last executing test programs: 15.07968097s ago: executing program 4 (id=438): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_CPUID(0x1011) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x100000000000f7) keyctl$revoke(0x3, r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001140)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xae) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002d00010026bd7000fcdbdf250400000085ba85f6de1a19c7b2d3de0bb52cc64f7f14b06fc24bccfff297d36f313b2958d77da9"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 11.920463166s ago: executing program 1 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x80, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x45ea5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x80}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) 11.649107659s ago: executing program 3 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) connect$inet(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)={0x2, 0x2, 0xbb, 0x8, 0x1c, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2d, 0x34ff}, @sadb_ident={0x2, 0xb, 0x9, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x4d4, 0xf2, 0x3, 0x76, 0x1, 0x1}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb2, 0x5, {0x6, 0x32, 0x4, 0x0, 0x0, 0x1, 0x0, @in6=@remote, @in6=@private2}}, @sadb_address={0x5, 0x7, 0x33, 0x80, 0x0, @in6={0xa, 0x4e20, 0x7, @empty, 0x1000}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0xe0}}, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf8}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @exit, @exit]}, &(0x7f0000000640)='syzkaller\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x4, 0x1, 0x10, 0x9}, {0x0, 0x5, 0x3, 0x3}, {0x0, 0x4, 0xd, 0x6}, {0x3, 0x1, 0xf, 0x4}, {0x2, 0x1, 0x3, 0x1}, {0x1, 0x4, 0xc, 0x4}, {0x1, 0x3, 0xc, 0x4}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r6}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x40080, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11.614164004s ago: executing program 4 (id=449): rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x14}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.812291564s ago: executing program 3 (id=450): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x0, 0x0) socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000538000/0x4000)=nil, 0x4000, 0x0, 0x810, r4, 0x7d365000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) mknod$loop(0x0, 0xe050, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaa2808060001080006"], 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x9801) 9.810239776s ago: executing program 1 (id=451): socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x84) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r5, 0xff08, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r9, 0x0, 0x0, 0xfffffffb, 0xbf6b) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x0, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0xffffffff}], 0x4e}}) 9.760138547s ago: executing program 4 (id=452): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x80800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x80000, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c726664646f3d5cc388d9669afb95c884ccd192c1a914b24a2a6df514707d1555eaa15b9b0ade6af4e96ff53f9f2cffa20a35b5d55d1baada021eb25c2fcfb59f28d0a8a14d17d9c2615a823c7884ac5a240b16d800"/107, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltuid=', @ANYRESHEX, @ANYBLOB=',debug=0x0000000080000000,access=client,permit_directio,hash,mask=MAY_EXEC,\x00']) socket$inet(0x2, 0x2, 0x1) r3 = getpgrp(0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) r6 = gettid() r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x60002, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x1}}, 0x24, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r9, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) writev(r7, &(0x7f0000003540)=[{&(0x7f0000003200)="f8f645", 0x3}], 0x1) syz_clone3(&(0x7f0000000280)={0x8040000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x30}, &(0x7f0000000140)=""/53, 0x35, &(0x7f0000000180)=""/130, &(0x7f0000000240)=[r1, r3, r6], 0x3, {r7}}, 0x58) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8.770543473s ago: executing program 2 (id=454): syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x448a, 0x1, 0x8000, 0x400251}, &(0x7f0000000140), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={'hmac(sha256)\x00'}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[], 0x54}, 0x1, 0xba01}, 0x810) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd70000d00000000000000000000000000000014000200fe800000000000000000000000000038"], 0x30}}, 0x884) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf254300000008000300", @ANYRES32=r6, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x10004080}, 0x802) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x1cc, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xffffffffffffff31, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x20000080) 7.795172556s ago: executing program 0 (id=456): r0 = socket$netlink(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x40, 0x1) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x400, 0x48001012, 0xffffffffffffffff, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0xa0044d03, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffffffffffd91, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2b, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r4, 0x0, 0x1000}, 0x18) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f0000001940)=""/4086, 0xff6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300021400000000000000000000000600080008010000041f6255dd400d223296421054f011855acec306fd5e47b5a703e12c5826a2e7e30000000000000005000600000000000a00000000000000fe80000000000a00000000000000000000000000000000000200010000000000000009000000000005000500000000000a"], 0xa0}, 0x1, 0x7}, 0x0) keyctl$setperm(0x5, r5, 0x10502) gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005f700000001fedbdf250000004a", @ANYRES32=0x0, @ANYBLOB="08000001000000140012802e00010062617461647600000400028008001f0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 7.663948888s ago: executing program 2 (id=457): syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f0000000100)) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='lp\x00', 0x3) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 6.757827874s ago: executing program 0 (id=458): r0 = socket(0x2a, 0x2, 0x0) r1 = mq_open(0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r1) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x2, 0x8001, 0x80000001, 0x1}, {0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x94}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.176543257s ago: executing program 3 (id=459): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x1094, &(0x7f0000000340)={0x0, 0xf1bd, 0x400, 0x0, 0x400132a}, &(0x7f0000000300)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x68000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x75f, 0xa383) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r6) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000000000800008008000000040000000000010006000000ffffffff5ede0000000000000000000000000000000000000180000002000000330c000001000000060000000af1ffff00000000000000000040000001000000001000000000000009000000f8ffffffff018000000000000000000000000000000000000100008001000100030000000400000004000000070000003b0600000000000000000000000000000700000005000000040000000000008007"]) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000440), 0x0) io_uring_enter(r1, 0x47ba, 0x233a, 0x0, 0x0, 0x41) r7 = dup(r0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) r8 = memfd_create(&(0x7f0000000dc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) syz_io_uring_setup(0x3de6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1bb}, &(0x7f00000002c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) fallocate(r8, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x9, 0x3) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xffffffffffffffd3}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000140)={0xc}) 6.174330486s ago: executing program 1 (id=460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r3, &(0x7f0000001f40)=""/72, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) 6.071267677s ago: executing program 4 (id=461): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) socket$inet6(0xa, 0x1, 0x7) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x27, @short}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000540)={0x1, 0x5, 0x4fd0a7ef, 0xfffe, 0xfffffffffffffffe, 0x7297, 0x4, 0x200, 0x4, 0x2c, 0x7fffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) listen(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.065990455s ago: executing program 2 (id=462): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20900, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0x18, 0x2, 0x2, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8014) r5 = syz_open_dev$MSR(&(0x7f0000002480), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) rename(0x0, &(0x7f0000000140)='./file0\x00') r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x7ffff, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x100}, 0x20040004) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) 5.421557672s ago: executing program 0 (id=463): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r2, 0x7, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000200000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, 0x0}, 0x20) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) write$binfmt_elf32(r0, 0x0, 0x4cd) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff08000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 5.28020829s ago: executing program 0 (id=464): socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x52, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="cf14d527c6100081efd1613b76d965e9177450b583a2d99201db1c9e69"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0xec) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x11, 0x2, 0x0) syz_usb_connect(0x4, 0x210, 0x0, 0x0) 5.231719999s ago: executing program 1 (id=465): ptrace(0x10, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102376, 0x18fe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x70bd27, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) open(0x0, 0x400, 0x43) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020b30100000000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}}, 0x4040040) r7 = dup(r4) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8604"]) socket$rds(0x15, 0x5, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x20000000000005) 5.083419476s ago: executing program 3 (id=466): timer_create(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f000062c000/0x1000)=nil, 0x1000, 0x0) setrlimit(0xd, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x9) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x72}}}, 0xa) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) fsetxattr$trusted_overlay_upper(r4, 0x0, &(0x7f0000000040)={0x0, 0xfb, 0xb5, 0x0, 0x0, "6a95dd409fd1fdaec1b6b4c3e625b6f4", "86e98a472255689a1827a07d46803ab4122de91a2eeee78745e5af1da8b7f8665441ff21dc4640448cd85e8fa8e17bac4194f79590d0d51913dc62925949844145bcfe7aea3dbdce7121651812259ebfa3595da1f000a923d1ce38998c3ee06b78b4063cd9a9fd98f383188e30b4afb037eb436c7109e6fadcd144d065370730405741dee4b8cd21db9d2dcb15a4bb0d7f6f9bf49ff4d470261c40dad9cf233c"}, 0xb5, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000180)={0x8, [[0xb4, 0xf82, 0x243b, 0x400, 0x4, 0x10, 0x8, 0x8], [0x3cc0, 0x4, 0x9, 0x2, 0x6, 0x4, 0x6185, 0x9], [0xfe, 0x2, 0x9, 0xff, 0x1, 0x7, 0xc, 0x4]], '\x00', [{0xfffffff9, 0x401, 0x0, 0x1, 0x0, 0x1}, {0x400, 0x3, 0x0, 0x1, 0x1, 0x1}, {0xffff, 0x522c, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x40}, {0x9, 0x600000, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x3, 0xffffffff, 0x1, 0x1, 0x1}, {0x8, 0xb5d0, 0x1, 0x0, 0x0, 0x1}, {0x54, 0xfbb6, 0x0, 0x1}, {0x2, 0xffff7fff, 0x0, 0x0, 0x1}, {0x8, 0xd, 0x0, 0x1, 0x1}, {0xa, 0x1002, 0x1, 0x1}], '\x00', 0x7}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)=0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}, {0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) 3.786620559s ago: executing program 3 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000180)={0xc9, 0x0, 0xc}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@mcast2, 0x4e24, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0xcd}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x0, 0x438}, {}, {0x2}, 0x70bd2b, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) setsockopt$ax25_int(r8, 0x101, 0x3, &(0x7f0000000040)=0x1, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) 3.772348291s ago: executing program 2 (id=468): syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x448a, 0x1, 0x8000, 0x400251}, &(0x7f0000000140), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={'hmac(sha256)\x00'}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0xf) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd70000d00000000000000000000000000000014000200fe800000000000000000000000000038"], 0x30}}, 0x884) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf254300000008000300", @ANYRES32=r7, @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x10004080}, 0x802) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x1cc, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xffffffffffffff31, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x20000080) 2.744240342s ago: executing program 2 (id=469): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x5, 0x3, 0x5}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48) 2.632055946s ago: executing program 3 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x48) r2 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) r3 = syz_io_uring_setup(0x4ea1, &(0x7f0000000280)={0x0, 0x681c, 0x20, 0x3, 0xdc}, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = dup(r4) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000380)=0xef) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) io_uring_enter(r3, 0x4c40, 