s ago: executing program 2 (id=321): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000740)=ANY=[@ANYBLOB="20100300fe08000000"], 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r4) 1m8.242966271s ago: executing program 2 (id=328): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x38, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m7.547527445s ago: executing program 2 (id=329): syz_emit_ethernet(0xc8, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x92, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5b5de85e4f8eb45fd0564780829"}, {0xdd86}}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff070067020000030000001606000080ffffffbf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m6.548606306s ago: executing program 2 (id=332): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) r7 = socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f0000000340)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 1m2.470960111s ago: executing program 2 (id=338): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) clock_gettime(0x5, 0x0) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 59.63273223s ago: executing program 2 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x40000050) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x6}, @device_b, @from_mac=@broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x81) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'pim6reg1\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x3, [{0x7, 0xa}, {0x554, 0x3}, {0x7ff, 0xa6}]}}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f00000003c0)={0x41, "1190d4e25845a02131baf7348f560caf680500daace801834977afffa428e7874483005b6e80aaa61cec71b76248dde391f2824648d31b164286220c26fc189702957f819464b8ba9ee1bb23992125d4fbd5d327e32858f531a1a14376f90e40a1f527242b4f95ca5ff11f81d3f0122e744f640d705f5ec1f119e81c5084b52d"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000480)={0x8, 'veth0_to_bridge\x00', {'tunl0\x00'}, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x9517cd75c5ba1867}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cef9feba50a7257973d0d96ab"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8005}, 0x4004041) bind(r0, &(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000740)={0x3, 0xf5, 0x4, 0xfe, 0xe, 0x3, 0x5f}, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000780)) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x430, 0x3f4, 0x400, 0x70bd29, 0x25dfdbfb, {0x4, 0x2, 0x36, [0xe2, 0x5, 0x10000000, 0x2, 0x4, 0x10001, 0x101, 0x4, 0x3, 0x7aa, 0x1, 0x10001, 0x8000, 0xf3, 0x56c, 0x800, 0x9, 0x7f, 0x8, 0xaeaa, 0x0, 0x4, 0x5, 0x2, 0x4, 0x8, 0x5, 0x6, 0x23, 0xfff, 0xe, 0x5, 0x9, 0x3, 0x69e, 0x800, 0x7, 0x61b, 0x2677f4df, 0xfffffffc, 0x8, 0x191f, 0x2, 0x9, 0x7, 0xff, 0x9, 0x87fb3b42, 0x7, 0x4ea5, 0x2, 0x2, 0x364958f8, 0xd, 0xffffa7af, 0xd2, 0x265, 0x2, 0xa0, 0x0, 0x8, 0x401, 0x0, 0x6], [0x9, 0x438, 0x2, 0x19, 0xa, 0x0, 0x100, 0x8, 0x8, 0x0, 0x4000, 0x5, 0xfffffffd, 0x7fff, 0x5, 0x6, 0x4, 0x845, 0x3ffc00, 0x5, 0x1, 0x466d, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x3, 0x6, 0x0, 0x9, 0x5, 0xff, 0x800, 0x2, 0xfffffffb, 0x2, 0x7, 0x466d512b, 0x7, 0xd, 0xfffffffb, 0x8, 0x0, 0x6, 0x0, 0x3, 0x9, 0x1, 0x1, 0x4dfe834b, 0x71, 0xdc0, 0x85, 0x4, 0xff, 0x53, 0xfffffc00, 0x1, 0x9, 0x7, 0x8, 0x8ced], [0x9, 0x3, 0x6, 0xa, 0x3ff, 0xa041, 0xe, 0x1fe, 0x4, 0x9, 0x2, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1, 0xb546, 0x1, 0x1, 0x2, 0x1, 0x9, 0x1, 0x9, 0x6, 0x2, 0xc9, 0x83, 0x10, 0xb, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x10, 0x3, 0xd817, 0x3ee, 0x1, 0x6, 0x91a2bb97, 0x5, 0x2, 0x5d5, 0x5, 0xaa0, 0x1, 0x101, 0x7, 0x1, 0xf782, 0x1000, 0x5, 0x7fff, 0x2, 0xffffffff, 0xffff8000, 0x7, 0x7, 0x7fffffff, 0xe0000000, 0xd9f, 0x7ff], [0xffffffff, 0x4, 0x4, 0x401, 0x7, 0x5, 0x1, 0x2, 0x300, 0xb1, 0x5, 0x9, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x7, 0x1000, 0x101, 0x3, 0x1ff, 0x5, 0x88, 0x8, 0xe000000, 0x5, 0x1, 0xec1, 0x9, 0x3, 0x6, 0x5, 0x842c, 0x101, 0x0, 0x8, 0x9, 0x80, 0x8, 0xff, 0x6, 0x4, 0xf, 0x1, 0xae, 0x6, 0x0, 0x0, 0x0, 0x1, 0xff, 0xbd6, 0x7, 0x4, 0x7, 0xdb, 0x8, 0xffff, 0x1, 0x1, 0x6, 0x0, 0x3], 0xd, ['tunl0\x00', '\'#\x00', '){/\x00']}, ["", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r9, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r9, 0x20, 0x70bd2d, 0x1615, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0c0) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)="9b92ae7adebc9f16ae38a74c334b9ab281949de6b7a6697f380e04ab9bd253be931dd6e9e46d77b4f8a94abfd6be05b409953b136df2255ea8c1d75433bb2c3bf38a500eb9aed318f55e8986f9827f12038417fe086b5eb8dde585d6c75ca774a09aa6a4b98b49f45094ef99db770ceb6bc08ee45ec3816f2a642f0f76c0c65f25713bfa3e06", 0x86}], 0x1, &(0x7f0000001080)=[{0x70, 0x107, 0x8, "a066ad8f8b3331ba2dad1b38b924277d4c372d3af86601437438d65448c9811725321ac51ea814d85072647de917f39b1bdc624d55bdb7b2bd04575c63d3ac6a5f5ad623be48f4702d708f637f79203fff77f7c7fecb0b85f7"}, {0x100, 0x11, 0x1, "20f8f7cba72a7cf700fa23eb20bedebe65bd39257ce199db38d54cb4ad629dec1313d9ed7e4de52d43999cbf78c46537bd30e49c12d486fd2b5952a9b57216b610fd76915957aaf72baf320e9150dffdfa6c98f634700ceeea51465a84ca9275c430bffbd0ffd2dc2c327e6bebe6b85bd3a87a346f93c2f8653ab933d7a270a346192bc60ad90c9845ef5c75d2efabd6db3f63944e4d809835a9c2f1c7be4b9a9610d8c376045ca470c444f242a75979bf1094530bb14a9b428fd422e299cdedd8b17b85d8bce17f7185398a4617500bcffd10385eac82c8b764d4e88fd2f5e8a83aed97a4f1abe4e40dea773f84"}, {0x60, 0x3a, 0xb3f9, "d8e8751ac2ba4f4186921558526104a370c5936ba15af4a6b12c9f77396e60123ccf191a5cc51448c46e85283254e5124a48b3ab115e312d368a37100c02f15656f21595472a0b98dc823151e1856bbe"}], 0x1d0}, 0x600080c0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r11, &(0x7f00000012c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x4) 44.101602133s ago: executing program 32 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x1f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x40000050) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x6}, @device_b, @from_mac=@broadcast}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x81) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'pim6reg1\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x3, [{0x7, 0xa}, {0x554, 0x3}, {0x7ff, 0xa6}]}}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f00000003c0)={0x41, "1190d4e25845a02131baf7348f560caf680500daace801834977afffa428e7874483005b6e80aaa61cec71b76248dde391f2824648d31b164286220c26fc189702957f819464b8ba9ee1bb23992125d4fbd5d327e32858f531a1a14376f90e40a1f527242b4f95ca5ff11f81d3f0122e744f640d705f5ec1f119e81c5084b52d"}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000480)={0x8, 'veth0_to_bridge\x00', {'tunl0\x00'}, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x9517cd75c5ba1867}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cef9feba50a7257973d0d96ab"}]}, 0x64}, 0x1, 0x0, 0x0, 0x8005}, 0x4004041) bind(r0, &(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000006c0), &(0x7f0000000700)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000740)={0x3, 0xf5, 0x4, 0xfe, 0xe, 0x3, 0x5f}, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000780)) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r7, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x430, 0x3f4, 0x400, 0x70bd29, 0x25dfdbfb, {0x4, 0x2, 0x36, [0xe2, 0x5, 0x10000000, 0x2, 0x4, 0x10001, 0x101, 0x4, 0x3, 0x7aa, 0x1, 0x10001, 0x8000, 0xf3, 0x56c, 0x800, 0x9, 0x7f, 0x8, 0xaeaa, 0x0, 0x4, 0x5, 0x2, 0x4, 0x8, 0x5, 0x6, 0x23, 0xfff, 0xe, 0x5, 0x9, 0x3, 0x69e, 0x800, 0x7, 0x61b, 0x2677f4df, 0xfffffffc, 0x8, 0x191f, 0x2, 0x9, 0x7, 0xff, 0x9, 0x87fb3b42, 0x7, 0x4ea5, 0x2, 0x2, 0x364958f8, 0xd, 0xffffa7af, 0xd2, 0x265, 0x2, 0xa0, 0x0, 0x8, 0x401, 0x0, 0x6], [0x9, 0x438, 0x2, 0x19, 0xa, 0x0, 0x100, 0x8, 0x8, 0x0, 0x4000, 0x5, 0xfffffffd, 0x7fff, 0x5, 0x6, 0x4, 0x845, 0x3ffc00, 0x5, 0x1, 0x466d, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x3, 0x6, 0x0, 0x9, 0x5, 0xff, 0x800, 0x2, 0xfffffffb, 0x2, 0x7, 0x466d512b, 0x7, 0xd, 0xfffffffb, 0x8, 0x0, 0x6, 0x0, 0x3, 0x9, 0x1, 0x1, 0x4dfe834b, 0x71, 0xdc0, 0x85, 0x4, 0xff, 0x53, 0xfffffc00, 0x1, 0x9, 0x7, 0x8, 0x8ced], [0x9, 0x3, 0x6, 0xa, 0x3ff, 0xa041, 0xe, 0x1fe, 0x4, 0x9, 0x2, 0x2, 0x0, 0x1, 0x0, 0x6, 0x1, 0xb546, 0x1, 0x1, 0x2, 0x1, 0x9, 0x1, 0x9, 0x6, 0x2, 0xc9, 0x83, 0x10, 0xb, 0x2, 0x1ff, 0xffffffff, 0x80000001, 0x10, 0x3, 0xd817, 0x3ee, 0x1, 0x6, 0x91a2bb97, 0x5, 0x2, 0x5d5, 0x5, 0xaa0, 0x1, 0x101, 0x7, 0x1, 0xf782, 0x1000, 0x5, 0x7fff, 0x2, 0xffffffff, 0xffff8000, 0x7, 0x7, 0x7fffffff, 0xe0000000, 0xd9f, 0x7ff], [0xffffffff, 0x4, 0x4, 0x401, 0x7, 0x5, 0x1, 0x2, 0x300, 0xb1, 0x5, 0x9, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x7, 0x1000, 0x101, 0x3, 0x1ff, 0x5, 0x88, 0x8, 0xe000000, 0x5, 0x1, 0xec1, 0x9, 0x3, 0x6, 0x5, 0x842c, 0x101, 0x0, 0x8, 0x9, 0x80, 0x8, 0xff, 0x6, 0x4, 0xf, 0x1, 0xae, 0x6, 0x0, 0x0, 0x0, 0x1, 0xff, 0xbd6, 0x7, 0x4, 0x7, 0xdb, 0x8, 0xffff, 0x1, 0x1, 0x6, 0x0, 0x3], 0xd, ['tunl0\x00', '\'#\x00', '){/\x00']}, ["", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x8000}, 0x100) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r9, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r9, 0x20, 0x70bd2d, 0x1615, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0c0) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x3, 0x1}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)="9b92ae7adebc9f16ae38a74c334b9ab281949de6b7a6697f380e04ab9bd253be931dd6e9e46d77b4f8a94abfd6be05b409953b136df2255ea8c1d75433bb2c3bf38a500eb9aed318f55e8986f9827f12038417fe086b5eb8dde585d6c75ca774a09aa6a4b98b49f45094ef99db770ceb6bc08ee45ec3816f2a642f0f76c0c65f25713bfa3e06", 0x86}], 0x1, &(0x7f0000001080)=[{0x70, 0x107, 0x8, "a066ad8f8b3331ba2dad1b38b924277d4c372d3af86601437438d65448c9811725321ac51ea814d85072647de917f39b1bdc624d55bdb7b2bd04575c63d3ac6a5f5ad623be48f4702d708f637f79203fff77f7c7fecb0b85f7"}, {0x100, 0x11, 0x1, "20f8f7cba72a7cf700fa23eb20bedebe65bd39257ce199db38d54cb4ad629dec1313d9ed7e4de52d43999cbf78c46537bd30e49c12d486fd2b5952a9b57216b610fd76915957aaf72baf320e9150dffdfa6c98f634700ceeea51465a84ca9275c430bffbd0ffd2dc2c327e6bebe6b85bd3a87a346f93c2f8653ab933d7a270a346192bc60ad90c9845ef5c75d2efabd6db3f63944e4d809835a9c2f1c7be4b9a9610d8c376045ca470c444f242a75979bf1094530bb14a9b428fd422e299cdedd8b17b85d8bce17f7185398a4617500bcffd10385eac82c8b764d4e88fd2f5e8a83aed97a4f1abe4e40dea773f84"}, {0x60, 0x3a, 0xb3f9, "d8e8751ac2ba4f4186921558526104a370c5936ba15af4a6b12c9f77396e60123ccf191a5cc51448c46e85283254e5124a48b3ab115e312d368a37100c02f15656f21595472a0b98dc823151e1856bbe"}], 0x1d0}, 0x600080c0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r11, &(0x7f00000012c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), r4) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15b8}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x4) 26.703412606s ago: executing program 3 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c9008c8a7cfc942116783857cbbf94a48949bd944741ae963b551ab2316c2ea4e70cb07d718a94f57b99517e536c4a0f708656296dc71cd9fdf61a59460f7b7062af8be5a922179128352305220b51f9be433dcd62270b07cb8953862060780aba591ad1f7389b5d3d44cb2ed66c1e6d727e831220eb12acab8a8104000000fea2001297c0290208157591a5afd871"], 0x90) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) listen(r0, 0x8) 25.300746006s ago: executing program 3 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02010905"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(r6, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r2, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 25.076722804s ago: executing program 1 (id=442): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 23.226092646s ago: executing program 1 (id=445): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) clock_gettime(0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 21.98611896s ago: executing program 3 (id=446): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) clock_gettime(0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 21.106207242s ago: executing program 0 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0xdad}, {0x0}, {0x0}, {0x0}], 0x4, 0xc) 21.104074938s ago: executing program 1 (id=448): socket(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500587af02a1d0059a300000000001fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xad, &(0x7f0000000300)=""/173, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x100, 0x69}, 0x10}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prwfer:']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x1, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) mkdir(&(0x7f0000000400)='./file0\x00', 0x12) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="687567533d616c7761d61b2aa7622db24f4030ae14df097daee499cb78d0cbcea80d70cda0a70e8a0e1f98832548f380d2e450bd03c17470ee3ce0665cc55ddc3fcb83dcecce7a2db677033ef67daa61a2d6e094b74c31249a0a1b77b803553aab97a63516dcef4a097ad25075239bd9fe43958a10a6e3"]) chdir(&(0x7f0000000040)='./file0\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000423000/0x3000)=nil, 0x3000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0x696a, &(0x7f0000000400)={0x0, 0x771e, 0x20000, 0x2, 0x36f}, &(0x7f0000000180), &(0x7f0000000580)=0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000300)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, r0, 0x0, 0x0, 0x1, 0x0, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x40) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="cd90993f014836a5a77b5a52ab80248db1d655e207a89bcdae00000000000000000000000000e5e5dc10758ffdaec7cb50eb5448970aa10d72cc89a2ed08c7fb1f61a9c3cf9b29bc9c0a8187feb5f062f9f2a7c3e47f041a1906e595138f1e706ed75b9d234f8bf79576652a4e859ac1a553bc78fa311ba82bf51b673811814a13ccb024da5c7344633bf94344d46a778a1edb7e1e792057089715feb4630ec021a759751e66438b3756695080ea19687fe5c793381ddc0ce1e32bdfe3690c268f1ef481a360bcde3455570fa5e4ae9933a0d2e1cf044496ceee71ff87d6b2c3f6848fcbf4d09361f01d96f8785e33239f8544eecac8e997"], 0x0}, 0x0) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000340)) munlock(&(0x7f0000a0e000/0x4000)=nil, 0x4000) 20.231630275s ago: executing program 0 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c9008c8a7cfc942116783857cbbf94a48949bd944741ae963b551ab2316c2ea4e70cb07d718a94f57b99517e536c4a0f708656296dc71cd9fdf61a59460f7b7062af8be5a922179128352305220b51f9be433dcd62270b07cb8953862060780aba591ad1f7389b5d3d44cb2ed66c1e6d727e831220eb12acab8a8104000000fea2001297c0290208157591a5afd871"], 0x90) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x100, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) listen(r0, 0x8) 20.11047214s ago: executing program 3 (id=451): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) r8 = socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000000340)) close(r0) 19.305701534s ago: executing program 4 (id=452): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 19.111219857s ago: executing program 3 (id=453): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02010905"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(r6, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r2, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 17.777473217s ago: executing program 4 (id=454): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 17.740753315s ago: executing program 0 (id=455): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x800) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) futimesat(r7, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) 17.692839629s ago: executing program 1 (id=456): syz_emit_ethernet(0xc8, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x92, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5b5de85e4f8eb45fd0564780829"}, {0xdd86}}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 17.662411773s ago: executing program 4 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x40840) 16.784037151s ago: executing program 0 (id=458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="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", 0xdad}, {0x0}, {0x0}, {0x0}], 