0xb30c, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)={0x40, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x819, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2c000880) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008800}, 0x7b957d9495d8277b) 2.471826831s ago: executing program 4 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) 1.994660825s ago: executing program 0 (id=472): socket$inet_sctp(0x2, 0x800000000000001, 0x84) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000180), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x242, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setitimer(0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) fanotify_init(0x200, 0x101000) 1.819081555s ago: executing program 1 (id=473): r0 = socket(0x2a, 0x2, 0x0) r1 = mq_open(0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r1) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x2, 0x8001, 0x80000001, 0x1}, {0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x94}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.691701499s ago: executing program 2 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 610.15421ms ago: executing program 4 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc, 0x3, 0xff, 0x5, 0xffffffffffffffff, 0x7}, &(0x7f00000000c0)={0x2, 0xe8, 0x101, 0xe4b5, 0x100, 0x8, 0x71, 0x4}, &(0x7f0000000100)={0x9, 0x10001, 0x4, 0x8, 0x6, 0x6a2c, 0xa, 0xffff}, &(0x7f0000000240)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x19, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x8000) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x53, 0xfffffffffffffffc, 0x6, 0x40, @scatter={0x3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f00000007c0)=""/98, 0x62}]}, &(0x7f0000000e40)="3a1dd60a0400", 0x0, 0x4, 0x10, 0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001040000", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32=r9], 0x48}}, 0x0) 447.846231ms ago: executing program 0 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = creat(0x0, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000300)=0xd0) r5 = semget$private(0x0, 0x207, 0x53) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000040)=""/119) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa08, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 0s ago: executing program 1 (id=477): r0 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r0, 0x409, 0x7) writev(r0, &(0x7f0000003800), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) rt_sigaction(0xd, &(0x7f0000000040)={0x0, 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) bind$can_j1939(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='$\x00\x00\x00!\x00%', 0x7) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x490, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) kernel console output (not intermixed with test programs): 85.254070][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 86.115292][ T5865] vhci_hcd: vhci_device speed not set [ 86.119811][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.123250][ T5124] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.132971][ T5124] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.242766][ T971] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.266784][ T6000] Bluetooth: MGMT ver 1.23 [ 86.428014][ T971] usb 5-1: Using ep0 maxpacket: 32 [ 86.449887][ T971] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 86.562038][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.570075][ T971] usb 5-1: Product: syz [ 86.576766][ T971] usb 5-1: Manufacturer: syz [ 86.584191][ T971] usb 5-1: SerialNumber: syz [ 86.599482][ T971] usb 5-1: config 0 descriptor?? [ 86.614818][ T971] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 86.720611][ T6013] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 87.092509][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.151406][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 87.151421][ T30] audit: type=1400 audit(1747422466.195:204): avc: denied { bind } for pid=6004 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.154737][ T6014] program syz.2.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.209963][ T5998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.219820][ T30] audit: type=1400 audit(1747422466.195:205): avc: denied { read } for pid=6004 comm="syz.2.23" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.265912][ T5998] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 87.300942][ T5998] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.349544][ T30] audit: type=1400 audit(1747422466.195:206): avc: denied { open } for pid=6004 comm="syz.2.23" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.459473][ T30] audit: type=1400 audit(1747422466.475:207): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.504201][ T5998] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 87.726914][ T5998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.810959][ T30] audit: type=1400 audit(1747422466.475:208): avc: denied { add_name } for pid=5999 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.872484][ T5998] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 88.122709][ T971] gspca_stk1135: reg_w 0x3 err -110 [ 88.212128][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 88.217118][ T5998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 88.264044][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 88.375402][ T30] audit: type=1400 audit(1747422466.475:209): avc: denied { create } for pid=5999 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.427731][ T971] gspca_stk1135: Sensor write failed [ 88.445967][ T5998] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 88.549231][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 88.689701][ T971] gspca_stk1135: Sensor write failed [ 88.799986][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 88.825484][ T30] audit: type=1400 audit(1747422466.475:210): avc: denied { write } for pid=5999 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.825530][ T30] audit: type=1400 audit(1747422466.475:211): avc: denied { append } for pid=5999 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2022 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.825571][ T30] audit: type=1400 audit(1747422467.635:212): avc: denied { create } for pid=6024 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.825605][ T30] audit: type=1400 audit(1747422467.685:213): avc: denied { setopt } for pid=6024 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.975619][ T971] gspca_stk1135: Sensor read failed [ 90.313358][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 90.319768][ T971] gspca_stk1135: Sensor read failed [ 90.329830][ T971] gspca_stk1135: Detected sensor type unknown (0x0) [ 90.336720][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 90.347559][ T971] gspca_stk1135: Sensor read failed [ 90.353494][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 90.359921][ T971] gspca_stk1135: Sensor read failed [ 90.368130][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 90.420265][ T6051] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 90.429129][ T6051] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 90.554587][ T971] gspca_stk1135: Sensor write failed [ 90.559940][ T971] gspca_stk1135: serial bus timeout: status=0x00 [ 91.202622][ T971] gspca_stk1135: Sensor write failed [ 91.208001][ T971] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 91.256792][ T971] usb 5-1: USB disconnect, device number 2 [ 91.469617][ T5834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.058383][ T5834] usb 4-1: device descriptor read/64, error -71 [ 92.236933][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 92.236965][ T30] audit: type=1400 audit(1747422471.165:220): avc: denied { create } for pid=6067 comm="syz.2.32" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.934426][ T30] audit: type=1400 audit(1747422471.175:221): avc: denied { write } for pid=6067 comm="syz.2.32" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.956833][ T30] audit: type=1400 audit(1747422471.185:222): avc: denied { open } for pid=6067 comm="syz.2.32" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 92.986378][ T30] audit: type=1400 audit(1747422471.185:223): avc: denied { ioctl } for pid=6067 comm="syz.2.32" path="/8/file0" dev="tmpfs" ino=59 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.065352][ T30] audit: type=1400 audit(1747422471.945:224): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 93.122286][ T5834] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.272121][ T5834] usb 4-1: device descriptor read/64, error -71 [ 93.368176][ T6082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.384711][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 93.462171][ T6085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.842624][ T5834] usb usb4-port1: attempt power cycle [ 93.995950][ T30] audit: type=1400 audit(1747422473.045:225): avc: denied { read } for pid=6075 comm="syz.1.33" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.142760][ T30] audit: type=1400 audit(1747422473.065:226): avc: denied { open } for pid=6075 comm="syz.1.33" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 94.167684][ T30] audit: type=1400 audit(1747422473.165:227): avc: denied { create } for pid=6086 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.689799][ T30] audit: type=1400 audit(1747422473.265:228): avc: denied { ioctl } for pid=6086 comm="syz.4.36" path="socket:[8156]" dev="sockfs" ino=8156 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.716027][ T30] audit: type=1400 audit(1747422473.405:229): avc: denied { mount } for pid=6088 comm="syz.3.37" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.165628][ T6103] Zero length message leads to an empty skb [ 95.688990][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 95.873172][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 96.603909][ T6115] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 97.606609][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 97.606624][ T30] audit: type=1400 audit(1747422476.655:237): avc: denied { create } for pid=6129 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.482522][ T30] audit: type=1400 audit(1747422476.695:238): avc: denied { ioctl } for pid=6129 comm="syz.4.42" path="socket:[9234]" dev="sockfs" ino=9234 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.584872][ T30] audit: type=1400 audit(1747422477.575:239): avc: denied { append } for pid=6132 comm="syz.3.45" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.876680][ T6140] ubi31: attaching mtd0 [ 98.895762][ T6140] ubi31: scanning is finished [ 98.900558][ T6140] ubi31: empty MTD device detected [ 99.238982][ T30] audit: type=1400 audit(1747422478.275:240): avc: denied { read } for pid=6137 comm="syz.2.44" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.300143][ T6145] process 'syz.2.44' launched './file0' with NULL argv: empty string added [ 99.755431][ T30] audit: type=1400 audit(1747422478.275:241): avc: denied { open } for pid=6137 comm="syz.2.44" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.778846][ T30] audit: type=1400 audit(1747422478.285:242): avc: denied { write } for pid=6137 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.801891][ T30] audit: type=1400 audit(1747422478.345:243): avc: denied { execute } for pid=6137 comm="syz.2.44" name="file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.825199][ T30] audit: type=1400 audit(1747422478.355:244): avc: denied { execute_no_trans } for pid=6137 comm="syz.2.44" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.900038][ T30] audit: type=1400 audit(1747422478.935:245): avc: denied { setopt } for pid=6148 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 99.919219][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.385100][ T6135] ALSA: mixer_oss: invalid OSS volume '' [ 100.387346][ T30] audit: type=1400 audit(1747422478.975:246): avc: denied { accept } for pid=6148 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.604981][ T6140] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 102.925654][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 102.925672][ T30] audit: type=1400 audit(1747422481.745:248): avc: denied { sqpoll } for pid=6165 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.232619][ T6181] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 103.707390][ T30] audit: type=1400 audit(1747422482.685:249): avc: denied { map } for pid=6168 comm="syz.0.48" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.866829][ T6183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 103.873484][ T6183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 103.881230][ T30] audit: type=1400 audit(1747422482.705:250): avc: denied { execute } for pid=6168 comm="syz.0.48" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.915349][ T6183] vhci_hcd vhci_hcd.0: Device attached [ 103.920158][ T6190] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 103.927425][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.936205][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 104.574092][ T6197] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 104.580745][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.588310][ T5865] vhci_hcd: vhci_device speed not set [ 104.623792][ T6197] vhci_hcd vhci_hcd.0: Device attached [ 104.700186][ T5865] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 104.904081][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.912288][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.996182][ T6205] bridge0: entered allmulticast mode [ 105.004160][ T6183] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 105.008048][ T30] audit: type=1400 audit(1747422484.055:251): avc: denied { mount } for pid=6206 comm="syz.1.56" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 105.010772][ T6183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 105.024118][ T6205] bridge_slave_1: left allmulticast mode [ 105.493565][ T30] audit: type=1400 audit(1747422484.095:252): avc: denied { mounton } for pid=6206 comm="syz.1.56" path="/10/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 105.528857][ T6183] vhci_hcd vhci_hcd.0: Device attached [ 105.534859][ T6205] bridge_slave_1: left promiscuous mode [ 105.544107][ T30] audit: type=1400 audit(1747422484.095:253): avc: denied { mount } for pid=6206 comm="syz.1.56" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.561683][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.567726][ T30] audit: type=1400 audit(1747422484.145:254): avc: denied { write } for pid=6200 comm="syz.4.55" name="tcp6" dev="proc" ino=4026533384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 105.652878][ T6205] bridge_slave_0: left allmulticast mode [ 105.658672][ T6205] bridge_slave_0: left promiscuous mode [ 105.665687][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.733028][ T6190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 105.739678][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.794165][ T6183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 105.832357][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 106.112645][ T6183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.184071][ T6190] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 106.440239][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 106.449611][ T6183] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 106.456230][ T6183] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.508147][ T6231] B: renamed from veth0 (while UP) [ 106.579820][ T6186] vhci_hcd: connection reset by peer [ 106.585795][ T6191] vhci_hcd: connection closed [ 106.586681][ T13] vhci_hcd: stop threads [ 106.597807][ T6198] vhci_hcd: connection closed [ 106.598325][ T13] vhci_hcd: release socket [ 106.614625][ T13] vhci_hcd: disconnect device [ 106.614939][ T30] audit: type=1400 audit(1747422485.555:255): avc: denied { create } for pid=6218 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.638511][ T6215] vhci_hcd: connection closed [ 106.640981][ T6209] vhci_hcd: connection closed [ 106.660516][ T6183] vhci_hcd vhci_hcd.0: Device attached [ 106.661072][ T6225] vhci_hcd: connection closed [ 106.672041][ T30] audit: type=1400 audit(1747422485.555:256): avc: denied { ioctl } for pid=6218 comm="syz.4.57" path="socket:[9452]" dev="sockfs" ino=9452 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.761638][ T13] vhci_hcd: stop threads [ 106.780260][ T13] vhci_hcd: release socket [ 106.785807][ T13] vhci_hcd: disconnect device [ 106.792840][ T13] vhci_hcd: stop threads [ 106.797666][ T13] vhci_hcd: release socket [ 106.802974][ T13] vhci_hcd: disconnect device [ 107.082362][ T13] vhci_hcd: stop threads [ 107.086680][ T13] vhci_hcd: release socket [ 107.091753][ T13] vhci_hcd: disconnect device [ 107.102278][ T13] vhci_hcd: stop threads [ 107.106549][ T13] vhci_hcd: release socket [ 107.111026][ T13] vhci_hcd: disconnect device [ 107.115769][ T30] audit: type=1400 audit(1747422485.975:257): avc: denied { audit_write } for pid=6233 comm="syz.2.59" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.138381][ T13] vhci_hcd: stop threads [ 107.142680][ T13] vhci_hcd: release socket [ 107.147115][ T13] vhci_hcd: disconnect device [ 107.731198][ T6239] netlink: 'syz.2.60': attribute type 16 has an invalid length. [ 107.739184][ T6239] netlink: 'syz.2.60': attribute type 17 has an invalid length. [ 107.806572][ T6240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.595314][ T30] audit: type=1400 audit(1747422486.855:258): avc: denied { unlink } for pid=6237 comm="syz.2.60" name="#1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 109.682526][ T6249] lo speed is unknown, defaulting to 1000 [ 109.697883][ T30] audit: type=1400 audit(1747422488.055:259): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.717971][ T30] audit: type=1326 audit(1747422488.325:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.4.63" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feaefb8e969 code=0x0 [ 109.723297][ T6249] lo speed is unknown, defaulting to 1000 [ 109.774616][ T30] audit: type=1400 audit(1747422488.825:261): avc: denied { create } for pid=6248 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 109.784192][ T6252] smc: removing ib device syz [ 109.808091][ T6249] lo speed is unknown, defaulting to 1000 [ 109.818211][ T6249] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.867596][ T6249] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 109.998869][ T5865] vhci_hcd: vhci_device speed not set [ 110.034135][ T30] audit: type=1400 audit(1747422489.065:262): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.114966][ T6249] lo speed is unknown, defaulting to 1000 [ 110.160045][ T30] audit: type=1400 audit(1747422489.205:263): avc: denied { ioctl } for pid=6253 comm="syz.0.64" path="socket:[9583]" dev="sockfs" ino=9583 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.161509][ T6249] lo speed is unknown, defaulting to 1000 [ 110.233388][ T6249] lo speed is unknown, defaulting to 1000 [ 110.250794][ T6249] lo speed is unknown, defaulting to 1000 [ 110.275111][ T6249] lo speed is unknown, defaulting to 1000 [ 110.824073][ T30] audit: type=1400 audit(1747422489.385:264): avc: denied { read } for pid=6260 comm="syz.4.67" name="cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.686165][ T30] audit: type=1400 audit(1747422489.385:265): avc: denied { open } for pid=6260 comm="syz.4.67" path="/dev/cec4" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.708912][ T30] audit: type=1400 audit(1747422489.395:266): avc: denied { ioctl } for pid=6260 comm="syz.4.67" path="/dev/cec4" dev="devtmpfs" ino=974 ioctlcmd=0x6105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.724264][ T6269] syz.1.66 (6269) used greatest stack depth: 19368 bytes left [ 112.083686][ T30] audit: type=1400 audit(1747422490.395:267): avc: denied { firmware_load } for pid=6262 comm="syz.1.66" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 112.464221][ T9] usb usb40-port1: attempt power cycle [ 113.093798][ T6277] syz.4.68 (6277): drop_caches: 2 [ 113.485280][ T9] usb usb40-port1: unable to enumerate USB device [ 113.696669][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 113.696702][ T30] audit: type=1400 audit(1747422492.635:271): avc: denied { block_suspend } for pid=6278 comm="syz.4.70" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.946688][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 113.954270][ T6273] UDF-fs: Scanning with blocksize 512 failed [ 113.960728][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 113.968202][ T6273] UDF-fs: Scanning with blocksize 1024 failed [ 113.974466][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 113.981915][ T6273] UDF-fs: Scanning with blocksize 2048 failed [ 113.988197][ T6273] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 113.995710][ T6273] UDF-fs: Scanning with blocksize 4096 failed [ 114.023145][ T30] audit: type=1400 audit(1747422492.995:272): avc: denied { mounton } for pid=6272 comm="syz.1.69" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.194341][ T6282] Can't find ip_set type hash:net,por [ 114.720564][ T30] audit: type=1400 audit(1747422493.645:273): avc: denied { ioctl } for pid=6285 comm="syz.3.72" path="socket:[9626]" dev="sockfs" ino=9626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.063662][ T6298] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 115.074976][ T6298] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 115.469549][ T6298] evm: overlay not supported [ 115.954332][ T30] audit: type=1400 audit(1747422494.085:274): avc: denied { mount } for pid=6292 comm="syz.4.75" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.995536][ T30] audit: type=1400 audit(1747422494.535:275): avc: denied { create } for pid=6292 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.071380][ T30] audit: type=1400 audit(1747422494.545:276): avc: denied { listen } for pid=6292 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 116.341348][ T30] audit: type=1400 audit(1747422495.385:277): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.532133][ T30] audit: type=1400 audit(1747422495.465:278): avc: denied { connect } for pid=6303 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.565915][ T30] audit: type=1400 audit(1747422495.465:279): avc: denied { bind } for pid=6303 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.663508][ T6307] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[6307] [ 116.682699][ T6307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.039480][ T30] audit: type=1400 audit(1747422495.705:280): avc: denied { write } for pid=6303 comm="syz.3.79" name="qrtr-tun" dev="devtmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.514826][ T6323] capability: warning: `syz.4.81' uses 32-bit capabilities (legacy support in use) [ 119.024392][ T6328] infiniband syz!: set active [ 119.029123][ T6328] infiniband syz!: added team_slave_0 [ 119.036856][ T6328] syz!: rxe_create_qp: returned err = -2 [ 119.042616][ T6328] infiniband syz!: Couldn't create ib_mad QP1 [ 119.049446][ T6328] infiniband syz!: Couldn't open port 1 [ 119.105630][ T6328] RDS/IB: syz!: added [ 119.109663][ T6328] smc: adding ib device syz! with port count 1 [ 119.115885][ T6328] smc: ib device syz! port 1 has pnetid [ 120.361801][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 120.361823][ T30] audit: type=1400 audit(1747422499.385:285): avc: denied { read append } for pid=6335 comm="syz.4.84" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 120.672296][ T30] audit: type=1400 audit(1747422499.395:286): avc: denied { open } for pid=6335 comm="syz.4.84" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.212732][ T30] audit: type=1400 audit(1747422499.555:287): avc: denied { ioctl } for pid=6335 comm="syz.4.84" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.240037][ T30] audit: type=1400 audit(1747422499.585:288): avc: denied { ioctl } for pid=6335 comm="syz.4.84" path="socket:[9694]" dev="sockfs" ino=9694 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.340205][ T6338] tipc: Started in network mode [ 121.612060][ T6338] tipc: Node identity 9adf88a45364, cluster identity 4711 [ 121.962709][ T6338] tipc: Enabled bearer , priority 0 [ 122.378598][ T6358] netlink: 'syz.2.90': attribute type 16 has an invalid length. [ 122.386446][ T6358] netlink: 'syz.2.90': attribute type 17 has an invalid length. [ 122.452625][ T6359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.087620][ T5819] tipc: Node number set to 3384510628 [ 123.289285][ T30] audit: type=1400 audit(1747422502.225:289): avc: denied { ioctl } for pid=6360 comm="syz.0.91" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9743 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.319864][ T6346] tipc: Disabling bearer [ 124.421420][ T47] lo speed is unknown, defaulting to 1000 [ 125.995399][ T30] audit: type=1326 audit(1747422505.045:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 126.018923][ T30] audit: type=1326 audit(1747422505.045:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 126.175305][ T30] audit: type=1400 audit(1747422505.095:292): avc: denied { write } for pid=6382 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.198399][ T30] audit: type=1326 audit(1747422505.095:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 126.237653][ T30] audit: type=1326 audit(1747422505.095:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 126.299053][ T6387] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 126.485726][ T30] audit: type=1326 audit(1747422505.095:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 126.724623][ T30] audit: type=1326 audit(1747422505.105:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feaefb907fc code=0x7ffc0000 [ 126.748623][ T30] audit: type=1326 audit(1747422505.105:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feaefb90734 code=0x7ffc0000 [ 126.771798][ T30] audit: type=1326 audit(1747422505.105:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7feaefb90734 code=0x7ffc0000 [ 126.818157][ T30] audit: type=1326 audit(1747422505.105:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaefb8e969 code=0x7ffc0000 [ 127.777195][ T6401] bridge0: entered promiscuous mode [ 127.914268][ T6401] binder: 6394:6401 ioctl c0306201 200000000080 returned -22 [ 127.950562][ T6401] binder: 6394:6401 ioctl 4018620d 0 returned -22 [ 130.627041][ T6427] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 130.635227][ T6427] UDF-fs: Scanning with blocksize 512 failed [ 130.644288][ T6427] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 130.662121][ T6427] UDF-fs: Scanning with blocksize 1024 failed [ 130.669685][ T6427] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 130.716292][ T6427] UDF-fs: Scanning with blocksize 2048 failed [ 130.723766][ T6427] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 131.049818][ T6432] netlink: set zone limit has 4 unknown bytes [ 131.387622][ T6427] UDF-fs: Scanning with blocksize 4096 failed [ 131.524395][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 131.524530][ T30] audit: type=1400 audit(1747422510.205:339): avc: denied { read append } for pid=6424 comm="syz.1.109" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 131.880523][ T30] audit: type=1400 audit(1747422510.205:340): avc: denied { open } for pid=6424 comm="syz.1.109" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 132.052562][ T30] audit: type=1400 audit(1747422510.505:341): avc: denied { write } for pid=6419 comm="syz.4.106" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.185004][ T30] audit: type=1400 audit(1747422510.875:342): avc: denied { create } for pid=6420 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.667797][ T30] audit: type=1400 audit(1747422511.505:343): avc: denied { wake_alarm } for pid=6439 comm="syz.2.110" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 132.688973][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.700565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.674563][ T30] audit: type=1400 audit(1747422512.485:344): avc: denied { create } for pid=6450 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.442220][ T6464] hub 2-0:1.0: USB hub found [ 134.448541][ T6464] hub 2-0:1.0: 1 port detected [ 136.009870][ T30] audit: type=1400 audit(1747422515.055:345): avc: denied { ioctl } for pid=6468 comm="syz.0.119" path="socket:[8744]" dev="sockfs" ino=8744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.834594][ T30] audit: type=1400 audit(1747422515.315:346): avc: denied { read } for pid=6465 comm="syz.3.118" path="socket:[9989]" dev="sockfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.340134][ T30] audit: type=1400 audit(1747422516.375:347): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 137.432550][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.119'. [ 138.161176][ T30] audit: type=1400 audit(1747422517.195:348): avc: denied { create } for pid=6479 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.282125][ T30] audit: type=1400 audit(1747422517.205:349): avc: denied { listen } for pid=6479 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.340602][ T6491] kAFS: No cell specified [ 139.482352][ T30] audit: type=1400 audit(1747422517.205:350): avc: denied { accept } for pid=6479 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.508040][ T30] audit: type=1400 audit(1747422517.905:351): avc: denied { bind } for pid=6468 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.031771][ T30] audit: type=1400 audit(1747422517.965:352): avc: denied { write } for pid=6468 comm="syz.0.