0x4, 0xc) 16.715704078s ago: executing program 0 (id=459): openat$urandom(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = epoll_create(0x10001) mount$9p_fd(0xa00, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pipe(0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) ioperm(0x7, 0x7, 0x7e) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) 16.715316766s ago: executing program 0 (id=460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000001d00000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020005000000"], 0x44}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="b9975d52f150a7a644893650a98099665978cb2d9dc8be5da87228e9a05484a5687553aeecedacac032e72e36bd49a8e40f05ee18a04e4396d1f73d729da94493f6192b2ec9995d1f7ee78857efbc53a8b5dc2356aee2bbf9216fc2401eba81bbaff", 0x62}], 0x1, &(0x7f00000000c0), 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x0, 0x5, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380), 0x0, 0x8356, 0x30, 0x2, 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r10, 0x541c, &(0x7f0000000000)) 16.674066865s ago: executing program 1 (id=461): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 16.615763778s ago: executing program 4 (id=462): syz_emit_ethernet(0xc8, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x92, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5b5de85e4f8eb45fd0564780829"}, {0xdd86}}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 16.235748248s ago: executing program 1 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 16.17828224s ago: executing program 4 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000853a9f4efc9d0e6d8023f05aeb73613b645561c7bebacbb18d814bb672e77ac139339a242a90ad16083e065339d30e1e9d3170d1afb0a2db90217670e0b52441b6ffeeaa3a59f6afa698c8ec39ade09ae0328b1275517d134cb505be3d40bb3a5a6ff7d6da4071a7d43d12b5381a859ed089e6217dee0bb9e81cfdc6a1b4c9"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, &(0x7f0000000100)) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400200edff035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) socketpair(0x3, 0xa, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.023959515s ago: executing program 3 (id=465): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) close(r0) 15.099943088s ago: executing program 4 (id=466): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) clock_gettime(0x5, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000340)) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 1.494231323s ago: executing program 33 (id=460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000001d00000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020005000000"], 0x44}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="b9975d52f150a7a644893650a98099665978cb2d9dc8be5da87228e9a05484a5687553aeecedacac032e72e36bd49a8e40f05ee18a04e4396d1f73d729da94493f6192b2ec9995d1f7ee78857efbc53a8b5dc2356aee2bbf9216fc2401eba81bbaff", 0x62}], 0x1, &(0x7f00000000c0), 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b04"], 0x8a}}, 0x40) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x0, 0x5, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380), 0x0, 0x8356, 0x30, 0x2, 0x0}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r10, 0x541c, &(0x7f0000000000)) 998.517177ms ago: executing program 34 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) syslog(0x4, &(0x7f0000000140)=""/61, 0x3d) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500000000000000000000007b", @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@empty, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) 966.829151ms ago: executing program 35 (id=465): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) close(r0) 0s ago: executing program 36 (id=466): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0xf7, &(0x7f0000000700)=""/247, 0x0, 0x37e564fdb2e4d371, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x4, 0x80000000}, 0x10, 0xd8fd, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000bc0)=[{0x2, 0x3, 0x5, 0x3}, {0x0, 0xfffffffe, 0x800c, 0xc}], 0x10, 0xf}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) clock_gettime(0x5, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000340)) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 56.736490][ T30] audit: type=1400 audit(1751149356.248:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.739694][ T5799] cgroup: Unknown subsys name 'net' [ 56.759260][ T30] audit: type=1400 audit(1751149356.248:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.788944][ T30] audit: type=1400 audit(1751149356.298:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.944736][ T5799] cgroup: Unknown subsys name 'cpuset' [ 56.952953][ T5799] cgroup: Unknown subsys name 'rlimit' [ 57.076692][ T30] audit: type=1400 audit(1751149356.588:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.109079][ T30] audit: type=1400 audit(1751149356.588:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.135314][ T30] audit: type=1400 audit(1751149356.588:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.155840][ T30] audit: type=1400 audit(1751149356.588:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.178705][ T30] audit: type=1400 audit(1751149356.598:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.200269][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 57.203624][ T30] audit: type=1400 audit(1751149356.598:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 57.235432][ T30] audit: type=1400 audit(1751149356.628:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.122882][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.735929][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.744329][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.744389][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.759301][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.759936][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.774672][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.774885][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.782732][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.792355][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.802268][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.810572][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.814548][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.817616][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.832383][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.837233][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.840640][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.847369][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.861284][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.861939][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.868413][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.883187][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.892810][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.904435][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 61.904447][ T30] audit: type=1400 audit(1751149361.408:82): avc: denied { read } for pid=5809 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.936989][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.944656][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.952218][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.969117][ T30] audit: type=1400 audit(1751149361.418:83): avc: denied { open } for pid=5809 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.998046][ T30] audit: type=1400 audit(1751149361.418:84): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.196027][ T30] audit: type=1400 audit(1751149361.708:85): avc: denied { module_request } for pid=5809 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.281405][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 62.498141][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.506203][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.513565][ T5809] bridge_slave_0: entered allmulticast mode [ 62.520208][ T5809] bridge_slave_0: entered promiscuous mode [ 62.531364][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.552997][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.560097][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.567304][ T5809] bridge_slave_1: entered allmulticast mode [ 62.574465][ T5809] bridge_slave_1: entered promiscuous mode [ 62.581098][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 62.597202][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 62.649599][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.698564][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.718510][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 62.766155][ T5809] team0: Port device team_slave_0 added [ 62.774502][ T5809] team0: Port device team_slave_1 added [ 62.824430][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.831388][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.857587][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.883691][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.890792][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.898036][ T5812] bridge_slave_0: entered allmulticast mode [ 62.904671][ T5812] bridge_slave_0: entered promiscuous mode [ 62.919547][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.926558][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.953026][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.967087][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.974229][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.981307][ T5820] bridge_slave_0: entered allmulticast mode [ 62.988086][ T5820] bridge_slave_0: entered promiscuous mode [ 62.994940][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.002185][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.009279][ T5812] bridge_slave_1: entered allmulticast mode [ 63.016075][ T5812] bridge_slave_1: entered promiscuous mode [ 63.043885][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.050985][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.058283][ T5811] bridge_slave_0: entered allmulticast mode [ 63.065067][ T5811] bridge_slave_0: entered promiscuous mode [ 63.076128][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.083271][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.090356][ T5820] bridge_slave_1: entered allmulticast mode [ 63.097788][ T5820] bridge_slave_1: entered promiscuous mode [ 63.120064][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.127236][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.136022][ T5811] bridge_slave_1: entered allmulticast mode [ 63.142799][ T5811] bridge_slave_1: entered promiscuous mode [ 63.162809][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.174314][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.223649][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.255792][ T5809] hsr_slave_0: entered promiscuous mode [ 63.262139][ T5809] hsr_slave_1: entered promiscuous mode [ 63.277012][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.284196][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.291266][ T5810] bridge_slave_0: entered allmulticast mode [ 63.298873][ T5810] bridge_slave_0: entered promiscuous mode [ 63.306323][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.314100][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.321210][ T5810] bridge_slave_1: entered allmulticast mode [ 63.328033][ T5810] bridge_slave_1: entered promiscuous mode [ 63.336499][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.347633][ T5812] team0: Port device team_slave_0 added [ 63.355816][ T5812] team0: Port device team_slave_1 added [ 63.372248][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.414562][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.422924][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.449147][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.462202][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.488530][ T5820] team0: Port device team_slave_0 added [ 63.494800][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.503237][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.529323][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.559384][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.574211][ T5820] team0: Port device team_slave_1 added [ 63.594797][ T5811] team0: Port device team_slave_0 added [ 63.603545][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.648550][ T5811] team0: Port device team_slave_1 added [ 63.663190][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.670121][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.696358][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.735013][ T5810] team0: Port device team_slave_0 added [ 63.750180][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.757238][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.783211][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.797353][ T5812] hsr_slave_0: entered promiscuous mode [ 63.803925][ T5812] hsr_slave_1: entered promiscuous mode [ 63.809765][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.817791][ T5812] Cannot create hsr debugfs directory [ 63.828221][ T5810] team0: Port device team_slave_1 added [ 63.834753][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.841967][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.867997][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.895814][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.903051][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.929295][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.962359][ T5818] Bluetooth: hci0: command tx timeout [ 63.990154][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.997156][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.023071][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.041654][ T5818] Bluetooth: hci3: command tx timeout [ 64.041774][ T5828] Bluetooth: hci4: command tx timeout [ 64.047131][ T50] Bluetooth: hci2: command tx timeout [ 64.052566][ T5824] Bluetooth: hci1: command tx timeout [ 64.071392][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.078546][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.104790][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.126699][ T5820] hsr_slave_0: entered promiscuous mode [ 64.132999][ T5820] hsr_slave_1: entered promiscuous mode [ 64.138939][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.146643][ T5820] Cannot create hsr debugfs directory [ 64.183849][ T5811] hsr_slave_0: entered promiscuous mode [ 64.189819][ T5811] hsr_slave_1: entered promiscuous mode [ 64.195984][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.203685][ T5811] Cannot create hsr debugfs directory [ 64.350448][ T5810] hsr_slave_0: entered promiscuous mode [ 64.356714][ T5810] hsr_slave_1: entered promiscuous mode [ 64.362743][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.370275][ T5810] Cannot create hsr debugfs directory [ 64.493527][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.515501][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.539870][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.562367][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.608154][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.628698][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.644693][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.664892][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.696734][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.714429][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.734484][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.752976][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.806608][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.817161][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.826540][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.854057][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.917801][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.935755][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.963961][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.974431][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.988200][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.997163][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.031064][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.038253][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.051276][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.081340][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.088445][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.141359][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.173203][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.190279][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.206839][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.213975][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.247997][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.255140][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.267608][ T30] audit: type=1400 audit(1751149364.768:86): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.310818][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.323079][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.350069][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.361346][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.388534][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.395737][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.405327][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.412392][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.435652][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.442755][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.515223][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.522397][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.543152][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.574749][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.659012][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.686777][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.708686][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.715846][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.768198][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.775300][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.835189][ T5809] veth0_vlan: entered promiscuous mode [ 65.866588][ T5809] veth1_vlan: entered promiscuous mode [ 65.955278][ T5812] veth0_vlan: entered promiscuous mode [ 65.967412][ T5809] veth0_macvtap: entered promiscuous mode [ 65.985731][ T5809] veth1_macvtap: entered promiscuous mode [ 65.994710][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.012832][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.025950][ T5812] veth1_vlan: entered promiscuous mode [ 66.042597][ T5828] Bluetooth: hci0: command tx timeout [ 66.078638][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.115665][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.125952][ T5828] Bluetooth: hci2: command tx timeout [ 66.131381][ T5828] Bluetooth: hci3: command tx timeout [ 66.132454][ T5824] Bluetooth: hci4: command tx timeout [ 66.137180][ T5828] Bluetooth: hci1: command tx timeout [ 66.169321][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.179768][ T5809] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.189222][ T5809] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198311][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.235616][ T5812] veth0_macvtap: entered promiscuous mode [ 66.244695][ T5811] veth0_vlan: entered promiscuous mode [ 66.259673][ T5812] veth1_macvtap: entered promiscuous mode [ 66.285864][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.299330][ T5820] veth0_vlan: entered promiscuous mode [ 66.311014][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.331035][ T5811] veth1_vlan: entered promiscuous mode [ 66.345789][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.354874][ T5820] veth1_vlan: entered promiscuous mode [ 66.394567][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.404633][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.413628][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.422832][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.466016][ T5820] veth0_macvtap: entered promiscuous mode [ 66.490732][ T5820] veth1_macvtap: entered promiscuous mode [ 66.500097][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.519265][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.550544][ T5811] veth0_macvtap: entered promiscuous mode [ 66.609298][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.609486][ T5811] veth1_macvtap: entered promiscuous mode [ 66.629253][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.636937][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.669791][ T30] audit: type=1400 audit(1751149366.178:87): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.7JWIaT/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.713980][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.725196][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.749449][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.773121][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.782067][ T30] audit: type=1400 audit(1751149366.208:88): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.782618][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.811884][ T30] audit: type=1400 audit(1751149366.208:89): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.7JWIaT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.818476][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.840609][ T30] audit: type=1400 audit(1751149366.208:90): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.847966][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.881118][ T30] audit: type=1400 audit(1751149366.218:91): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.7JWIaT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.883272][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.914303][ T30] audit: type=1400 audit(1751149366.218:92): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.7JWIaT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.946820][ T5810] veth0_vlan: entered promiscuous mode [ 66.967862][ T30] audit: type=1400 audit(1751149366.238:93): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.997084][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.007502][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.020567][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.030582][ T30] audit: type=1400 audit(1751149366.248:94): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.034277][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.055830][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.075452][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.086144][ T30] audit: type=1400 audit(1751149366.248:95): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=6694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.114462][ T30] audit: type=1400 audit(1751149366.248:96): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.148151][ T30] audit: type=1400 audit(1751149366.248:97): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 67.226809][ T5810] veth1_vlan: entered promiscuous mode [ 67.267444][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.276325][ T30] audit: type=1400 audit(1751149366.248:98): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.283493][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.299631][ T30] audit: type=1400 audit(1751149366.488:99): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.334209][ T30] audit: type=1400 audit(1751149366.488:100): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.361776][ T30] audit: type=1400 audit(1751149366.488:101): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.896991][ T5810] veth0_macvtap: entered promiscuous mode [ 67.911937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.920398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.928824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.035303][ T5810] veth1_macvtap: entered promiscuous mode [ 68.065432][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.076724][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.122339][ T5828] Bluetooth: hci0: command tx timeout [ 68.179922][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.181237][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.198709][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.208045][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.215062][ T5828] Bluetooth: hci4: command tx timeout [ 68.216609][ T5818] Bluetooth: hci2: command tx timeout [ 68.220787][ T5828] Bluetooth: hci1: command tx timeout [ 68.227801][ T5824] Bluetooth: hci3: command tx timeout [ 68.250099][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.260298][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.270468][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.281335][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.291286][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.300036][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362091][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.399943][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.417857][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.537064][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.545965][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.556795][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.561431][ T5896] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 520 [ 68.608087][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.617898][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.633968][ T5896] usb 2-1: Product: syz [ 68.653471][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.655310][ T5896] usb 2-1: Manufacturer: syz [ 68.682144][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.689566][ T5896] usb 2-1: SerialNumber: syz [ 68.961793][ T5936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.966208][ T5952] FAULT_INJECTION: forcing a failure. [ 68.966208][ T5952] name failslab, interval 1, probability 0, space 0, times 1 [ 68.996875][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.0.9 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 68.996909][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.996919][ T5952] Call Trace: [ 68.996925][ T5952] [ 68.996931][ T5952] dump_stack_lvl+0x16c/0x1f0 [ 68.996960][ T5952] should_fail_ex+0x512/0x640 [ 68.996983][ T5952] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 68.997008][ T5952] should_failslab+0xc2/0x120 [ 68.997033][ T5952] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 68.997055][ T5952] ? getname_flags.part.0+0x4c/0x550 [ 68.997078][ T5952] getname_flags.part.0+0x4c/0x550 [ 68.997097][ T5952] getname_flags+0x93/0xf0 [ 68.997118][ T5952] __x64_sys_renameat2+0xd4/0x130 [ 68.997145][ T5952] do_syscall_64+0xcd/0x4c0 [ 68.997171][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.997188][ T5952] RIP: 0033:0x7f9407b8e929 [ 68.997202][ T5952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.997217][ T5952] RSP: 002b:00007f940891a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 68.997233][ T5952] RAX: ffffffffffffffda RBX: 00007f9407db5fa0 RCX: 00007f9407b8e929 [ 68.997244][ T5952] RDX: ffffffffffffff9c RSI: 0000200000000580 RDI: ffffffffffffff9c [ 68.997255][ T5952] RBP: 00007f940891a090 R08: 0000000000000004 R09: 0000000000000000 [ 68.997265][ T5952] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 68.997274][ T5952] R13: 0000000000000000 R14: 00007f9407db5fa0 R15: 00007ffd5fdea6b8 [ 68.997296][ T5952] [ 69.359145][ T5964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63256 sclass=netlink_route_socket pid=5964 comm=syz.3.13 [ 69.595107][ T5936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.747170][ T5973] process 'syz.0.11' launched './file1' with NULL argv: empty string added [ 69.890835][ T5896] cdc_ncm 2-1:1.0: failed to get mac address [ 70.106384][ T5896] cdc_ncm 2-1:1.0: bind() failure [ 70.119605][ T5972] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 70.126097][ T5896] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 70.141424][ T5896] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 70.177061][ T5896] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 70.218479][ T5824] Bluetooth: hci0: command tx timeout [ 70.218928][ T5973] sctp: failed to load transform for md5: -2 [ 70.272813][ T5896] usb 2-1: USB disconnect, device number 2 [ 70.284788][ T5824] Bluetooth: hci1: command tx timeout [ 70.290208][ T5824] Bluetooth: hci3: command tx timeout [ 70.295685][ T5818] Bluetooth: hci2: command tx timeout [ 70.300581][ T5828] Bluetooth: hci4: command tx timeout [ 70.352163][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.411957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.441867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.728653][ T5883] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 70.796134][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.809491][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.850836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.871519][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 70.917211][ T5883] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 70.960940][ T5883] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 70.998489][ T5883] usb 5-1: Manufacturer: syz [ 71.009334][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.015790][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.067527][ T5883] usb 5-1: config 0 descriptor?? [ 71.090652][ T5997] team0: Device gtp0 is of different type [ 71.157083][ T6000] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 71.331827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 71.497241][ T6006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.24'. [ 71.702508][ T5883] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 71.721146][ T5883] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 71.732813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.042777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.080147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.080180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.123036][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 72.123049][ T30] audit: type=1400 audit(2000000002.670:160): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 72.182443][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.318649][ T30] audit: type=1400 audit(2000000002.860:161): avc: denied { create } for pid=6015 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.453574][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 72.461810][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 72.469801][ T10] usb 2-1: config 0 has no interface number 0 [ 72.486990][ T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 72.503481][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 73.031574][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x89 has invalid maxpacket 41943, setting to 1024 [ 73.053235][ T30] audit: type=1400 audit(2000000003.100:162): avc: denied { write } for pid=6015 comm="syz.2.