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.140673][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.259906][ T6501] input: syz1 as /devices/virtual/input/input5 [ 140.490512][ T30] audit: type=1400 audit(1747422518.385:353): avc: denied { mounton } for pid=6490 comm="syz.3.123" path="/25/file0" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 140.513384][ T30] audit: type=1400 audit(1747422519.255:354): avc: denied { read } for pid=6496 comm="syz.1.125" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.542218][ T30] audit: type=1400 audit(1747422519.265:355): avc: denied { ioctl } for pid=6496 comm="syz.1.125" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.697002][ T6516] erofs (device nullb0): cannot find valid erofs superblock [ 141.744792][ T6516] usb usb8: usbfs: process 6516 (syz.3.129) did not claim interface 0 before use [ 141.851801][ T6517] ======================================================= [ 141.851801][ T6517] WARNING: The mand mount option has been deprecated and [ 141.851801][ T6517] and is ignored by this kernel. Remove the mand [ 141.851801][ T6517] option from the mount to silence this warning. [ 141.851801][ T6517] ======================================================= [ 141.983297][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 141.983318][ T30] audit: type=1400 audit(1747422521.005:360): avc: denied { ioctl } for pid=6512 comm="syz.1.130" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 142.868206][ T30] audit: type=1400 audit(1747422521.015:361): avc: denied { ioctl } for pid=6512 comm="syz.1.130" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 143.078009][ T6517] orangefs_mount: mount request failed with -4 [ 143.271345][ T6528] syz.3.133 uses obsolete (PF_INET,SOCK_PACKET) [ 144.150770][ T30] audit: type=1400 audit(1747422522.945:362): avc: denied { map } for pid=6527 comm="syz.3.133" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.368045][ T30] audit: type=1326 audit(1747422523.225:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.426303][ T30] audit: type=1326 audit(1747422523.225:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.500974][ T6537] mmap: syz.1.135 (6537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.522036][ T30] audit: type=1326 audit(1747422523.225:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.694861][ T30] audit: type=1326 audit(1747422523.225:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.719487][ T30] audit: type=1326 audit(1747422523.225:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.742793][ T30] audit: type=1326 audit(1747422523.225:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 144.782376][ T30] audit: type=1326 audit(1747422523.225:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6527 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaaf8e969 code=0x7fc00000 [ 145.753254][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 147.043784][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 147.043799][ T30] audit: type=1400 audit(1747422526.095:430): avc: denied { setopt } for pid=6568 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.729813][ T30] audit: type=1400 audit(1747422526.595:431): avc: denied { execute } for pid=6573 comm="syz.4.145" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.161894][ T30] audit: type=1400 audit(1747422526.605:432): avc: denied { create } for pid=6573 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 148.190856][ T30] audit: type=1400 audit(1747422526.655:433): avc: denied { sys_admin } for pid=6573 comm="syz.4.145" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 148.211698][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.862711][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 148.882750][ T6595] netlink: 'syz.3.149': attribute type 11 has an invalid length. [ 148.890691][ T6595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.149'. [ 149.213425][ T30] audit: type=1400 audit(1747422527.905:434): avc: denied { create } for pid=6586 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.656026][ T30] audit: type=1400 audit(1747422527.905:435): avc: denied { write } for pid=6586 comm="syz.3.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.687932][ T30] audit: type=1400 audit(1747422528.355:436): avc: denied { relabelfrom } for pid=6568 comm="syz.2.143" name="" dev="pipefs" ino=8969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 149.866284][ T6602] netlink: 'syz.1.151': attribute type 11 has an invalid length. [ 149.874127][ T6602] netlink: 224 bytes leftover after parsing attributes in process `syz.1.151'. [ 150.158146][ T30] audit: type=1400 audit(1747422529.155:437): avc: denied { mount } for pid=6598 comm="syz.1.151" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 150.179882][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.056624][ T6609] bridge_slave_0: left allmulticast mode [ 151.063536][ T30] audit: type=1400 audit(1747422530.095:438): avc: denied { read } for pid=6588 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.155932][ T6609] bridge_slave_0: left promiscuous mode [ 151.514258][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.932820][ T6630] erofs (device nullb0): cannot find valid erofs superblock [ 151.971309][ T6630] usb usb8: usbfs: process 6630 (syz.1.157) did not claim interface 0 before use [ 152.359647][ T6609] bridge_slave_1: left allmulticast mode [ 152.375204][ T6609] bridge_slave_1: left promiscuous mode [ 152.388046][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.122133][ T30] audit: type=1400 audit(1747422531.805:439): avc: denied { nlmsg_write } for pid=6631 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 153.145324][ T6609] bond0: (slave bond_slave_0): Releasing backup interface [ 153.166064][ T6609] bond0: (slave bond_slave_1): Releasing backup interface [ 153.186534][ T6609] team0: Port device team_slave_0 removed [ 153.197591][ T6609] team0: Port device team_slave_1 removed [ 153.204317][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.211734][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.225263][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.234365][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.297698][ T6653] syzkaller0: entered promiscuous mode [ 155.303266][ T6653] syzkaller0: entered allmulticast mode [ 156.679540][ T30] audit: type=1400 audit(1747422535.725:440): avc: denied { write } for pid=6667 comm="syz.2.166" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 157.779070][ T30] audit: type=1400 audit(1747422535.845:441): avc: denied { listen } for pid=6667 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.825407][ T30] audit: type=1400 audit(1747422535.845:442): avc: denied { accept } for pid=6667 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.422843][ T30] audit: type=1400 audit(1747422539.475:443): avc: denied { ioctl } for pid=6687 comm="syz.4.170" path="socket:[9203]" dev="sockfs" ino=9203 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 160.480117][ T6681] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 160.489687][ T6681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 160.500671][ T6681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.520929][ T30] audit: type=1400 audit(1747422539.555:444): avc: denied { firmware_load } for pid=6680 comm="syz.2.168" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 160.545510][ T6689] openvswitch: netlink: Multiple metadata blocks provided [ 161.382130][ T30] audit: type=1400 audit(1747422539.725:445): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 162.295373][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 163.183400][ T30] audit: type=1400 audit(1747422541.675:446): avc: denied { mounton } for pid=6707 comm="syz.3.175" path="/38/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.102085][ T30] audit: type=1400 audit(1747422543.055:447): avc: denied { setopt } for pid=6722 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.650976][ T6734] input: syz1 as /devices/virtual/input/input6 [ 164.881758][ T30] audit: type=1400 audit(1747422543.905:448): avc: denied { read } for pid=5168 comm="acpid" name="js0" dev="devtmpfs" ino=2816 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.045899][ T30] audit: type=1400 audit(1747422543.905:449): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2816 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.070364][ T30] audit: type=1400 audit(1747422543.915:450): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2816 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.344485][ T30] audit: type=1400 audit(1747422544.375:451): avc: denied { read write } for pid=6740 comm="syz.0.183" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.863505][ T30] audit: type=1400 audit(1747422544.375:452): avc: denied { open } for pid=6740 comm="syz.0.183" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.231480][ T30] audit: type=1400 audit(1747422545.275:453): avc: denied { read write } for pid=6752 comm="syz.4.187" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 166.255567][ T30] audit: type=1400 audit(1747422545.275:454): avc: denied { open } for pid=6752 comm="syz.4.187" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 166.385616][ T6756] ntfs3(nullb0): Primary boot signature is not NTFS. [ 166.394359][ T6756] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 167.023073][ T30] audit: type=1400 audit(1747422545.275:455): avc: denied { ioctl } for pid=6752 comm="syz.4.187" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.533799][ T30] audit: type=1400 audit(1747422546.555:456): avc: denied { sys_module } for pid=6744 comm="syz.3.184" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 168.654697][ T30] audit: type=1400 audit(1747422547.705:457): avc: denied { bind } for pid=6772 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.865751][ T6773] kvm: pic: non byte write [ 169.427985][ T30] audit: type=1400 audit(1747422548.475:458): avc: denied { write } for pid=6772 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.315318][ T6805] 9pnet: Unknown protocol version 9p20\++} [ 171.427164][ T6806] ubi31: attaching mtd0 [ 171.445487][ T6806] ubi31: scanning is finished [ 171.883510][ T6806] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 171.891107][ T6806] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 171.898417][ T6806] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 171.905484][ T6806] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 171.912927][ T6806] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 171.919754][ T6806] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 171.927832][ T6806] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 560061661 [ 171.937810][ T6806] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 171.965617][ T6808] ubi31: background thread "ubi_bgt31d" started, PID 6808 [ 172.662269][ T5865] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.024894][ T5865] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 173.985711][ T5865] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.002494][ T5865] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.011544][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.189517][ T6812] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.201507][ T5865] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.516658][ T5865] usb 4-1: USB disconnect, device number 5 [ 175.050303][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 175.151517][ T971] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.209856][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 175.454115][ T971] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 175.661242][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.757100][ T971] usb 5-1: Product: syz [ 175.761586][ T971] usb 5-1: Manufacturer: syz [ 175.782363][ T971] usb 5-1: SerialNumber: syz [ 175.803356][ T971] usb 5-1: config 0 descriptor?? [ 175.991366][ T6841] fido_id[6841]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.011921][ T6853] syz!: rxe_newlink: already configured on team_slave_0 [ 177.036779][ T30] audit: type=1400 audit(1747422556.065:459): avc: denied { getopt } for pid=6845 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.338114][ T6851] netlink: 'syz.3.202': attribute type 16 has an invalid length. [ 177.346004][ T6851] netlink: 'syz.3.202': attribute type 17 has an invalid length. [ 177.406531][ T6856] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 177.822786][ T30] audit: type=1800 audit(1747422556.305:460): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.198" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 178.536827][ T6864] binder: 6858:6864 ioctl c0306201 200000000080 returned -22 [ 178.560636][ T6864] binder: BINDER_SET_CONTEXT_MGR already set [ 178.566933][ T6864] binder: 6858:6864 ioctl 4018620d 200000000040 returned -16 [ 179.610556][ T6870] ubi: mtd0 is already attached to ubi31 [ 179.989295][ T971] usb-storage 5-1:0.0: USB Mass Storage device detected [ 180.303362][ T971] usb 5-1: USB disconnect, device number 3 [ 182.119042][ T6892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 183.213971][ T6893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.785310][ T6910] binder: 6902:6910 ioctl c0306201 200000000080 returned -22 [ 183.815270][ T6910] binder: 6902:6910 