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.080083][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 73.094759][ T30] audit: type=1400 audit(2000000003.420:163): avc: denied { create } for pid=6015 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.121708][ T30] audit: type=1400 audit(2000000003.630:164): avc: denied { ioctl } for pid=6015 comm="syz.2.27" path="socket:[7824]" dev="sockfs" ino=7824 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.257406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 73.266553][ T10] usb 2-1: Product: syz [ 73.270722][ T10] usb 2-1: SerialNumber: syz [ 73.279350][ T10] usb 2-1: config 0 descriptor?? [ 73.289397][ T10] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 73.305906][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 73.598803][ T6025] sctp: failed to load transform for md5: -2 [ 73.731622][ T30] audit: type=1400 audit(2000000004.240:165): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.787839][ T6006] trusted_key: syz.1.24 sent an empty control message without MSG_MORE. [ 73.823922][ T30] audit: type=1400 audit(2000000004.240:166): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2787 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.852619][ T6033] netlink: 'syz.1.24': attribute type 10 has an invalid length. [ 73.899166][ T30] audit: type=1400 audit(2000000004.240:167): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2787 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.928882][ T30] audit: type=1400 audit(2000000004.310:168): avc: denied { create } for pid=6004 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.034939][ T30] audit: type=1400 audit(2000000004.320:169): avc: denied { ioctl } for pid=6004 comm="syz.1.24" path="socket:[7838]" dev="sockfs" ino=7838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.076071][ T6033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.153595][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.161543][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.168799][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.176046][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.183356][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.190485][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.197609][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.204928][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.212243][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.217638][ T5975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.219356][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 74.273358][ T5924] usb 2-1: USB disconnect, device number 3 [ 74.279260][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.283086][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.764661][ T5924] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 74.849250][ T5975] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 74.860025][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.009174][ T5975] usb 1-1: Product: syz [ 75.013944][ T5975] usb 1-1: Manufacturer: syz [ 75.018547][ T5975] usb 1-1: SerialNumber: syz [ 75.025196][ T5975] usb 1-1: config 0 descriptor?? [ 75.171173][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.192851][ T6056] team0: Device gtp0 is of different type [ 75.213989][ T10] usb 5-1: USB disconnect, device number 2 [ 75.411680][ T6062] nvme_fabrics: unknown parameter or missing value ' -' in ctrl creation request [ 75.821991][ T5975] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 75.829855][ T5975] usb 1-1: Firmware version (0.0) predates our first public release. [ 75.838526][ T5975] usb 1-1: Please update to version 0.2 or newer [ 77.081746][ T5975] usb 1-1: USB disconnect, device number 2 [ 77.219890][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 77.219905][ T30] audit: type=1400 audit(2000000007.760:191): avc: denied { setopt } for pid=6078 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.251663][ T6086] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET) [ 78.141626][ T30] audit: type=1400 audit(2000000007.810:192): avc: denied { read } for pid=6084 comm="syz.4.44" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.181543][ T30] audit: type=1400 audit(2000000007.810:193): avc: denied { open } for pid=6084 comm="syz.4.44" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 78.928161][ T30] audit: type=1400 audit(2000000009.470:194): avc: denied { shutdown } for pid=6104 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.958220][ T30] audit: type=1400 audit(2000000009.470:195): avc: denied { getopt } for pid=6104 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.001295][ T30] audit: type=1400 audit(2000000009.470:196): avc: denied { connect } for pid=6104 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.004218][ T6109] ipvlan2: entered promiscuous mode [ 79.025274][ T30] audit: type=1400 audit(2000000009.470:197): avc: denied { name_connect } for pid=6104 comm="syz.3.49" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.100795][ T30] audit: type=1400 audit(2000000009.470:198): avc: denied { setopt } for pid=6104 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.188076][ T30] audit: type=1400 audit(2000000009.620:199): avc: denied { accept } for pid=6106 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.224868][ T6113] netlink: 104 bytes leftover after parsing attributes in process `syz.2.48'. [ 79.331135][ T30] audit: type=1400 audit(2000000009.870:200): avc: denied { ioctl } for pid=6100 comm="syz.2.48" path="socket:[8789]" dev="sockfs" ino=8789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.552689][ T6115] vxfs: WRONG superblock magic 00000000 at 1 [ 79.561183][ T6115] vxfs: WRONG superblock magic 00000000 at 8 [ 79.567390][ T6115] vxfs: can't find superblock. [ 79.954185][ T6114] ceph: No mds server is up or the cluster is laggy [ 79.967815][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 79.997349][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 80.525214][ T6130] vxfs: WRONG superblock magic 00000000 at 1 [ 80.532329][ T6130] vxfs: WRONG superblock magic 00000000 at 8 [ 80.538339][ T6130] vxfs: can't find superblock. [ 80.880426][ T6129] ceph: No mds server is up or the cluster is laggy [ 80.911907][ T10] libceph: connect (1)[c::]:6789 error -101 [ 80.965388][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 81.166472][ T6107] netlink: 'syz.1.50': attribute type 5 has an invalid length. [ 81.263130][ T976] cfg80211: failed to load regulatory.db [ 81.346840][ T6137] team0: Device gtp0 is of different type [ 82.270232][ T6154] vxfs: WRONG superblock magic 00000000 at 1 [ 82.281485][ T6154] vxfs: WRONG superblock magic 00000000 at 8 [ 82.287531][ T6154] vxfs: can't find superblock. [ 82.593282][ T6152] ceph: No mds server is up or the cluster is laggy [ 82.602453][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 82.608529][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 82.654731][ T6156] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 82.677745][ T6156] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 82.743523][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 82.743538][ T30] audit: type=1326 audit(2000000013.290:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 82.777865][ T30] audit: type=1326 audit(2000000013.290:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 82.867875][ T6163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.895756][ T30] audit: type=1326 audit(2000000013.360:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 82.966588][ T30] audit: type=1326 audit(2000000013.360:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.023377][ T30] audit: type=1326 audit(2000000013.360:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.053252][ T30] audit: type=1326 audit(2000000013.360:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.082679][ T30] audit: type=1326 audit(2000000013.360:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.112968][ T30] audit: type=1326 audit(2000000013.360:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.171667][ T5883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 83.189510][ T30] audit: type=1326 audit(2000000013.360:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.214367][ T30] audit: type=1326 audit(2000000013.360:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 83.221571][ T976] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.331660][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 83.375205][ T5883] usb 5-1: config 2 has an invalid interface number: 44 but max is 3 [ 83.393565][ T5883] usb 5-1: config 2 has an invalid interface number: 4 but max is 3 [ 83.607620][ T6172] vxfs: WRONG superblock magic 00000000 at 1 [ 83.615553][ T6172] vxfs: WRONG superblock magic 00000000 at 8 [ 83.621649][ T6172] vxfs: can't find superblock. [ 83.825038][ T5883] usb 5-1: config 2 has an invalid interface number: 184 but max is 3 [ 83.883239][ T5883] usb 5-1: config 2 has an invalid interface number: 95 but max is 3 [ 83.894719][ T5883] usb 5-1: config 2 has an invalid interface number: 136 but max is 3 [ 83.904546][ T6171] ceph: No mds server is up or the cluster is laggy [ 83.911703][ T5883] usb 5-1: config 2 has an invalid interface number: 187 but max is 3 [ 83.911874][ T43] libceph: connect (1)[c::]:6789 error -101 [ 83.930619][ T5883] usb 5-1: config 2 has 6 interfaces, different from the descriptor's value: 4 [ 83.947329][ T5883] usb 5-1: config 2 has no interface number 0 [ 83.953657][ T5883] usb 5-1: config 2 has no interface number 1 [ 83.960713][ T5883] usb 5-1: config 2 has no interface number 2 [ 83.966961][ T5883] usb 5-1: config 2 has no interface number 3 [ 83.973922][ T5883] usb 5-1: config 2 has no interface number 5 [ 83.980157][ T5883] usb 5-1: config 2 interface 44 altsetting 255 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 83.991612][ T5883] usb 5-1: config 2 interface 44 altsetting 255 bulk endpoint 0xD has invalid maxpacket 32 [ 84.001813][ T5883] usb 5-1: config 2 interface 44 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 84.019624][ T5883] usb 5-1: config 2 interface 44 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 84.031750][ T5883] usb 5-1: config 2 interface 184 altsetting 249 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 84.043993][ T5883] usb 5-1: config 2 interface 184 altsetting 249 has a duplicate endpoint with address 0xD, skipping [ 84.047164][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 84.068825][ T5883] usb 5-1: config 2 interface 184 altsetting 249 has a duplicate endpoint with address 0x9, skipping [ 84.082117][ T5883] usb 5-1: config 2 interface 184 altsetting 249 has a duplicate endpoint with address 0x7, skipping [ 84.095324][ T5883] usb 5-1: config 2 interface 95 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 84.103321][ T976] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 84.107526][ T5883] usb 5-1: config 2 interface 95 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 84.128329][ T5883] usb 5-1: config 2 interface 95 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 84.139591][ T5883] usb 5-1: config 2 interface 95 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 84.221705][ T976] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 84.242653][ T976] usb 1-1: Product: syz [ 84.246872][ T976] usb 1-1: Manufacturer: syz [ 84.251459][ T976] usb 1-1: SerialNumber: syz [ 84.266921][ T5883] usb 5-1: too many endpoints for config 2 interface 136 altsetting 104: 129, using maximum allowed: 30 [ 84.287563][ T976] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 84.361677][ T5883] usb 5-1: config 2 interface 136 altsetting 104 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 84.386990][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has a duplicate endpoint with address 0x9, skipping [ 84.413992][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has a duplicate endpoint with address 0x8, skipping [ 84.437317][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has a duplicate endpoint with address 0x5, skipping [ 84.465959][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 84.510093][ T976] vp7045: USB control message 'out' went wrong. [ 84.511055][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 84.534287][ T976] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 84.541185][ T5883] usb 5-1: config 2 interface 136 altsetting 104 has 8 endpoint descriptors, different from the interface descriptor's value: 129 [ 84.562168][ T5883] usb 5-1: too many endpoints for config 2 interface 187 altsetting 180: 44, using maximum allowed: 30 [ 84.575739][ T5883] usb 5-1: config 2 interface 187 altsetting 180 has a duplicate endpoint with address 0x9, skipping [ 84.597906][ T5883] usb 5-1: config 2 interface 187 altsetting 180 has a duplicate endpoint with address 0xF, skipping [ 84.625027][ T5883] usb 5-1: config 2 interface 187 altsetting 180 has 2 endpoint descriptors, different from the interface descriptor's value: 44 [ 84.640644][ T5883] usb 5-1: config 2 interface 44 has no altsetting 0 [ 84.643156][ T976] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 84.652730][ T5883] usb 5-1: config 2 interface 4 has no altsetting 0 [ 84.760850][ T5883] usb 5-1: config 2 interface 184 has no altsetting 0 [ 84.768149][ T5883] usb 5-1: config 2 interface 95 has no altsetting 0 [ 84.775275][ T5883] usb 5-1: config 2 interface 136 has no altsetting 0 [ 84.783413][ T5883] usb 5-1: config 2 interface 187 has no altsetting 0 [ 84.805804][ T976] usb 1-1: USB disconnect, device number 3 [ 84.809544][ T5883] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff5b, bcdDevice=af.19 [ 84.825311][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.834800][ T5883] usb 5-1: Product: syz [ 84.840195][ T5883] usb 5-1: Manufacturer: syz [ 84.863387][ T5883] usb 5-1: SerialNumber: syz [ 84.885980][ T5883] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 84.917784][ T5883] usb 5-1: no configuration chosen from 1 choice [ 85.016199][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 86.286764][ T43] usb 5-1: USB disconnect, device number 3 [ 87.673796][ T6217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.893134][ T30] kauditd_printk_skb: 472 callbacks suppressed [ 87.893149][ T30] audit: type=1400 audit(2000000018.440:685): avc: denied { read } for pid=6216 comm="syz.4.76" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.987738][ T30] audit: type=1400 audit(2000000018.440:686): avc: denied { open } for pid=6216 comm="syz.4.76" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.165774][ T30] audit: type=1400 audit(2000000018.440:687): avc: denied { ioctl } for pid=6216 comm="syz.4.76" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.800127][ T30] audit: type=1400 audit(2000000018.470:688): avc: denied { append } for pid=6216 comm="syz.4.76" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.823001][ T30] audit: type=1400 audit(2000000018.470:689): avc: denied { map } for pid=6216 comm="syz.4.76" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.109921][ T30] audit: type=1400 audit(2000000018.470:690): avc: denied { set_context_mgr } for pid=6216 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.133742][ T30] audit: type=1400 audit(2000000018.800:691): avc: denied { create } for pid=6219 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.367787][ T30] audit: type=1400 audit(2000000020.820:692): avc: denied { write } for pid=6229 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.819824][ T10] IPVS: starting estimator thread 0... [ 90.921851][ T6238] IPVS: using max 37 ests per chain, 88800 per kthread [ 92.140266][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 92.160361][ T30] audit: type=1400 audit(2000000022.680:693): avc: denied { getopt } for pid=6251 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.203671][ T6252] netlink: 'syz.0.85': attribute type 2 has an invalid length. [ 92.399302][ T30] audit: type=1400 audit(2000000022.940:694): avc: denied { mount } for pid=6247 comm="syz.1.82" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.425668][ T6253] overlay: Unknown parameter 'appraise_type' [ 92.597854][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.88'. [ 92.744721][ T6265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.83'. [ 92.998981][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 92.998996][ T30] audit: type=1400 audit(2000000023.540:700): avc: denied { bind } for pid=6269 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.375701][ T6274] vxfs: WRONG superblock magic 00000000 at 1 [ 93.383136][ T6274] vxfs: WRONG superblock magic 00000000 at 8 [ 93.389148][ T6274] vxfs: can't find superblock. [ 93.477411][ T6273] ceph: No mds server is up or the cluster is laggy [ 93.493517][ T43] libceph: connect (1)[c::]:6789 error -101 [ 93.556808][ T30] audit: type=1400 audit(2000000023.590:701): avc: denied { setopt } for pid=6269 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.589625][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 93.843932][ T30] audit: type=1400 audit(2000000024.390:702): avc: denied { mounton } for pid=6285 comm="syz.1.93" path="/14/file0" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.961758][ T5924] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 94.061743][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.123723][ T5924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.141572][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.151859][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 94.161407][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.172160][ T5924] usb 1-1: SerialNumber: syz [ 94.185797][ T5924] usb 1-1: 0:2 : does not exist [ 94.271581][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 94.281802][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 94.291217][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.305070][ T10] usb 4-1: Product: syz [ 94.309366][ T10] usb 4-1: Manufacturer: syz [ 94.318722][ T10] usb 4-1: SerialNumber: syz [ 94.334765][ T10] usb 4-1: config 0 descriptor?? [ 94.345768][ T10] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 94.411291][ T30] audit: type=1400 audit(2000000024.950:703): avc: denied { bind } for pid=6279 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.010417][ T30] audit: type=1400 audit(2000000024.950:704): avc: denied { listen } for pid=6279 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.130969][ T10] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 95.145684][ T30] audit: type=1400 audit(2000000024.950:705): avc: denied { connect } for pid=6279 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.235950][ T10] visor 4-1:0.0: probe with driver visor failed with error -71 [ 95.244604][ T30] audit: type=1400 audit(2000000024.950:706): avc: denied { accept } for pid=6279 comm="syz.0.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.265656][ T10] usb 4-1: USB disconnect, device number 2 [ 95.732373][ T6316] vxfs: WRONG superblock magic 00000000 at 1 [ 95.739606][ T6316] vxfs: WRONG superblock magic 00000000 at 8 [ 95.746122][ T6316] vxfs: can't find superblock. [ 95.810482][ T6313] ceph: No mds server is up or the cluster is laggy [ 95.824626][ T976] libceph: connect (1)[c::]:6789 error -101 [ 95.911367][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 96.377013][ T30] audit: type=1800 audit(2000000026.920:707): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.101" name="cgroup.controllers" dev="tmpfs" ino=138 res=0 errno=0 [ 96.906256][ T30] audit: type=1400 audit(2000000027.440:708): avc: denied { audit_write } for pid=6320 comm="syz.4.104" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.183454][ T30] audit: type=1400 audit(2000000027.720:709): avc: denied { setattr } for pid=6324 comm="syz.2.105" path="socket:[9485]" dev="sockfs" ino=9485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.219888][ T5924] usb 1-1: USB disconnect, device number 4 [ 97.263735][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.572957][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.787845][ T976] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 97.819405][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.861734][ T976] usb 5-1: Product: syz [ 97.867463][ T976] usb 5-1: Manufacturer: syz [ 97.877265][ T976] usb 5-1: SerialNumber: syz [ 97.898274][ T976] usb 5-1: config 0 descriptor?? [ 98.577950][ T6355] vxfs: WRONG superblock magic 00000000 at 1 [ 98.585237][ T6355] vxfs: WRONG superblock magic 00000000 at 8 [ 98.591283][ T6355] vxfs: can't find superblock. [ 98.879504][ T6353] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 99.082495][ T976] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 99.156167][ T976] usb 5-1: Firmware version (0.0) predates our first public release. [ 99.825200][ T976] usb 5-1: Please update to version 0.2 or newer [ 100.363702][ T976] usb 5-1: USB disconnect, device number 4 [ 100.397519][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 100.397533][ T30] audit: type=1326 audit(2000000030.940:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 100.837757][ T30] audit: type=1326 audit(2000000030.940:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 100.860974][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.869076][ T30] audit: type=1326 audit(2000000030.970:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 100.892217][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.015279][ T30] audit: type=1326 audit(2000000030.970:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.039043][ T30] audit: type=1326 audit(2000000030.970:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.062239][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.163440][ T30] audit: type=1326 audit(2000000030.990:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.648252][ T30] audit: type=1326 audit(2000000030.990:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.671691][ T30] audit: type=1326 audit(2000000030.990:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.694867][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.707452][ T30] audit: type=1326 audit(2000000031.010:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 101.943683][ T30] audit: type=1326 audit(2000000031.010:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.2.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e6398e929 code=0x7ffc0000 [ 102.831102][ T6404] hfsplus: unable to find HFS+ superblock [ 104.835434][ T6428] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 104.890992][ T6430] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 104.897652][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.932587][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 105.056247][ T6430] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(3) [ 105.062799][ T6430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.111882][ T5924] vhci_hcd: vhci_device speed not set [ 105.171749][ T5924] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 105.197918][ T6430] vhci_hcd vhci_hcd.0: Device attached [ 105.873988][ T6436] vhci_hcd: connection closed [ 105.875117][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 105.875128][ T30] audit: type=1400 audit(2000000036.250:775): avc: denied { kexec_image_load } for pid=6427 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 105.891774][ T6431] vhci_hcd: connection reset by peer [ 105.925559][ T1161] vhci_hcd: stop threads [ 105.945539][ T1161] vhci_hcd: release socket [ 106.270123][ T1161] vhci_hcd: disconnect device [ 106.278364][ T1161] vhci_hcd: stop threads [ 106.288506][ T1161] vhci_hcd: release socket [ 106.384204][ T1161] vhci_hcd: disconnect device [ 107.059588][ T6449] fuse: Bad value for 'fd' [ 107.096772][ T6449] team0: Device gtp0 is of different type [ 107.138344][ T30] audit: type=1400 audit(2000000037.680:776): avc: denied { name_bind } for pid=6450 comm="syz.3.138" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.322074][ T30] audit: type=1400 audit(2000000037.840:777): avc: denied { connect } for pid=6457 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.452178][ T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.512911][ T6463] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 109.144585][ T976] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.280415][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 109.306381][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 109.324966][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.336138][ T43] usb 5-1: config 0 descriptor?? [ 109.344378][ T43] gspca_main: sq930x-2.14.0 probing 041e:403c [ 109.426025][ T976] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.435280][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.444225][ T976] usb 3-1: Product: syz [ 109.448738][ T976] usb 3-1: Manufacturer: syz [ 109.453595][ T976] usb 3-1: SerialNumber: syz [ 109.464415][ T976] usb 3-1: config 0 descriptor?? [ 109.606289][ T6486] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 109.623030][ T6489] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 109.623030][ T6489] The task syz.4.140 (6489) triggered the difference, watch for misbehavior. [ 109.766620][ T6493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=6493 comm=syz.3.150 [ 110.446268][ T43] gspca_sq930x: ucbus_write failed -110 [ 110.458436][ T43] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 110.514824][ T6500] block nbd3: Unsupported socket: shutdown callout must be supported. [ 110.527917][ T30] audit: type=1400 audit(2000000041.070:778): avc: denied { read } for pid=6499 comm="syz.3.152" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.561581][ T30] audit: type=1400 audit(2000000041.070:779): avc: denied { ioctl } for pid=6499 comm="syz.3.152" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.600315][ T5924] vhci_hcd: vhci_device speed not set [ 110.646482][ T976] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 110.655583][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 110.663073][ T976] usb 3-1: Firmware version (0.0) predates our first public release. [ 110.681640][ T976] usb 3-1: Please update to version 0.2 or newer [ 110.835489][ T43] usb 5-1: USB disconnect, device number 5 [ 111.033206][ T1206] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.192214][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'. [ 111.243707][ T1206] usb 4-1: Using ep0 maxpacket: 8 [ 111.257538][ T1206] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 111.257563][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.271523][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.359180][ T1206] pvrusb2: Hardware description: Terratec Grabster AV400 [ 111.508398][ T1206] pvrusb2: ********** [ 111.522765][ T1206] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 111.535782][ T1206] pvrusb2: Important functionality might not be entirely working. [ 111.544979][ T1206] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 111.561202][ T1206] pvrusb2: ********** [ 111.578833][ T2335] pvrusb2: Invalid write control endpoint [ 111.591628][ T10] usb 1-1: device descriptor read/64, error -71 [ 112.253633][ T2335] pvrusb2: Invalid write control endpoint [ 112.276880][ T976] usb 3-1: USB disconnect, device number 2 [ 112.289858][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 112.341630][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.357336][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 112.367778][ T30] audit: type=1400 audit(2000000042.910:780): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.393181][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 112.405099][ T2335] pvrusb2: Device being rendered inoperable [ 112.413534][ T30] audit: type=1400 audit(2000000042.910:781): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.436941][ T6504] pvrusb2: Attempted to execute control transfer when device not ok [ 112.446761][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 112.545096][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 112.563417][ T1206] usb 4-1: USB disconnect, device number 3 [ 112.591578][ T10] usb 1-1: device descriptor read/64, error -71 [ 112.613781][ T30] audit: type=1400 audit(2000000042.910:782): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.658293][ T6525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6525 comm=syz.2.158 [ 112.673081][ T2335] pvrusb2: Attached sub-driver cx25840 [ 112.678617][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 113.181804][ T10] usb usb1-port1: attempt power cycle [ 113.189979][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 113.199265][ T30] audit: type=1400 audit(2000000042.910:783): avc: denied { read } for pid=5481 comm="dhcpcd" name="n102" dev="tmpfs" ino=2577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.222875][ T30] audit: type=1400 audit(2000000042.910:784): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.317038][ T30] audit: type=1400 audit(2000000042.910:785): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=2577 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.496902][ T6536] netlink: 'syz.1.161': attribute type 2 has an invalid length. [ 113.522342][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.651340][ T30] audit: type=1400 audit(2000000044.170:786): avc: denied { connect } for pid=6534 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.671050][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.030296][ T30] audit: type=1400 audit(2000000044.180:787): avc: denied { read } for pid=6534 comm="syz.3.160" path="socket:[10874]" dev="sockfs" ino=10874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.054016][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.256293][ T6547] vxfs: WRONG superblock magic 00000000 at 1 [ 114.262875][ T6547] vxfs: WRONG superblock magic 00000000 at 8 [ 114.269548][ T6547] vxfs: can't find superblock. [ 114.748978][ T6546] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 114.875586][ T30] audit: type=1400 audit(2000000044.240:788): avc: denied { write } for pid=6534 comm="syz.3.160" path="socket:[10876]" dev="sockfs" ino=10876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.908540][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.001783][ T10] usb 1-1: device descriptor read/8, error -71 [ 115.971831][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.055473][ T10] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.123495][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.133128][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.287497][ T10] usb 1-1: Product: syz [ 116.288771][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.297591][ T10] usb 1-1: Manufacturer: syz [ 116.368281][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.371907][ T10] usb 1-1: SerialNumber: syz [ 116.410207][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.432169][ T10] usb 1-1: config 0 descriptor?? [ 116.434062][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.483128][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.507135][ T43] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.527995][ T43] usb 5-1: Manufacturer: syz [ 116.553685][ T43] usb 5-1: config 0 descriptor?? [ 116.751785][ T880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.045780][ T880] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 117.055176][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.064407][ T880] usb 4-1: Product: syz [ 117.068787][ T880] usb 4-1: Manufacturer: syz [ 117.075754][ T880] usb 4-1: SerialNumber: syz [ 117.093178][ T880] usb 4-1: config 0 descriptor?? [ 117.326846][ T10] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 117.329091][ T43] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 117.348882][ T10] usb 1-1: Firmware version (0.0) predates our first public release. [ 117.357833][ T10] usb 1-1: Please update to version 0.2 or newer [ 117.362085][ T43] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 118.534923][ T10] usb 1-1: USB disconnect, device number 8 [ 118.692847][ T880] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 118.700721][ T880] usb 4-1: Firmware version (0.0) predates our first public release. [ 118.757785][ T880] usb 4-1: Please update to version 0.2 or newer [ 119.841604][ T1206] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 120.548594][ T30] audit: type=1400 audit(2000000051.090:789): avc: denied { mount } for pid=6593 comm="syz.1.175" name="/" dev="overlay" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.659236][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 