ioctl 4018620d 0 returned -22 [ 184.323279][ T6913] PM: Enabling pm_trace changes system date and time during resume. [ 184.323279][ T6913] PM: Correct system time has to be restored manually after resume. [ 184.373531][ T6904] Failed to initialize the IGMP autojoin socket (err -2) [ 184.377738][ T6908] bridge1: entered promiscuous mode [ 185.085317][ T30] audit: type=1400 audit(1747422564.135:461): avc: denied { bind } for pid=6912 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 185.110970][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.122603][ T6913] bond0: (slave rose0): Enslaving as an active interface with an up link [ 185.131320][ T30] audit: type=1400 audit(1747422564.155:462): avc: denied { ioctl } for pid=6912 comm="syz.4.219" path="socket:[10816]" dev="sockfs" ino=10816 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 185.448474][ T30] audit: type=1400 audit(1747422564.495:463): avc: denied { shutdown } for pid=6918 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.733570][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 185.844331][ T6931] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 185.924055][ T6923] ceph: No mds server is up or the cluster is laggy [ 186.526467][ T6931] bond1: entered promiscuous mode [ 186.542273][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.551248][ T6931] bond1: entered allmulticast mode [ 186.967151][ T5865] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 187.086556][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.095646][ T5865] usb 1-1: Product: syz [ 187.099830][ T5865] usb 1-1: Manufacturer: syz [ 187.104779][ T5865] usb 1-1: SerialNumber: syz [ 187.122279][ T5865] usb 1-1: config 0 descriptor?? [ 187.204466][ T6951] qrtr: Invalid version 0 [ 187.212807][ T6951] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[6951] [ 187.635336][ T5865] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 187.648482][ T5865] usb 1-1: USB disconnect, device number 2 [ 188.028550][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 188.867554][ T30] audit: type=1400 audit(1747422567.115:464): avc: denied { mount } for pid=6955 comm="syz.3.230" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 188.949896][ T30] audit: type=1400 audit(1747422567.125:465): avc: denied { remount } for pid=6955 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 188.972022][ T30] audit: type=1400 audit(1747422567.975:466): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.582149][ T5865] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 189.865866][ T30] audit: type=1400 audit(1747422568.905:467): avc: denied { create } for pid=6976 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 190.002198][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 190.171611][ T6982] warning: `syz.4.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.239239][ T30] audit: type=1400 audit(1747422569.215:468): avc: denied { ioctl } for pid=6976 comm="syz.4.236" path="socket:[10891]" dev="sockfs" ino=10891 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 190.678569][ T5865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.694612][ T5865] usb 3-1: New USB device found, idVendor=04cb, idProduct=013f, bcdDevice=45.a3 [ 190.708448][ T6984] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 190.715070][ T6984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.732190][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.832328][ T6984] vhci_hcd vhci_hcd.0: Device attached [ 190.835772][ T5865] usb 3-1: Product: syz [ 190.892051][ T5865] usb 3-1: Manufacturer: syz [ 190.898349][ T5865] usb 3-1: SerialNumber: syz [ 190.910144][ T5865] usb 3-1: config 0 descriptor?? [ 190.932611][ T5865] gspca_main: finepix-2.14.0 probing 04cb:013f [ 190.972156][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.089911][ T6985] vhci_hcd: connection closed [ 191.090283][ T2959] vhci_hcd: stop threads [ 191.110185][ T2959] vhci_hcd: release socket [ 191.118627][ T2959] vhci_hcd: disconnect device [ 191.132156][ T5819] usb 34-1: SetAddress Request (2) to port 0 [ 191.138600][ T5819] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 191.153759][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.232064][ T30] audit: type=1400 audit(1747422570.265:469): avc: denied { write } for pid=6967 comm="syz.2.233" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.344880][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.355443][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.368404][ T5834] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.377538][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.432244][ T30] audit: type=1400 audit(1747422570.265:470): avc: denied { ioctl } for pid=6967 comm="syz.2.233" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.532599][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.539290][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.551477][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.619766][ T6994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 191.913768][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.920997][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.927911][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.934603][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.941219][ T6994] hsr0 speed is unknown, defaulting to 1000 [ 191.967261][ T5834] usb 5-1: config 0 descriptor?? [ 191.990643][ T6995] C: renamed from veth0 (while UP) [ 192.272972][ T7001] kAFS: No cell specified [ 192.285215][ T7001] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 192.297305][ T7001] veth0_macvtap: left promiscuous mode [ 192.312374][ T7001] batman_adv: batadv0: Adding interface: macvtap0 [ 192.326830][ T7001] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.384206][ T7001] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 193.302153][ T5902] usb 3-1: USB disconnect, device number 2 [ 193.343492][ T6976] delete_channel: no stack [ 193.362918][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 193.370026][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 193.512913][ T5834] usb 5-1: USB disconnect, device number 4 [ 193.674188][ T7013] kAFS: No cell specified [ 194.037168][ T30] audit: type=1400 audit(1747422572.935:471): avc: denied { write } for pid=7008 comm="syz.4.241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 194.099411][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.105824][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.324403][ T7015] Bluetooth: MGMT ver 1.23 [ 194.944182][ T30] audit: type=1400 audit(1747422573.995:472): avc: denied { bind } for pid=7014 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 195.544505][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 195.583189][ T7037] syz.2.247: attempt to access beyond end of device [ 195.583189][ T7037] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 195.797706][ T30] audit: type=1400 audit(1747422574.845:473): avc: denied { create } for pid=7039 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.042154][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.094202][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 196.123134][ T7043] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 196.420721][ T5819] usb 34-1: device descriptor read/8, error -110 [ 196.451694][ T30] audit: type=1400 audit(1747422575.265:474): avc: denied { write } for pid=7039 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.664312][ T5834] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 197.178391][ T5819] usb 34-1: SetAddress Request (3) to port 0 [ 197.190750][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.193938][ T5819] usb 34-1: new SuperSpeed USB device number 3 using vhci_hcd [ 197.262731][ T5834] usb 2-1: Product: syz [ 197.271397][ T5834] usb 2-1: Manufacturer: syz [ 197.287452][ T5834] usb 2-1: SerialNumber: syz [ 197.421494][ T5834] usb 2-1: config 0 descriptor?? [ 197.867752][ T5834] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 197.993183][ T5834] usb 2-1: USB disconnect, device number 2 [ 200.064639][ T30] audit: type=1400 audit(1747422579.115:475): avc: denied { ioctl } for pid=7067 comm="syz.0.255" path="socket:[11997]" dev="sockfs" ino=11997 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 200.177224][ T30] audit: type=1400 audit(1747422579.225:476): avc: denied { write } for pid=7072 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.289303][ T7078] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 201.311007][ T30] audit: type=1400 audit(1747422580.325:477): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.292485][ T30] audit: type=1400 audit(1747422580.325:478): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.317520][ T30] audit: type=1400 audit(1747422580.325:479): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.343090][ T30] audit: type=1400 audit(1747422580.435:480): avc: denied { read } for pid=7083 comm="syz.1.258" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.366119][ T30] audit: type=1400 audit(1747422580.435:481): avc: denied { open } for pid=7083 comm="syz.1.258" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.374975][ T5819] usb 34-1: device descriptor read/8, error -110 [ 202.389295][ T30] audit: type=1400 audit(1747422580.465:482): avc: denied { ioctl } for pid=7083 comm="syz.1.258" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.436204][ T30] audit: type=1400 audit(1747422580.485:483): avc: denied { prog_load } for pid=7085 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 202.531536][ T30] audit: type=1400 audit(1747422580.485:484): avc: denied { bpf } for pid=7085 comm="syz.2.260" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.572348][ T5819] usb usb34-port1: attempt power cycle [ 202.621419][ T30] audit: type=1400 audit(1747422580.485:485): avc: denied { perfmon } for pid=7085 comm="syz.2.260" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.642139][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.752161][ T5819] usb 34-1: SetAddress Request (4) to port 0 [ 202.840737][ T5819] usb 34-1: new SuperSpeed USB device number 4 using vhci_hcd [ 202.901188][ T30] audit: type=1400 audit(1747422580.485:486): avc: denied { prog_run } for pid=7085 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 204.222602][ T7109] program syz.3.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.311253][ T7109] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 204.766025][ T7109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.758295][ T971] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.331032][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 206.331056][ T30] audit: type=1400 audit(1747422585.155:534): avc: denied { create } for pid=7126 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.358782][ T30] audit: type=1400 audit(1747422585.165:535): avc: denied { write } for pid=7126 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.440186][ T971] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 206.449654][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.463962][ T971] usb 4-1: Product: syz [ 206.477566][ T971] usb 4-1: Manufacturer: syz [ 206.592978][ T971] usb 4-1: SerialNumber: syz [ 206.610500][ T971] usb 4-1: config 0 descriptor?? [ 206.919325][ T971] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 207.173396][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 207.497427][ T9] usb 4-1: USB disconnect, device number 6 [ 207.573932][ T30] audit: type=1400 audit(1747422586.615:536): avc: denied { map_read map_write } for pid=7137 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 207.766247][ T5902] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 207.796564][ T5869] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 207.805757][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.814193][ T5869] usb 1-1: Product: syz [ 207.818424][ T5869] usb 1-1: Manufacturer: syz [ 208.085973][ T30] audit: type=1400 audit(1747422587.125:537): avc: denied { write } for pid=7137 comm="syz.1.282" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 208.095574][ T5819] usb 34-1: device descriptor read/8, error -110 [ 208.123123][ T5869] usb 1-1: SerialNumber: syz [ 208.130178][ T5869] usb 1-1: config 0 descriptor?? [ 208.135481][ T30] audit: type=1400 audit(1747422587.165:538): avc: denied { write } for pid=7138 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.143592][ T5869] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 208.158128][ T30] audit: type=1400 audit(1747422587.165:539): avc: denied { nlmsg_write } for pid=7138 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 208.190377][ T30] audit: type=1400 audit(1747422587.165:540): avc: denied { module_request } for pid=7138 comm="syz.4.272" kmod="crypto-authenc(digest_null,ecb(cipher_null))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 208.218958][ T5902] usb 3-1: config index 0 descriptor too short (expected 7954, got 18) [ 208.229539][ T5902] usb 3-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 208.240107][ T5902] usb 3-1: config 65 has 0 interfaces, different from the descriptor's value: 1 [ 208.367583][ T5869] usb 1-1: USB disconnect, device number 3 [ 208.374262][ T5819] usb 34-1: SetAddress Request (5) to port 0 [ 208.384663][ T5819] usb 34-1: new SuperSpeed USB device number 5 using vhci_hcd [ 208.560350][ T7152] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'. [ 208.672391][ T30] audit: type=1400 audit(1747422587.625:541): avc: denied { create } for pid=7150 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.706512][ T30] audit: type=1400 audit(1747422587.625:542): avc: denied { create } for pid=7150 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.789490][ T30] audit: type=1400 audit(1747422587.625:543): avc: denied { shutdown } for pid=7150 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 210.632017][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 210.641143][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.767748][ T5902] usb 3-1: can't set config #65, error -71 [ 211.169576][ T5902] usb 3-1: USB disconnect, device number 3 [ 211.500727][ T7180] ubi: mtd0 is already attached to ubi31 [ 212.346354][ T5869] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.356378][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 