121.275323][ T9] usb 5-1: USB disconnect, device number 6 [ 121.614571][ T880] usb 4-1: USB disconnect, device number 4 [ 121.657878][ T30] audit: type=1400 audit(2000000052.160:790): avc: denied { mount } for pid=6593 comm="syz.1.175" name="/" dev="autofs" ino=11246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 121.768362][ T30] audit: type=1400 audit(2000000052.180:791): avc: denied { create } for pid=6593 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 121.789061][ T30] audit: type=1400 audit(2000000052.190:792): avc: denied { connect } for pid=6593 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.139388][ T30] audit: type=1400 audit(2000000052.190:793): avc: denied { read } for pid=6593 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.165520][ T6609] team0: Device gtp0 is of different type [ 122.177877][ T30] audit: type=1400 audit(2000000052.200:794): avc: denied { read } for pid=6608 comm="syz.3.179" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.208873][ T30] audit: type=1400 audit(2000000052.200:795): avc: denied { open } for pid=6608 comm="syz.3.179" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.235291][ T30] audit: type=1400 audit(2000000052.200:796): avc: denied { ioctl } for pid=6608 comm="syz.3.179" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.542673][ T6621] vxfs: WRONG superblock magic 00000000 at 1 [ 122.549512][ T6621] vxfs: WRONG superblock magic 00000000 at 8 [ 122.555642][ T6621] vxfs: can't find superblock. [ 122.808707][ T6620] ceph: No mds server is up or the cluster is laggy [ 122.817193][ T9] libceph: connect (1)[c::]:6789 error -101 [ 122.827468][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 123.260511][ T30] audit: type=1400 audit(2000000053.800:797): avc: denied { write } for pid=6628 comm="syz.2.184" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.654795][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.841731][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 124.504930][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 124.531518][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.548690][ T6644] binder: 6638:6644 ioctl c0306201 200000000080 returned -14 [ 124.578484][ T6644] binder: BINDER_SET_CONTEXT_MGR already set [ 124.595812][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.607375][ T30] audit: type=1400 audit(2000000055.120:798): avc: denied { write } for pid=6638 comm="syz.4.187" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 124.640113][ T6644] binder: 6638:6644 ioctl 4018620d 200000000040 returned -16 [ 124.648447][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 124.674465][ T6650] netlink: 'syz.0.188': attribute type 14 has an invalid length. [ 125.609392][ T6656] afs: Unknown parameter 'fowner' [ 125.617976][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 125.671642][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.710551][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 125.743934][ T30] audit: type=1400 audit(2000000056.290:799): avc: denied { read open } for pid=6666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.786105][ T30] audit: type=1400 audit(2000000056.320:800): avc: denied { getattr } for pid=6666 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.921521][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 125.929989][ T9] usb 3-1: Product: syz [ 125.951773][ T9] usb 3-1: Manufacturer: syz [ 125.956429][ T9] usb 3-1: SerialNumber: syz [ 125.972360][ T9] usb 3-1: config 0 descriptor?? [ 125.979454][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 125.992648][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.443864][ T1206] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 126.497244][ T9] usb 3-1: USB disconnect, device number 3 [ 126.507815][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 126.638963][ T1206] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.659211][ T1206] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.740194][ T1206] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.775455][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.781541][ T30] audit: type=1400 audit(2000000057.320:801): avc: denied { add_name } for pid=6662 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.791534][ T1206] usb 1-1: SerialNumber: syz [ 126.823539][ T30] audit: type=1400 audit(2000000057.320:802): avc: denied { create } for pid=6662 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.858830][ T30] audit: type=1400 audit(2000000057.320:803): avc: denied { write } for pid=6662 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.896146][ T30] audit: type=1400 audit(2000000057.320:804): avc: denied { append } for pid=6662 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.920371][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.968488][ T30] audit: type=1400 audit(2000000057.510:805): avc: denied { remove_name } for pid=6693 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.991884][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.019892][ T30] audit: type=1400 audit(2000000057.550:806): avc: denied { unlink } for pid=6693 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.481242][ T30] audit: type=1800 audit(2000000058.020:807): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.194" name="cgroup.controllers" dev="tmpfs" ino=291 res=0 errno=0 [ 127.503065][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.963490][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.971727][ T6650] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.978044][ T6650] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 127.981987][ T30] audit: type=1400 audit(2000000058.520:808): avc: denied { write } for pid=6714 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.087834][ T6650] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.098947][ T6650] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 128.130506][ T6650] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.148420][ T6650] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 128.238099][ T6650] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.244362][ T6650] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 128.274351][ T6650] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.299477][ T6650] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 129.069871][ T1206] usb 1-1: 0:2 : does not exist [ 129.076768][ T1206] usb 1-1: unit 5 not found! [ 129.115196][ T1206] usb 1-1: USB disconnect, device number 9 [ 129.196664][ T6738] Bluetooth: MGMT ver 1.23 [ 129.258049][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.278459][ T6744] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 129.321546][ T5924] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 129.443644][ T880] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.505461][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.525888][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.538317][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 129.684087][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.821853][ T5924] usb 3-1: SerialNumber: syz [ 129.981548][ T880] usb 4-1: Using ep0 maxpacket: 16 [ 129.993258][ T880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 130.006223][ T5924] usb 3-1: can't set config #1, error -71 [ 130.022229][ T880] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 130.030753][ T5924] usb 3-1: USB disconnect, device number 4 [ 130.031381][ T880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.083012][ T880] usb 4-1: Product: syz [ 130.087220][ T880] usb 4-1: Manufacturer: syz [ 130.188199][ T880] usb 4-1: SerialNumber: syz [ 130.201099][ T880] usb 4-1: config 0 descriptor?? [ 130.210625][ T880] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 130.283651][ T880] usb 4-1: Detected FT232R [ 132.236322][ T880] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 132.251968][ T880] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 132.269728][ T880] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 133.075931][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.085244][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251416][ T880] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 133.268631][ T880] usb 4-1: USB disconnect, device number 5 [ 133.288191][ T880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 133.611800][ T880] ftdi_sio 4-1:0.0: device disconnected [ 138.457120][ T30] audit: type=1400 audit(2000000069.000:809): avc: denied { read write } for pid=6836 comm="syz.2.221" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 138.571509][ T30] audit: type=1400 audit(2000000069.000:810): avc: denied { open } for pid=6836 comm="syz.2.221" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 140.192519][ T6869] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 140.201266][ T6869] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 140.389066][ T6869] netlink: 332 bytes leftover after parsing attributes in process `syz.3.228'. [ 140.417327][ T6869] netlink: 160 bytes leftover after parsing attributes in process `syz.3.228'. [ 141.299124][ T1206] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 141.452261][ T1206] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.659131][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 142.245277][ T6896] fido_id[6896]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.171581][ T30] audit: type=1400 audit(2000000075.710:811): avc: denied { setopt } for pid=6914 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.639522][ T30] audit: type=1400 audit(2000000075.800:812): avc: denied { setopt } for pid=6909 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.659656][ T30] audit: type=1400 audit(2000000075.800:813): avc: denied { write } for pid=6909 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.679473][ T30] audit: type=1400 audit(2000000075.880:814): avc: denied { bind } for pid=6909 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 145.698770][ T30] audit: type=1400 audit(2000000075.880:815): avc: denied { connect } for pid=6909 comm="syz.4.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 145.861763][ T6916] netlink: 'syz.2.239': attribute type 23 has an invalid length. [ 147.904721][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.943309][ T9] usb 1-1: device descriptor read/all, error -71 [ 150.549590][ T6969] Zero length message leads to an empty skb [ 150.611546][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.815195][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 150.853285][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.902392][ T9] usb 1-1: Product: syz [ 150.906653][ T9] usb 1-1: Manufacturer: syz [ 150.931647][ T9] usb 1-1: SerialNumber: syz [ 150.962293][ T9] usb 1-1: config 0 descriptor?? [ 150.996621][ T6981] trusted_key: encrypted_key: keylen parameter is missing [ 152.030794][ T30] audit: type=1400 audit(2000000082.570:816): avc: denied { map } for pid=6980 comm="syz.4.254" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.112656][ T30] audit: type=1400 audit(2000000082.570:817): avc: denied { execute } for pid=6980 comm="syz.4.254" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.144799][ T30] audit: type=1400 audit(2000000082.570:818): avc: denied { attach_queue } for pid=6980 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 152.165547][ T9] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 152.177105][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 152.187570][ T9] usb 1-1: Please update to version 0.2 or newer [ 152.383658][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 152.656357][ T5924] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.964915][ T9] usb 1-1: USB disconnect, device number 11 [ 153.039975][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.073431][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.099623][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.143445][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 153.179022][ T5924] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 153.195157][ T5924] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 153.203683][ T5924] usb 3-1: Manufacturer: syz [ 153.229072][ T5924] usb 3-1: config 0 descriptor?? [ 154.354850][ T30] audit: type=1800 audit(2000000084.900:819): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.263" name="cgroup.controllers" dev="tmpfs" ino=359 res=0 errno=0 [ 155.678394][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 155.704610][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 155.718474][ T5924] usb 3-1: USB disconnect, device number 5 [ 157.620683][ T7078] fuse: Bad value for 'fd' [ 157.649708][ T7078] team0: Device gtp0 is of different type [ 157.875914][ T7087] fuse: Bad value for 'fd' [ 158.557455][ T7087] team0: Device gtp0 is of different type [ 158.885173][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'. [ 159.830519][ T30] audit: type=1400 audit(2000000090.370:820): avc: denied { create } for pid=7109 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.921571][ T30] audit: type=1400 audit(2000000090.400:821): avc: denied { bind } for pid=7109 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.980415][ T30] audit: type=1400 audit(2000000090.400:822): avc: denied { execute } for pid=7109 comm="syz.4.287" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 160.051523][ T30] audit: type=1400 audit(2000000090.460:823): avc: denied { write } for pid=7109 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.094565][ T7119] SELinux: failed to load policy [ 160.101908][ T30] audit: type=1400 audit(2000000090.460:824): avc: denied { name_bind } for pid=7112 comm="syz.1.286" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 160.153752][ T30] audit: type=1400 audit(2000000090.460:825): avc: denied { node_bind } for pid=7112 comm="syz.1.286" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 160.201898][ T30] audit: type=1400 audit(2000000090.520:826): avc: denied { ioctl } for pid=7109 comm="syz.4.287" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13801 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.258348][ T30] audit: type=1400 audit(2000000090.640:827): avc: denied { load_policy } for pid=7112 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 160.366001][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.501679][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 161.024545][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.041539][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.074172][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.101561][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 161.111726][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.145619][ T5924] usb 2-1: too many endpoints for config 0 interface 0 altsetting 116: 114, using maximum allowed: 30 [ 161.156279][ T30] audit: type=1400 audit(2000000091.700:828): avc: denied { append } for pid=7128 comm="syz.3.291" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 161.179392][ T5924] usb 2-1: config 0 interface 0 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 161.200835][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 161.210047][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.221039][ T10] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.230001][ T10] usb 1-1: Manufacturer: syz [ 161.238262][ T5924] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 161.253389][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 161.271538][ T5924] usb 2-1: Product: syz [ 161.276419][ T5924] usb 2-1: Manufacturer: syz [ 161.281018][ T5924] usb 2-1: SerialNumber: syz [ 161.291106][ T10] usb 1-1: config 0 descriptor?? [ 161.297272][ T5924] usb 2-1: config 0 descriptor?? [ 161.499372][ T7134] ubi31: attaching mtd0 [ 161.510698][ T7134] ubi31: scanning is finished [ 161.515554][ T7134] ubi31: empty MTD device detected [ 161.528661][ T30] audit: type=1400 audit(2000000092.040:829): avc: denied { append } for pid=7128 comm="syz.3.291" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.001710][ T5924] usb 2-1: USB disconnect, device number 4 [ 162.131387][ T6596] udevd[6596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.318133][ T7145] vxfs: WRONG superblock magic 00000000 at 1 [ 162.325042][ T7145] vxfs: WRONG superblock magic 00000000 at 8 [ 162.331100][ T7145] vxfs: can't find superblock. [ 162.341989][ T7134] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 162.349631][ T7134] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 162.357040][ T7134] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 162.364254][ T7134] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 162.371797][ T7134] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 162.378693][ T7134] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 162.386864][ T7134] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1185744508 [ 162.396996][ T7134] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 162.431811][ T7146] ubi31: background thread "ubi_bgt31d" started, PID 7146 [ 162.467947][ T7142] ceph: No mds server is up or the cluster is laggy [ 162.476424][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 162.516115][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 163.082866][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 163.089330][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 163.135335][ T10] usb 1-1: USB disconnect, device number 12 [ 165.123268][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 165.123282][ T30] audit: type=1400 audit(2000000095.340:832): avc: denied { shutdown } for pid=7164 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 165.776718][ T7178] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 165.800765][ T7179] netlink: 'syz.0.302': attribute type 23 has an invalid length. [ 165.829489][ T7178] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 166.213995][ T30] audit: type=1326 audit(2000000096.750:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.388939][ T30] audit: type=1326 audit(2000000096.750:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.402702][ T10] libceph: connect (1)[c::]:6789 error -101 [ 166.444269][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 166.451543][ T30] audit: type=1326 audit(2000000096.800:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f662712ab19 code=0x7ffc0000 [ 166.471566][ T7189] ceph: No mds server is up or the cluster is laggy [ 166.507674][ T30] audit: type=1326 audit(2000000096.800:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.547242][ T30] audit: type=1326 audit(2000000096.800:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.547284][ T30] audit: type=1326 audit(2000000096.800:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f662712ab19 code=0x7ffc0000 [ 166.547323][ T30] audit: type=1326 audit(2000000096.800:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.547470][ T30] audit: type=1326 audit(2000000096.800:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f662712ab19 code=0x7ffc0000 [ 166.547684][ T30] audit: type=1326 audit(2000000096.800:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 166.650125][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.894328][ T10] libceph: connect (1)[c::]:6789 error -101 [ 166.894492][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 167.041996][ T7189] vxfs: WRONG superblock magic 00000000 at 1 [ 167.061694][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.278313][ T7189] vxfs: WRONG superblock magic 00000000 at 8 [ 167.291248][ T7212] loop8: detected capacity change from 0 to 79 [ 167.782713][ T7212] loop8: detected capacity change from 79 to 78 [ 167.840121][ T7189] vxfs: can't find superblock. [ 169.741389][ T7236] netlink: 'syz.0.315': attribute type 23 has an invalid length. [ 170.135230][ T7248] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 170.193055][ T7254] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 170.709937][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 170.709951][ T30] audit: type=1326 audit(2000000101.250:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 170.858152][ T30] audit: type=1326 audit(2000000101.250:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 170.881401][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.011572][ T30] audit: type=1326 audit(2000000101.290:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 171.036051][ T7250] netlink: 'syz.1.320': attribute type 23 has an invalid length. [ 172.042897][ T5941] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 172.070252][ T30] audit: type=1326 audit(2000000101.290:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.107929][ T30] audit: type=1326 audit(2000000101.290:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.135816][ T30] audit: type=1326 audit(2000000101.290:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.164912][ T30] audit: type=1326 audit(2000000101.290:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.191282][ T30] audit: type=1326 audit(2000000101.290:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.216337][ T30] audit: type=1326 audit(2000000101.290:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.290300][ T30] audit: type=1326 audit(2000000101.290:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f662718e929 code=0x7ffc0000 [ 172.474642][ T5941] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 172.493951][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.511553][ T5941] usb 3-1: Product: syz [ 172.521546][ T5941] usb 3-1: Manufacturer: syz [ 173.333926][ T5941] usb 3-1: SerialNumber: syz [ 173.447388][ T5941] usb 3-1: config 0 descriptor?? [ 173.463172][ T5941] usb 3-1: can't set config #0, error -71 [ 173.480369][ T5941] usb 3-1: USB disconnect, device number 6 [ 174.631571][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.323'. [ 177.258087][ T7327] ubi: mtd0 is already attached to ubi31 [ 182.340267][ T7380] team0: Device gtp0 is of different type [ 182.352394][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.523631][ T5896] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 182.554688][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.573527][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 182.595559][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.595586][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 182.596528][ T5896] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 182.596550][ T5896] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 182.596563][ T5896] usb 4-1: Manufacturer: syz [ 182.610515][ T5896] usb 4-1: config 0 descriptor?? [ 183.025699][ T5896] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 183.055734][ T5896] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 185.299765][ T7405] trusted_key: encrypted_key: keylen parameter is missing [ 187.535484][ T976] usb 4-1: USB disconnect, device number 6 [ 187.950144][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 187.950160][ T30] audit: type=1400 audit(2000000118.490:970): avc: denied { open } for pid=7426 comm="syz.1.358" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 189.221646][ T7441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.360'. [ 189.481656][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.762533][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 189.770616][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 190.729782][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.742558][ T10] usb 2-1: Product: syz [ 190.746753][ T10] usb 2-1: Manufacturer: syz [ 190.751354][ T10] usb 2-1: SerialNumber: syz [ 190.795794][ T10] usb 2-1: config 0 descriptor?? [ 190.924010][ T10] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 191.304064][ T10] gspca_sn9c2028: read1 error -71 [ 191.304080][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 191.304217][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 191.314001][ T10] gspca_sn9c2028: read1 error -71 [ 191.327750][ T7467] ceph: No mds server is up or the cluster is laggy [ 191.353557][ T10] gspca_sn9c2028: read1 error -71 [ 191.353620][ T10] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 191.359739][ T10] usb 2-1: USB disconnect, device number 5 [ 191.411012][ T7467] vxfs: WRONG superblock magic 00000000 at 1 [ 191.417322][ T7467] vxfs: WRONG superblock magic 00000000 at 8 [ 191.423382][ T7467] vxfs: can't find superblock. [ 191.551407][ T30] audit: type=1800 audit(2000000122.090:971): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.369" name="cgroup.controllers" dev="tmpfs" ino=396 res=0 errno=0 [ 191.573811][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.641747][ T7484] netlink: 'syz.1.374': attribute type 23 has an invalid length. [ 193.896356][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.902793][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.840523][ T7516] ubi: mtd0 is already attached to ubi31 [ 196.372421][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'. [ 196.771013][ T7537] netlink: 'syz.4.388': attribute type 23 has an invalid length. [ 196.853223][ T30] audit: type=1400 audit(2000000127.400:972): avc: denied { create } for pid=7538 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.906001][ T30] audit: type=1400 audit(2000000127.420:973): avc: denied { write } for pid=7538 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.769893][ T7547] trusted_key: encrypted_key: keylen parameter is missing [ 198.281646][ T976] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 198.512449][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.913467][ T976] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.922616][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.931275][ T976] usb 1-1: Product: syz [ 198.935767][ T976] usb 1-1: Manufacturer: syz [ 198.940355][ T976] usb 1-1: SerialNumber: syz [ 198.947918][ T976] usb 1-1: config 0 descriptor?? [ 199.066740][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 199.086037][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.096737][ T5876] usb 2-1: Product: syz [ 199.100937][ T5876] usb 2-1: Manufacturer: syz [ 199.108299][ T7563] netlink: 'syz.3.398': attribute type 23 has an invalid length. [ 199.120376][ T5876] usb 2-1: SerialNumber: syz [ 199.132554][ T5876] usb 2-1: config 0 descriptor?? [ 199.475329][ T976] usb 1-1: Firmware version (0.0) predates our first public release. [ 199.484918][ T976] usb 1-1: Please update to version 0.2 or newer [ 200.052426][ T976] usb 1-1: USB disconnect, device number 13 [ 200.286740][ T5876] usb 2-1: Firmware version (0.0) predates our first public release. [ 200.299666][ T5876] usb 2-1: Please update to version 0.2 or newer [ 200.472770][ T5876] usb 2-1: USB disconnect, device number 6 [ 200.548041][ T7586] ubi: mtd0 is already attached to ubi31 [ 202.480482][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 206.289464][ T7628] trusted_key: encrypted_key: keylen parameter is missing [ 206.339145][ T30] audit: type=1400 audit(2000000136.880:974): avc: denied { mount } for pid=7629 comm="syz.3.416" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.427092][ T30] audit: type=1400 audit(2000000136.970:975): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.643215][ T7638] vxfs: WRONG superblock magic 00000000 at 1 [ 206.655968][ T7638] vxfs: WRONG superblock magic 00000000 at 8 [ 207.766993][ T7425] libceph: connect (1)[c::]:6789 error -101 [ 208.504523][ T7425] libceph: mon0 (1)[c::]:6789 connect error [ 208.573964][ T7633] ceph: No mds server is up or the cluster is laggy [ 208.590898][ T7638] vxfs: can't find superblock. [ 210.821566][ T7680] ubi: mtd0 is already attached to ubi31 [ 211.979295][ T7695] ubi: mtd0 is already attached to ubi31 [ 212.859463][ T7425] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 212.994649][ T7704] ubi: mtd0 is already attached to ubi31 [ 214.095125][ T7425] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 214.136073][ T7425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.172508][ T7425] usb 1-1: Product: syz [ 214.205885][ T7425] usb 1-1: Manufacturer: syz [ 214.230140][ T7425] usb 1-1: SerialNumber: syz [ 214.338858][ T7425] usb 1-1: config 0 descriptor?? [ 215.128659][ T7425] usb 1-1: Firmware version (0.0) predates our first public release. [ 215.137341][ T7425] usb 1-1: Please update to version 0.2 or newer [ 216.114072][ T7425] usb 1-1: USB disconnect, device number 14 [ 217.490591][ T7739] ubi: mtd0 is already attached to ubi31 [ 218.707098][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 220.752746][ T7767] tmpfs: Bad value for 'mpol' [ 221.708954][ T7781] team0: Device gtp0 is of different type [ 221.777382][ T7763] tmpfs: Unknown parameter 'hugS' [ 222.781500][ T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 222.868073][ T7792] ubi: mtd0 is already attached to ubi31 [ 223.353732][ T976] usb 2-1: Using ep0 maxpacket: 16 [ 223.386937][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.421231][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.461124][ T976] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 223.494378][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.559801][ T976] usb 2-1: config 0 descriptor?? [ 223.970547][ T976] usbhid 2-1:0.0: can't add hid device: -71 [ 223.979258][ T976] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.003719][ T976] usb 2-1: USB disconnect, device number 7 [ 224.970424][ T7806] netlink: 'syz.4.457': attribute type 23 has an invalid length. [ 225.065170][ T7818] team0: Device gtp0 is of different type [ 225.080259][ T7816] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 225.274367][ T7825] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 225.461637][ T30] audit: type=1326 audit(2000000155.990:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9407b8e929 code=0x7ffc0000 [ 225.536093][ T30] audit: type=1326 audit(2000000155.990:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9407b8e929 code=0x7ffc0000 [ 225.562139][ T30] audit: type=1326 audit(2000000155.990:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9407b8e929 code=0x7ffc0000 [ 225.585366][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.609272][ T7831] netlink: 'syz.4.464': attribute type 21 has an invalid length. [ 225.664562][ T7833] fuse: Bad value for 'fd' [ 225.666823][ T7831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.464'. [ 225.698599][ T7833] team0: Device gtp0 is of different type [ 225.707735][ T30] audit: type=1326 audit(2000000155.990:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7815 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9407b8e929 code=0x7ffc0000 [ 255.324583][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.330906][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.773747][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.780347][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.001468][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 343.009054][ T31] Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 [ 343.016730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.025419][ T31] task:kworker/1:1 state:D stack:22872 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 343.037445][ T31] Workqueue: events rfkill_sync_work [ 343.042808][ T31] Call Trace: [ 343.046091][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 343.049027][ T31] __schedule+0x116a/0x5de0 [ 343.061463][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 343.066473][ T31] ? __pfx___schedule+0x10/0x10 [ 343.091450][ T31] ? find_held_lock+0x2b/0x80 [ 343.096189][ T31] ? schedule+0x2d7/0x3a0 [ 343.100548][ T31] schedule+0xe7/0x3a0 [ 343.121153][ T31] schedule_preempt_disabled+0x13/0x30 [ 343.133948][ T31] __mutex_lock+0x6c7/0xb90 [ 343.138497][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.143594][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 343.148196][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 