212.356392][ T30] audit: type=1400 audit(1747422590.555:556): avc: denied { setcurrent } for pid=7173 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 212.430273][ T30] audit: type=1400 audit(1747422591.475:557): avc: denied { execute } for pid=7175 comm="syz.3.280" path="/57/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 212.479998][ T30] audit: type=1804 audit(1747422591.475:558): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.280" name="/newroot/57/file0" dev="tmpfs" ino=348 res=1 errno=0 [ 212.506151][ T7178] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 212.522590][ T7178] ref_ctr decrement failed for inode: 0x15c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802b8bee00 [ 212.537775][ T7178] uprobe: syz.3.280:7178 failed to unregister, leaking uprobe [ 213.006382][ T30] audit: type=1400 audit(1747422592.055:559): avc: denied { write } for pid=7175 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.068523][ T5869] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 213.087985][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.224742][ T5869] usb 2-1: Product: syz [ 213.240044][ T5869] usb 2-1: Manufacturer: syz [ 213.249819][ T5869] usb 2-1: SerialNumber: syz [ 213.331984][ T5902] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.402810][ T5869] usb 2-1: config 0 descriptor?? [ 213.465676][ T5869] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 213.549954][ T5902] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 213.559181][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.582035][ T5819] usb 34-1: device descriptor read/8, error -110 [ 213.598287][ T5902] usb 3-1: Product: syz [ 213.619710][ T5902] usb 3-1: Manufacturer: syz [ 213.628576][ T5902] usb 3-1: SerialNumber: syz [ 213.648044][ T5902] usb 3-1: config 0 descriptor?? [ 213.667831][ T5902] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 213.683617][ T5869] usb 2-1: USB disconnect, device number 3 [ 213.727817][ T5819] usb usb34-port1: unable to enumerate USB device [ 214.140276][ T5865] usb 3-1: USB disconnect, device number 4 [ 214.153527][ T7201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'. [ 214.163832][ T30] audit: type=1400 audit(1747422593.195:560): avc: denied { map } for pid=7195 comm="syz.3.285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.364912][ T7202] syzkaller0: entered promiscuous mode [ 214.370463][ T7202] syzkaller0: entered allmulticast mode [ 214.374367][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.268383][ T30] audit: type=1400 audit(1747422593.195:561): avc: denied { read write } for pid=7195 comm="syz.3.285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 215.293223][ T30] audit: type=1400 audit(1747422593.455:562): avc: denied { mount } for pid=7195 comm="syz.3.285" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 216.416938][ T5869] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 216.544458][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.579428][ T5869] usb 5-1: Product: syz [ 217.239212][ T5869] usb 5-1: Manufacturer: syz [ 217.244008][ T5869] usb 5-1: SerialNumber: syz [ 217.255375][ T5869] usb 5-1: config 0 descriptor?? [ 217.562187][ T5869] usb 5-1: can't set config #0, error -71 [ 217.753256][ T7224] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 217.961755][ T30] audit: type=1400 audit(1747422596.695:563): avc: denied { mount } for pid=7219 comm="syz.0.291" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 218.013181][ T5869] usb 5-1: USB disconnect, device number 5 [ 218.042961][ T30] audit: type=1400 audit(1747422596.985:564): avc: denied { listen } for pid=7219 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 218.509261][ T30] audit: type=1400 audit(1747422597.505:565): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 218.612664][ T971] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.820545][ T30] audit: type=1400 audit(1747422597.825:566): avc: denied { create } for pid=7229 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.845192][ T30] audit: type=1400 audit(1747422597.825:567): avc: denied { ioctl } for pid=7229 comm="syz.4.293" path="socket:[12184]" dev="sockfs" ino=12184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.907350][ T30] audit: type=1400 audit(1747422597.895:568): avc: denied { create } for pid=7234 comm="syz.0.294" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.935718][ T30] audit: type=1326 audit(1747422597.905:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a758e969 code=0x7ffc0000 [ 218.962452][ T30] audit: type=1326 audit(1747422597.905:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a758e969 code=0x7ffc0000 [ 218.989304][ T30] audit: type=1326 audit(1747422597.905:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65a758e969 code=0x7ffc0000 [ 219.061471][ T30] audit: type=1326 audit(1747422597.905:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7234 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a758e969 code=0x7ffc0000 [ 219.085521][ T971] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 219.766271][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.809922][ T7241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 219.829641][ T7241] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.052385][ T971] usb 3-1: Product: syz [ 220.056710][ T971] usb 3-1: Manufacturer: syz [ 220.076514][ T971] usb 3-1: SerialNumber: syz [ 220.088211][ T971] usb 3-1: config 0 descriptor?? [ 220.304506][ T971] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 220.397672][ T24] usb 3-1: USB disconnect, device number 5 [ 224.219464][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 224.219482][ T30] audit: type=1400 audit(1747422602.425:621): avc: denied { ioctl } for pid=7263 comm="syz.4.301" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.663028][ T7272] Invalid ELF header type: 3 != 1 [ 224.682544][ T30] audit: type=1400 audit(1747422603.705:622): avc: denied { sys_module } for pid=7268 comm="syz.4.302" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 224.703427][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.942176][ T30] audit: type=1400 audit(1747422603.715:623): avc: denied { module_load } for pid=7268 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 225.382756][ T7248] lo speed is unknown, defaulting to 1000 [ 225.388604][ T7248] lo speed is unknown, defaulting to 1000 [ 225.394988][ T7248] lo speed is unknown, defaulting to 1000 [ 225.405827][ T7248] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 225.445712][ T7248] lo speed is unknown, defaulting to 1000 [ 225.452533][ T7248] lo speed is unknown, defaulting to 1000 [ 225.459268][ T7248] lo speed is unknown, defaulting to 1000 [ 225.465726][ T7248] lo speed is unknown, defaulting to 1000 [ 225.472204][ T7248] lo speed is unknown, defaulting to 1000 [ 226.312059][ T971] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.212558][ T30] audit: type=1400 audit(1747422604.965:624): avc: denied { create } for pid=7278 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.808445][ T30] audit: type=1400 audit(1747422604.965:625): avc: denied { setopt } for pid=7278 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 227.980041][ T7291] syz.1.305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 228.424149][ T30] audit: type=1400 audit(1747422604.965:626): avc: denied { map } for pid=7278 comm="syz.2.304" path="socket:[12261]" dev="sockfs" ino=12261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.997749][ T30] audit: type=1400 audit(1747422604.965:627): avc: denied { read } for pid=7278 comm="syz.2.304" path="socket:[12261]" dev="sockfs" ino=12261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.023786][ T971] usb 5-1: device descriptor read/all, error -71 [ 229.080041][ T30] audit: type=1400 audit(1747422604.965:628): avc: denied { read write } for pid=7276 comm="syz.0.306" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.103554][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.152916][ T30] audit: type=1400 audit(1747422604.965:629): avc: denied { open } for pid=7276 comm="syz.0.306" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.222468][ T30] audit: type=1400 audit(1747422604.965:630): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 229.349335][ T30] audit: type=1400 audit(1747422605.025:631): avc: denied { create } for pid=7276 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.386912][ T30] audit: type=1326 audit(1747422605.105:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7278 comm="syz.2.304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a9718e969 code=0x0 [ 229.582029][ T7305] netlink: 68 bytes leftover after parsing attributes in process `syz.4.310'. [ 229.913890][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 230.019781][ T7304] ceph: No mds server is up or the cluster is laggy [ 230.034021][ T30] audit: type=1400 audit(1747422606.985:633): avc: denied { create } for pid=7277 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.059703][ T30] audit: type=1400 audit(1747422606.995:634): avc: denied { setopt } for pid=7277 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.712927][ T30] audit: type=1400 audit(1747422609.745:635): avc: denied { read write } for pid=7312 comm="syz.4.312" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 230.828853][ T30] audit: type=1400 audit(1747422609.745:636): avc: denied { open } for pid=7312 comm="syz.4.312" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 231.071644][ T30] audit: type=1400 audit(1747422610.115:637): avc: denied { ioctl } for pid=7314 comm="syz.0.314" path="socket:[12429]" dev="sockfs" ino=12429 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.493054][ T6180] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.737350][ T7325] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 231.763581][ T7325] CIFS: Unable to determine destination address [ 232.757191][ T7333] @: renamed from vlan0 (while UP) [ 232.769639][ T30] audit: type=1400 audit(1747422611.795:638): avc: denied { write } for pid=7328 comm="syz.4.316" name="vlan0" dev="proc" ino=4026533859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 232.994007][ T7333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.316'. [ 233.335832][ T30] audit: type=1400 audit(1747422611.805:639): avc: denied { ioctl } for pid=7328 comm="syz.4.316" path="socket:[12454]" dev="sockfs" ino=12454 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 233.415099][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.306911][ T7346] overlayfs: missing 'lowerdir' [ 234.757736][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 234.757758][ T30] audit: type=1400 audit(1747422613.805:643): avc: denied { connect } for pid=7341 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 234.915832][ T7353] random: crng reseeded on system resumption [ 235.042040][ T30] audit: type=1400 audit(1747422613.955:644): avc: denied { write } for pid=7335 comm="syz.1.319" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.113918][ T7357] kvm: kvm [7335]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 235.815624][ T30] audit: type=1400 audit(1747422613.965:645): avc: denied { open } for pid=7335 comm="syz.1.319" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.381654][ T30] audit: type=1400 audit(1747422615.425:646): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.500622][ T7366] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 236.508376][ T7366] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.322'. [ 236.976685][ T30] audit: type=1400 audit(1747422616.015:647): avc: denied { bind } for pid=7368 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.032108][ T7370] veth0_vlan: entered allmulticast mode [ 237.213004][ T7370] veth0_vlan: left promiscuous mode [ 237.225893][ T30] audit: type=1400 audit(1747422616.015:648): avc: denied { write } for pid=7368 comm="syz.4.324" path="socket:[12555]" dev="sockfs" ino=12555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.242514][ T7370] veth0_vlan: entered promiscuous mode [ 237.627477][ T30] audit: type=1400 audit(1747422616.585:649): avc: denied { ioctl } for pid=7364 comm="syz.2.323" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.752031][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 237.802046][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 237.996272][ T9] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 237.996302][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.996320][ T9] usb 4-1: Product: syz [ 237.996334][ T9] usb 4-1: Manufacturer: syz [ 237.996348][ T9] usb 4-1: SerialNumber: syz [ 238.126557][ T7383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 238.142373][ T7383] batman_adv: batadv0: Adding interface: gretap1 [ 238.148756][ T7383] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.174297][ T7383] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 238.421270][ T9] usb 4-1: config 0 descriptor?? [ 238.454352][ T9] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 238.464115][ T24] usb 1-1: config 2 has an invalid interface number: 177 but max is 1 [ 238.464647][ T30] audit: type=1400 audit(1747422617.125:650): avc: denied { read write } for pid=7378 comm="syz.1.326" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 238.528419][ T24] usb 1-1: config 2 has an invalid interface number: 177 but max is 1 [ 238.542826][ T9] usb 4-1: USB disconnect, device number 7 [ 238.642145][ T24] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 238.667685][ T30] audit: type=1400 audit(1747422617.125:651): avc: denied { open } for pid=7378 comm="syz.1.326" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 238.892524][ T24] usb 1-1: config 2 has no interface number 0 [ 238.898693][ T24] usb 1-1: config 2 interface 177 has no altsetting 1 [ 238.912470][ T30] audit: type=1400 audit(1747422617.135:652): avc: denied { ioctl } for pid=7378 comm="syz.1.326" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 238.968551][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=1a.dd [ 238.981985][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.057026][ T24] usb 1-1: Product: syz [ 239.071815][ T24] usb 1-1: Manufacturer: syz [ 239.092133][ T24] usb 1-1: SerialNumber: syz [ 239.777248][ T5834] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.098287][ T7402] syz.2.331: attempt to access beyond end of device [ 240.098287][ T7402] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 240.111462][ T7402] qnx4: unable to read the superblock [ 240.555247][ T5834] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 240.877303][ T30] audit: type=1400 audit(1747422619.695:653): avc: denied { mount } for pid=7404 comm="syz.1.332" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 241.493924][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.507315][ T5834] usb 5-1: Product: syz [ 241.512596][ T5834] usb 5-1: Manufacturer: syz [ 241.517262][ T5834] usb 5-1: SerialNumber: syz [ 241.523300][ T5834] usb 5-1: config 0 descriptor?? [ 241.533050][ T5834] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 241.584894][ T30] audit: type=1400 audit(1747422619.705:654): avc: denied { listen } for pid=7404 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.612082][ T30] audit: type=1400 audit(1747422619.705:655): avc: denied { accept } for pid=7404 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.633145][ T30] audit: type=1400 audit(1747422619.775:656): avc: denied { write } for pid=7404 comm="syz.1.332" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 241.686307][ T5834] usb 5-1: USB disconnect, device number 8 [ 242.752130][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 243.448863][ T9] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 243.504672][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.532377][ T9] usb 3-1: Product: syz [ 243.536619][ T9] usb 3-1: Manufacturer: syz [ 243.541229][ T9] usb 3-1: SerialNumber: syz [ 243.622514][ T9] usb 3-1: config 0 descriptor?? [ 243.640642][ T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 244.316609][ T24] usb 1-1: selecting invalid altsetting 1 [ 244.324153][ T24] sierra 1-1:2.177: Sierra USB modem converter detected [ 244.348824][ T9] usb 3-1: USB disconnect, device number 6 [ 244.360624][ T24] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 244.417233][ T30] audit: type=1400 audit(1747422623.455:657): avc: denied { create } for pid=7433 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.247065][ T9] usb 1-1: USB disconnect, device number 4 [ 245.263395][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 245.282906][ T9] sierra 1-1:2.177: device disconnected [ 246.096917][ T7453] tipc: Started in network mode [ 246.101971][ T7453] tipc: Node identity ac14140f, cluster identity 4711 [ 246.111882][ T7453] tipc: Enabling of bearer rejected, failed to enable media [ 246.418963][ T30] audit: type=1400 audit(1747422625.465:658): avc: denied { ioctl } for pid=7455 comm="syz.3.344" path="socket:[12809]" dev="sockfs" ino=12809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.466259][ T7456] netlink: 32 bytes leftover after parsing attributes in process `syz.3.344'. [ 248.061994][ T30] audit: type=1400 audit(1747422626.265:659): avc: denied { create } for pid=7454 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.287520][ T30] audit: type=1400 audit(1747422626.275:660): avc: denied { ioctl } for pid=7454 comm="syz.2.346" path="socket:[12821]" dev="sockfs" ino=12821 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.510685][ T30] audit: type=1400 audit(1747422626.295:661): avc: denied { setopt } for pid=7454 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 248.603542][ T30] audit: type=1400 audit(1747422627.155:663): avc: denied { write } for pid=7455 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.623231][ T30] audit: type=1400 audit(1747422627.085:662): avc: denied { bind } for pid=7455 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.679025][ T30] audit: type=1400 audit(1747422627.665:664): avc: denied { connect } for pid=7467 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 249.784671][ T30] audit: type=1400 audit(1747422627.915:665): avc: denied { connect } for pid=7467 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.100735][ T30] audit: type=1400 audit(1747422629.015:666): avc: denied { read } for pid=7480 comm="syz.3.350" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 250.215989][ T30] audit: type=1400 audit(1747422629.025:667): avc: denied { open } for pid=7480 comm="syz.3.350" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 252.462586][ T30] audit: type=1400 audit(1747422631.485:668): avc: denied { create } for pid=7502 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 252.815126][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 253.043578][ T7510] Invalid ELF header magic: != ELF [ 253.052163][ T30] audit: type=1400 audit(1747422631.495:669): avc: denied { write } for pid=7502 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 253.742010][ T30] audit: type=1400 audit(1747422631.575:670): avc: denied { module_load } for pid=7502 comm="syz.4.356" path="/75/bus" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 253.817610][ T30] audit: type=1800 audit(1747422632.095:671): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.356" name="/newroot/75/bus" dev="tmpfs" ino=460 res=0 errno=0 [ 254.778256][ T7521] netlink: 'syz.4.360': attribute type 16 has an invalid length. [ 254.786208][ T7521] netlink: 'syz.4.360': attribute type 17 has an invalid length. [ 255.024866][ T7521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.335376][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.341755][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.349084][ T7524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.361'. [ 256.485987][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 258.082874][ T5865] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.430614][ T5865] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 258.829310][ T30] audit: type=1400 audit(1747422637.845:672): avc: denied { create } for pid=7547 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 258.889855][ T30] audit: type=1400 audit(1747422637.865:673): avc: denied { write } for pid=7547 comm="syz.0.366" path="socket:[13744]" dev="sockfs" ino=13744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 258.893286][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.913859][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.139059][ T5865] usb 5-1: Product: syz [ 259.147179][ T5865] usb 5-1: Manufacturer: syz [ 259.159283][ T5865] usb 5-1: SerialNumber: syz [ 259.174489][ T5865] usb 5-1: config 0 descriptor?? [ 259.184668][ T5865] usb 5-1: can't set config #0, error -71 [ 259.207693][ T5865] usb 5-1: USB disconnect, device number 9 [ 260.038505][ T7572] tipc: Started in network mode [ 260.043571][ T7572] tipc: Node identity ac14140f, cluster identity 4711 [ 260.052333][ T7572] tipc: Enabling of bearer rejected, failed to enable media [ 260.822042][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.062074][ T30] audit: type=1400 audit(1747422640.025:674): avc: denied { read write } for pid=7575 comm="syz.2.375" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 261.407544][ T30] audit: type=1400 audit(1747422640.025:675): avc: denied { open } for pid=7575 comm="syz.2.375" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 261.432896][ T30] audit: type=1400 audit(1747422640.035:676): avc: denied { mounton } for pid=7575 comm="syz.2.375" path="/79/file0" dev="tmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.457401][ T30] audit: type=1400 audit(1747422640.045:677): avc: denied { mount } for pid=7575 comm="syz.2.375" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.525457][ T9] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 261.541991][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.555547][ T9] usb 5-1: Product: syz [ 261.643210][ T30] audit: type=1400 audit(1747422640.675:678): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 261.716537][ T9] usb 5-1: Manufacturer: syz [ 261.721222][ T9] usb 5-1: SerialNumber: syz [ 261.824622][ T9] usb 5-1: config 0 descriptor?? [ 261.925305][ T9] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 262.098359][ T30] audit: type=1400 audit(1747422641.125:679): avc: denied { ioctl } for pid=7581 comm="syz.2.376" path="socket:[13778]" dev="sockfs" ino=13778 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.465315][ T9] usb 5-1: USB disconnect, device number 10 [ 263.391624][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 263.830416][ T7605] veth1_macvtap: left promiscuous mode [ 263.857868][ T7605] veth0_vlan: entered allmulticast mode [ 263.910290][ T7605] veth0_vlan: left promiscuous mode [ 263.920117][ T7605] veth0_vlan: entered promiscuous mode [ 263.974190][ T7605] Failed to initialize the IGMP autojoin socket (err -2) [ 264.447103][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 264.453912][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 264.463105][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.479199][ T9] usb 1-1: config 0 descriptor?? [ 264.992066][ T30] audit: type=1400 audit(1747422643.905:680): avc: denied { bind } for pid=7591 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.185154][ T7615] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.556315][ T9] (null): keene_cmd_main failed (-110) [ 265.777135][ T9] video4linux radio48: keene_cmd_main failed (-32) [ 265.863307][ T9] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 266.725702][ T7625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 266.732356][ T7625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 266.740274][ T7625] vhci_hcd vhci_hcd.0: Device attached [ 266.949160][ T7629] vhci_hcd: connection closed [ 266.967834][ T53] vhci_hcd: stop threads [ 267.010812][ T5865] usb 1-1: USB disconnect, device number 5 [ 267.062344][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 267.232476][ T53] vhci_hcd: release socket [ 267.237083][ T53] vhci_hcd: disconnect device [ 267.266693][ T30] audit: type=1400 audit(1747422646.265:681): avc: denied { mount } for pid=7632 comm="syz.3.385" name="/" dev="autofs" ino=13141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 267.343262][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 267.357368][ T30] audit: type=1400 audit(1747422646.275:682): avc: denied { read } for pid=7632 comm="syz.3.385" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.562045][ T9] usb 38-1: enqueue for inactive port 0 [ 267.567994][ T30] audit: type=1400 audit(1747422646.285:683): avc: denied { open } for pid=7632 comm="syz.3.385" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.591343][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.597545][ T30] audit: type=1400 audit(1747422646.285:684): avc: denied { ioctl } for pid=7632 comm="syz.3.385" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 267.598127][ T1140] Bluetooth: hci5: Frame reassembly failed (-84) [ 267.622396][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.703669][ T30] audit: type=1400 audit(1747422646.755:685): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 268.035239][ T9] usb usb38-port1: attempt power cycle [ 268.238132][ T30] audit: type=1400 audit(1747422647.275:686): avc: denied { block_suspend } for pid=7645 comm="syz.3.389" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.618793][ T9] usb usb38-port1: unable to enumerate USB device [ 268.672386][ T30] audit: type=1400 audit(1747422647.355:687): avc: denied { write } for pid=7649 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 269.412116][ T5816] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 269.791228][ T30] audit: type=1400 audit(1747422648.815:688): avc: denied { ioctl } for pid=7666 comm="syz.2.396" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.964701][ T30] audit: type=1400 audit(1747422648.915:689): avc: denied { associate } for pid=7675 comm="syz.0.397" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 270.565399][ T7672] nbd4: detected capacity change from 0 to 4294967296 [ 270.597096][ T7676] block nbd4: shutting down sockets [ 270.677244][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.709157][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.012384][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.028194][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.037384][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.122075][ T971] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.122081][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.154017][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.169713][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.177983][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.187245][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.251729][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.271996][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.280133][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.289625][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.297805][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.307152][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.315221][ T5829] ldm_validate_partition_table(): Disk read failed. [ 271.322572][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.331699][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.340093][ T5829] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.389747][ T5829] Buffer I/O error on dev nbd4, logical block 0, async page read [ 271.400908][ T30] audit: type=1400 audit(1747422650.315:690): avc: denied { accept } for pid=7684 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.401130][ T5829] Dev nbd4: unable to read RDB block 0 [ 271.420130][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.500058][ T7687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.399'. [ 271.515960][ T30] audit: type=1400 audit(1747422650.545:691): avc: denied { write } for pid=7684 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 271.815048][ T5829] nbd4: unable to read partition table [ 271.823047][ T971] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 271.834632][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.848706][ T5829] ldm_validate_partition_table(): Disk read failed. [ 271.861675][ T971] usb 4-1: Product: syz [ 271.862059][ T5829] Dev nbd4: unable to read RDB block 0 [ 271.872957][ T971] usb 4-1: Manufacturer: syz [ 271.877774][ T971] usb 4-1: SerialNumber: syz [ 271.884791][ T971] usb 4-1: config 0 descriptor?? [ 271.891869][ T971] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 271.913529][ T5829] nbd4: unable to read partition table [ 272.096953][ T5865] usb 4-1: USB disconnect, device number 8 [ 272.333054][ T30] audit: type=1400 audit(1747422651.305:692): avc: denied { create } for pid=7688 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.364806][ T30] audit: type=1400 audit(1747422651.315:693): avc: denied { bind } for pid=7688 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.385031][ T30] audit: type=1400 audit(1747422651.315:694): avc: denied { listen } for pid=7688 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 272.525506][ T30] audit: type=1400 audit(1747422651.315:695): avc: denied { setopt } for pid=7688 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.780433][ T7693] overlayfs: failed to resolve './file1': -2 [ 272.947694][ T7697] netlink: 'syz.0.402': attribute type 10 has an invalid length. [ 273.098875][ T971] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 274.462050][ T47] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 274.611999][ T47] usb 5-1: device descriptor read/64, error -71 [ 274.670022][ T30] audit: type=1400 audit(1747422653.195:696): avc: denied { read } for pid=7699 comm="syz.4.404" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.734524][ T30] audit: type=1400 audit(1747422653.195:697): avc: denied { open } for pid=7699 comm="syz.4.404" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.772113][ T30] audit: type=1400 audit(1747422653.205:698): avc: denied { ioctl } for pid=7699 comm="syz.4.404" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.818654][ T971] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 274.830544][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.841510][ T971] usb 2-1: Product: syz [ 274.846464][ T971] usb 2-1: Manufacturer: syz [ 274.851241][ T971] usb 2-1: SerialNumber: syz [ 274.859836][ T30] audit: type=1400 audit(1747422653.205:699): avc: denied { set_context_mgr } for pid=7699 comm="syz.4.