343.153499][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 343.158538][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 343.164041][ T31] ? mark_held_locks+0x49/0x80 [ 343.168825][ T31] nfc_dev_down+0x2d/0x2e0 [ 343.173300][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 343.178414][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 343.184373][ T31] rfkill_set_block+0x1fe/0x550 [ 343.189229][ T31] rfkill_sync+0x10a/0x1c0 [ 343.193766][ T31] rfkill_sync_work+0x27/0x40 [ 343.198454][ T31] process_one_work+0x9cc/0x1b70 [ 343.203451][ T31] ? __pfx_process_one_work+0x10/0x10 [ 343.208821][ T31] ? assign_work+0x1a0/0x250 [ 343.213471][ T31] worker_thread+0x6c8/0xf10 [ 343.218066][ T31] ? __pfx_worker_thread+0x10/0x10 [ 343.223249][ T31] kthread+0x3c2/0x780 [ 343.227334][ T31] ? __pfx_kthread+0x10/0x10 [ 343.231969][ T31] ? rcu_is_watching+0x12/0xc0 [ 343.236737][ T31] ? __pfx_kthread+0x10/0x10 [ 343.241328][ T31] ret_from_fork+0x5d4/0x6f0 [ 343.246002][ T31] ? __pfx_kthread+0x10/0x10 [ 343.250585][ T31] ret_from_fork_asm+0x1a/0x30 [ 343.255388][ T31] [ 343.258487][ T31] INFO: task kworker/1:6:5941 blocked for more than 143 seconds. [ 343.266221][ T31] Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 [ 343.273912][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.282616][ T31] task:kworker/1:6 state:D stack:24632 pid:5941 tgid:5941 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 343.294659][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 343.301324][ T31] Call Trace: [ 343.304627][ T31] [ 343.307551][ T31] __schedule+0x116a/0x5de0 [ 343.312097][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 343.317045][ T31] ? __pfx___schedule+0x10/0x10 [ 343.321933][ T31] ? find_held_lock+0x2b/0x80 [ 343.326607][ T31] ? schedule+0x2d7/0x3a0 [ 343.330927][ T31] schedule+0xe7/0x3a0 [ 343.335038][ T31] schedule_preempt_disabled+0x13/0x30 [ 343.340495][ T31] __mutex_lock+0x6c7/0xb90 [ 343.345026][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.351352][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 343.356445][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.362283][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 343.368200][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.374603][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 343.380779][ T31] process_one_work+0x9cc/0x1b70 [ 343.385757][ T31] ? __pfx_process_one_work+0x10/0x10 [ 343.391141][ T31] ? assign_work+0x1a0/0x250 [ 343.395782][ T31] worker_thread+0x6c8/0xf10 [ 343.400373][ T31] ? __pfx_worker_thread+0x10/0x10 [ 343.405625][ T31] kthread+0x3c2/0x780 [ 343.409690][ T31] ? __pfx_kthread+0x10/0x10 [ 343.414453][ T31] ? rcu_is_watching+0x12/0xc0 [ 343.419235][ T31] ? __pfx_kthread+0x10/0x10 [ 343.424082][ T31] ret_from_fork+0x5d4/0x6f0 [ 343.428683][ T31] ? __pfx_kthread+0x10/0x10 [ 343.433311][ T31] ret_from_fork_asm+0x1a/0x30 [ 343.438076][ T31] [ 343.441141][ T31] INFO: task syz.2.344:7369 blocked for more than 143 seconds. [ 343.448798][ T31] Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 [ 343.456470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.465149][ T31] task:syz.2.344 state:D stack:26280 pid:7369 tgid:7369 ppid:5809 task_flags:0x400040 flags:0x00004004 [ 343.477114][ T31] Call Trace: [ 343.480373][ T31] [ 343.483429][ T31] __schedule+0x116a/0x5de0 [ 343.487946][ T31] ? __lock_acquire+0x622/0x1c90 [ 343.493199][ T31] ? __pfx___schedule+0x10/0x10 [ 343.498080][ T31] ? find_held_lock+0x2b/0x80 [ 343.502816][ T31] ? schedule+0x2d7/0x3a0 [ 343.507169][ T31] schedule+0xe7/0x3a0 [ 343.511237][ T31] schedule_timeout+0x257/0x290 [ 343.516126][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 343.521553][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.526749][ T31] __wait_for_common+0x2fc/0x4e0 [ 343.531712][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 343.537096][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 343.542668][ T31] ? find_held_lock+0x2b/0x80 [ 343.547363][ T31] ? __flush_work+0x938/0xcc0 [ 343.552100][ T31] ? __flush_work+0x4d0/0xcc0 [ 343.556793][ T31] __flush_work+0x7d7/0xcc0 [ 343.561287][ T31] ? __pfx___flush_work+0x10/0x10 [ 343.566374][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 343.571771][ T31] ? __pfx___might_resched+0x10/0x10 [ 343.577075][ T31] __cancel_work_sync+0x10c/0x130 [ 343.582126][ T31] rfkill_unregister+0x95/0x2c0 [ 343.587001][ T31] nfc_unregister_device+0x94/0x330 [ 343.592250][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 343.597973][ T31] virtual_ncidev_close+0x4b/0xa0 [ 343.603029][ T31] __fput+0x3ff/0xb70 [ 343.607016][ T31] task_work_run+0x150/0x240 [ 343.611642][ T31] ? __pfx_task_work_run+0x10/0x10 [ 343.616749][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 343.622510][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 343.627811][ T31] do_syscall_64+0x3f6/0x4c0 [ 343.632503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.638439][ T31] RIP: 0033:0x7f7e6398e929 [ 343.642901][ T31] RSP: 002b:00007ffc5e066e08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 343.651330][ T31] RAX: 0000000000000000 RBX: 000000000002c75c RCX: 00007f7e6398e929 [ 343.659359][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 343.667369][ T31] RBP: 00007f7e63bb7ba0 R08: 0000000000000001 R09: 0000001e5e0670ff [ 343.675376][ T31] R10: 00007f7e63800000 R11: 0000000000000246 R12: 00007f7e63bb5fac [ 343.683361][ T31] R13: 00007f7e63bb5fa0 R14: ffffffffffffffff R15: 00007ffc5e066f20 [ 343.691333][ T31] [ 343.694417][ T31] INFO: task syz-executor:7559 blocked for more than 143 seconds. [ 343.704101][ T31] Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 [ 343.711766][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.720426][ T31] task:syz-executor state:D stack:28440 pid:7559 tgid:7559 ppid:1 task_flags:0x400040 flags:0x00004000 [ 343.732370][ T31] Call Trace: [ 343.735641][ T31] [ 343.738554][ T31] __schedule+0x116a/0x5de0 [ 343.743110][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 343.748490][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 343.753998][ T31] ? kasan_save_stack+0x60/0x60 [ 343.758853][ T31] ? __lock_acquire+0x622/0x1c90 [ 343.763836][ T31] ? __pfx___schedule+0x10/0x10 [ 343.768700][ T31] ? find_held_lock+0x2b/0x80 [ 343.773434][ T31] ? schedule+0x2d7/0x3a0 [ 343.777778][ T31] schedule+0xe7/0x3a0 [ 343.781892][ T31] schedule_preempt_disabled+0x13/0x30 [ 343.787362][ T31] __mutex_lock+0x6c7/0xb90 [ 343.791910][ T31] ? rfkill_register+0x3a/0xb40 [ 343.796757][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 343.801824][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 343.807211][ T31] ? __init_waitqueue_head+0xca/0x150 [ 343.812617][ T31] ? rfkill_register+0x3a/0xb40 [ 343.817462][ T31] ? rfkill_alloc+0x25b/0x330 [ 343.822146][ T31] rfkill_register+0x3a/0xb40 [ 343.826821][ T31] hci_register_dev+0x3cc/0xc60 [ 343.831716][ T31] __vhci_create_device+0x357/0x7f0 [ 343.836924][ T31] vhci_write+0x2c0/0x480 [ 343.841236][ T31] vfs_write+0x6c4/0x1150 [ 343.845590][ T31] ? __pfx_vhci_write+0x10/0x10 [ 343.850442][ T31] ? __pfx_vfs_write+0x10/0x10 [ 343.855240][ T31] ? find_held_lock+0x2b/0x80 [ 343.859919][ T31] ? find_held_lock+0x2b/0x80 [ 343.864640][ T31] ksys_write+0x12a/0x250 [ 343.868982][ T31] ? __pfx_ksys_write+0x10/0x10 [ 343.873889][ T31] do_syscall_64+0xcd/0x4c0 [ 343.878398][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.884328][ T31] RIP: 0033:0x7f611738d3a0 [ 343.888747][ T31] RSP: 002b:00007fff7f7ca268 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 343.897211][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f611738d3a0 [ 343.905552][ T31] RDX: 0000000000000002 RSI: 00007fff7f7ca27a RDI: 00000000000000ca [ 343.913564][ T31] RBP: 00007f61175b6738 R08: 0000000000000000 R09: 00007f61180ed6c0 [ 343.921565][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 343.929542][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 343.937567][ T31] [ 343.940599][ T31] [ 343.940599][ T31] Showing all locks held in the system: [ 343.948623][ T31] 1 lock held by khungtaskd/31: [ 343.953532][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 343.963853][ T31] 4 locks held by kworker/1:1/43: [ 343.968867][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 343.979354][ T31] #1: ffffc90000b37d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 343.991130][ T31] #2: ffffffff907edc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 344.001070][ T31] #3: ffff88807a98f100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 344.010090][ T31] 2 locks held by getty/5571: [ 344.014780][ T31] #0: ffff888037ab20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 344.024581][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 344.034698][ T31] 3 locks held by kworker/1:6/5941: [ 344.039884][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 344.050518][ T31] #1: ffffc9000401fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 344.063463][ T31] #2: ffffffff907edc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 344.074916][ T31] 1 lock held by syz.2.344/7369: [ 344.079854][ T31] #0: ffff88807a98f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 344.089629][ T31] 2 locks held by syz-executor/7559: [ 344.094936][ T31] #0: ffff8880252f9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 344.104358][ T31] #1: ffffffff907edc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 344.114298][ T31] 2 locks held by syz.0.460/7816: [ 344.119321][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.127823][ T31] #1: ffffffff907edc68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 344.137886][ T31] 1 lock held by syz.0.460/7827: [ 344.142847][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.151292][ T31] 1 lock held by syz.1.463/7829: [ 344.156233][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.164737][ T31] 1 lock held by syz.1.463/7832: [ 344.169645][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.178090][ T31] 1 lock held by syz.3.465/7840: [ 344.183070][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.191564][ T31] 1 lock held by syz.3.465/7841: [ 344.196496][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.205008][ T31] 1 lock held by syz.4.466/7845: [ 344.209930][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.218452][ T31] 1 lock held by syz.4.466/7846: [ 344.223404][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.231862][ T31] 1 lock held by syz-executor/7853: [ 344.237044][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.245517][ T31] 1 lock held by syz-executor/7856: [ 344.250711][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.259161][ T31] 1 lock held by syz-executor/7857: [ 344.264373][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.272831][ T31] 1 lock held by syz-executor/7859: [ 344.278020][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.286536][ T31] 1 lock held by syz-executor/7861: [ 344.291766][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.300220][ T31] 1 lock held by syz-executor/7867: [ 344.305445][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.313966][ T31] 1 lock held by syz-executor/7870: [ 344.319147][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.327610][ T31] 1 lock held by syz-executor/7871: [ 344.332819][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.341304][ T31] 1 lock held by syz-executor/7873: [ 344.346566][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.355057][ T31] 1 lock held by syz-executor/7875: [ 344.360230][ T31] #0: ffffffff8f301e28 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 344.368729][ T31] [ 344.371044][ T31] ============================================= [ 344.371044][ T31] [ 344.379480][ T31] NMI backtrace for cpu 1 [ 344.379493][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 344.379511][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.379521][ T31] Call Trace: [ 344.379527][ T31] [ 344.379533][ T31] dump_stack_lvl+0x116/0x1f0 [ 344.379561][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 344.379581][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 344.379605][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 344.379626][ T31] watchdog+0xf70/0x12c0 [ 344.379650][ T31] ? __pfx_watchdog+0x10/0x10 [ 344.379667][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.379692][ T31] ? __kthread_parkme+0x19e/0x250 [ 344.379718][ T31] ? __pfx_watchdog+0x10/0x10 [ 344.379737][ T31] kthread+0x3c2/0x780 [ 344.379754][ T31] ? __pfx_kthread+0x10/0x10 [ 344.379771][ T31] ? rcu_is_watching+0x12/0xc0 [ 344.379793][ T31] ? __pfx_kthread+0x10/0x10 [ 344.379811][ T31] ret_from_fork+0x5d4/0x6f0 [ 344.379835][ T31] ? __pfx_kthread+0x10/0x10 [ 344.379851][ T31] ret_from_fork_asm+0x1a/0x30 [ 344.379880][ T31] [ 344.379886][ T31] Sending NMI from CPU 1 to CPUs 0: [ 344.497821][ C0] NMI backtrace for cpu 0 [ 344.497836][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 344.497854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.497862][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 344.497885][ C0] Code: ab 71 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 30 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 344.497899][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 344.497911][ C0] RAX: 0000000000650793 RBX: 0000000000000000 RCX: ffffffff8b80dc59 [ 344.497920][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a0c6 RDI: ffffffff8c157ca0 [ 344.497929][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 344.497938][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 344.497946][ C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000 [ 344.497954][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 344.497968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.497977][ C0] CR2: 000055eae453cb48 CR3: 000000000e382000 CR4: 00000000003526f0 [ 344.497986][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.497994][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.498002][ C0] Call Trace: [ 344.498007][ C0] [ 344.498011][ C0] default_idle+0x13/0x20 [ 344.498023][ C0] default_idle_call+0x6d/0xb0 [ 344.498035][ C0] do_idle+0x391/0x510 [ 344.498053][ C0] ? __pfx_do_idle+0x10/0x10 [ 344.498068][ C0] ? do_idle+0x2e5/0x510 [ 344.498085][ C0] cpu_startup_entry+0x4f/0x60 [ 344.498101][ C0] rest_init+0x16b/0x2b0 [ 344.498113][ C0] ? acpi_subsystem_init+0x133/0x180 [ 344.498129][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 344.498148][ C0] start_kernel+0x3ee/0x4d0 [ 344.498165][ C0] x86_64_start_reservations+0x18/0x30 [ 344.498181][ C0] x86_64_start_kernel+0x130/0x190 [ 344.498198][ C0] common_startup_64+0x13e/0x148 [ 344.498216][ C0] [ 344.499104][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 344.712737][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00306-gaaf724ed6926 #0 PREEMPT(full) [ 344.724524][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.734564][ T31] Call Trace: [ 344.737841][ T31] [ 344.740760][ T31] dump_stack_lvl+0x3d/0x1f0 [ 344.745348][ T31] panic+0x71c/0x800 [ 344.749256][ T31] ? __pfx_panic+0x10/0x10 [ 344.753678][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 344.759040][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 344.765009][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 344.770377][ T31] ? watchdog+0xdda/0x12c0 [ 344.774780][ T31] ? watchdog+0xdcd/0x12c0 [ 344.779185][ T31] watchdog+0xdeb/0x12c0 [ 344.783417][ T31] ? __pfx_watchdog+0x10/0x10 [ 344.788078][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.793270][ T31] ? __kthread_parkme+0x19e/0x250 [ 344.798289][ T31] ? __pfx_watchdog+0x10/0x10 [ 344.802972][ T31] kthread+0x3c2/0x780 [ 344.807026][ T31] ? __pfx_kthread+0x10/0x10 [ 344.811603][ T31] ? rcu_is_watching+0x12/0xc0 [ 344.816353][ T31] ? __pfx_kthread+0x10/0x10 [ 344.820926][ T31] ret_from_fork+0x5d4/0x6f0 [ 344.825506][ T31] ? __pfx_kthread+0x10/0x10 [ 344.830088][ T31] ret_from_fork_asm+0x1a/0x30 [ 344.834846][ T31] [ 344.838028][ T31] Kernel Offset: disabled [ 344.842332][ T31] Rebooting in 86400 seconds..