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 274.881195][ T971] usb 2-1: config 0 descriptor?? [ 275.566236][ T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 275.597586][ T7718] trusted_key: encrypted_key: key user:syz not found [ 276.088231][ T971] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 276.400777][ T5865] usb 2-1: USB disconnect, device number 4 [ 277.365719][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 277.365749][ T30] audit: type=1400 audit(1747422656.395:702): avc: denied { read } for pid=7724 comm="syz.3.410" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.395124][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.768053][ T971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 277.816554][ T30] audit: type=1400 audit(1747422656.395:703): avc: denied { open } for pid=7724 comm="syz.3.410" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.861671][ T30] audit: type=1400 audit(1747422656.395:704): avc: denied { ioctl } for pid=7724 comm="syz.3.410" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 278.466912][ T30] audit: type=1400 audit(1747422657.485:705): avc: denied { append } for pid=7734 comm="syz.4.412" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 280.249612][ T30] audit: type=1400 audit(1747422657.485:706): avc: denied { map } for pid=7734 comm="syz.4.412" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 280.274095][ T30] audit: type=1400 audit(1747422657.485:707): avc: denied { write execute } for pid=7734 comm="syz.4.412" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 280.318108][ T971] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 280.347013][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.503442][ T7747] overlayfs: failed to resolve './file1': -2 [ 280.652212][ T971] usb 3-1: Product: syz [ 280.670482][ T971] usb 3-1: Manufacturer: syz [ 280.684067][ T971] usb 3-1: SerialNumber: syz [ 281.003026][ T30] audit: type=1400 audit(1747422660.045:708): avc: denied { map } for pid=7743 comm="syz.3.413" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.014015][ T971] usb 3-1: config 0 descriptor?? [ 281.302463][ T30] audit: type=1400 audit(1747422660.045:709): avc: denied { execute } for pid=7743 comm="syz.3.413" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.332116][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 281.378804][ T971] usb 3-1: can't set config #0, error -71 [ 281.404331][ T971] usb 3-1: USB disconnect, device number 7 [ 281.552677][ T30] audit: type=1400 audit(1747422660.595:710): avc: denied { mount } for pid=7759 comm="syz.4.417" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 281.847942][ T30] audit: type=1400 audit(1747422660.605:711): avc: denied { search } for pid=7759 comm="syz.4.417" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 282.049992][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 282.062148][ T9] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 282.071364][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.089970][ T9] usb 2-1: Product: syz [ 282.098442][ T9] usb 2-1: Manufacturer: syz [ 282.109031][ T9] usb 2-1: SerialNumber: syz [ 282.115743][ T9] usb 2-1: config 0 descriptor?? [ 282.134854][ T9] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 282.254279][ T7763] ceph: No mds server is up or the cluster is laggy [ 282.480288][ T47] usb 2-1: USB disconnect, device number 5 [ 282.674291][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 282.674307][ T30] audit: type=1400 audit(1747422661.725:714): avc: denied { create } for pid=7771 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 283.196244][ T30] audit: type=1400 audit(1747422661.865:715): avc: denied { read } for pid=7771 comm="syz.4.421" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 283.252541][ T30] audit: type=1400 audit(1747422661.865:716): avc: denied { open } for pid=7771 comm="syz.4.421" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 283.408917][ T30] audit: type=1400 audit(1747422661.865:717): avc: denied { ioctl } for pid=7771 comm="syz.4.421" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 284.323504][ T30] audit: type=1400 audit(1747422663.355:718): avc: denied { read } for pid=7784 comm="syz.0.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 285.138090][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.738436][ T971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 286.149616][ T7805] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 286.167047][ T7805] fuse: Bad value for 'fd' [ 286.264975][ T971] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.281942][ T971] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.311957][ T971] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.321385][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.895998][ T7792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.933914][ T971] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.045429][ T971] usb 3-1: USB disconnect, device number 8 [ 288.353702][ T7827] 9pnet: Unknown protocol version 9p20\++} [ 288.365046][ T7828] 9pnet_fd: Insufficient options for proto=fd [ 288.457941][ T30] audit: type=1400 audit(1747422667.425:719): avc: denied { setattr } for pid=7824 comm="syz.4.433" name="NETLINK" dev="sockfs" ino=14443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.739043][ T7830] lo speed is unknown, defaulting to 1000 [ 288.750231][ T7830] lo speed is unknown, defaulting to 1000 [ 288.759753][ T7830] lo speed is unknown, defaulting to 1000 [ 289.215647][ T7830] infiniband sz1: set down [ 289.220178][ T7830] infiniband sz1: added lo [ 289.225470][ T7830] sz1: rxe_create_qp: returned err = -2 [ 289.231118][ T7830] infiniband sz1: Couldn't create ib_mad QP1 [ 289.237579][ T7830] infiniband sz1: Couldn't open port 1 [ 289.246686][ T47] lo speed is unknown, defaulting to 1000 [ 289.276187][ T7830] RDS/IB: sz1: added [ 289.280228][ T7830] smc: adding ib device sz1 with port count 1 [ 289.286414][ T7830] smc: ib device sz1 port 1 has pnetid [ 289.293877][ T7830] lo speed is unknown, defaulting to 1000 [ 289.366507][ T47] lo speed is unknown, defaulting to 1000 [ 289.455866][ T7830] lo speed is unknown, defaulting to 1000 [ 289.548797][ T7830] lo speed is unknown, defaulting to 1000 [ 289.631807][ T7830] lo speed is unknown, defaulting to 1000 [ 289.715059][ T7830] lo speed is unknown, defaulting to 1000 [ 289.798269][ T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 290.069300][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.117685][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 290.173273][ T47] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 290.204886][ T30] audit: type=1400 audit(1747422669.255:720): avc: denied { ioctl } for pid=7824 comm="syz.4.433" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 290.260161][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.260217][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.308064][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.864779][ T6848] udevd[6848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.986305][ T47] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 291.567804][ T47] usb 4-1: USB disconnect, device number 9 [ 292.354322][ T971] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 292.452914][ T30] audit: type=1400 audit(1747422671.505:721): avc: denied { getopt } for pid=7835 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 292.472334][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.824545][ T971] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 292.843357][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.851386][ T971] usb 3-1: Product: syz [ 292.868253][ T971] usb 3-1: Manufacturer: syz [ 292.881467][ T971] usb 3-1: SerialNumber: syz [ 293.052240][ T971] usb 3-1: config 0 descriptor?? [ 293.218301][ T971] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 294.547704][ T47] usb 3-1: USB disconnect, device number 9 [ 294.566547][ T7872] overlayfs: failed to clone upperpath [ 295.823380][ T7886] siw: device registration error -23 [ 296.834224][ T7890] netlink: 'syz.4.452': attribute type 27 has an invalid length. [ 297.508560][ T30] audit: type=1400 audit(1747422676.135:722): avc: denied { map } for pid=7892 comm="syz.3.450" path="socket:[14265]" dev="sockfs" ino=14265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.796624][ T7903] nvme_fabrics: unknown parameter or missing value 'øöE' in ctrl creation request [ 297.809463][ T30] audit: type=1400 audit(1747422676.135:723): avc: denied { read } for pid=7892 comm="syz.3.450" path="socket:[14265]" dev="sockfs" ino=14265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.859337][ T7903] netlink: 'syz.4.452': attribute type 10 has an invalid length. [ 298.867716][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.918692][ T30] audit: type=1400 audit(1747422677.965:724): avc: denied { create } for pid=7914 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.070257][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 299.081101][ T30] audit: type=1400 audit(1747422678.125:725): avc: denied { write } for pid=7913 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 299.110320][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 299.119097][ T9] usb 2-1: config 0 has no interface number 0 [ 299.268446][ T7921] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 299.573664][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 299.602647][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 299.647796][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.658452][ T9] usb 2-1: Product: syz [ 299.662995][ T9] usb 2-1: Manufacturer: syz [ 299.670701][ T9] usb 2-1: SerialNumber: syz [ 299.713835][ T9] usb 2-1: config 0 descriptor?? [ 299.753328][ T9] smsc75xx v1.0.0 [ 299.761247][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 299.773827][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 300.029360][ T7890] veth0_vlan: left allmulticast mode [ 300.089038][ T7890] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.099196][ T7890] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.108443][ T7890] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.118201][ T7890] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.271198][ T7901] Failed to initialize the IGMP autojoin socket (err -2) [ 300.294880][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.309062][ T9] usb 2-1: USB disconnect, device number 6 [ 300.310192][ T7903] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 300.401995][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 300.480531][ T5869] lo speed is unknown, defaulting to 1000 [ 300.489454][ T5869] syz2: Port: 1 Link DOWN [ 301.169873][ T30] audit: type=1804 audit(1747422680.215:726): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.462" name="/newroot/97/file0" dev="tmpfs" ino=568 res=1 errno=0 [ 301.209958][ T7944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'. [ 301.256556][ T30] audit: type=1400 audit(1747422680.275:727): avc: denied { execute } for pid=7930 comm="syz.3.459" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=14327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 301.294757][ T7937] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 301.336391][ T7937] ref_ctr decrement failed for inode: 0x238 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888079db8a00 [ 301.350490][ T7937] uprobe: syz.2.462:7937 failed to unregister, leaking uprobe [ 302.442771][ T30] audit: type=1400 audit(1747422681.455:728): avc: denied { setattr } for pid=7954 comm="syz.3.466" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 302.467164][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.770153][ T30] audit: type=1400 audit(1747422682.195:729): avc: denied { setopt } for pid=7961 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 304.951016][ T7980] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 306.497989][ T7990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.611858][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 411.618847][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5183/1:b..l [ 411.627173][ C1] rcu: (detected by 1, t=10502 jiffies, g=17205, q=120 ncpus=2) [ 411.634881][ C1] task:udevd state:R running task stack:25640 pid:5183 tgid:5183 ppid:1 task_flags:0x400140 flags:0x00000002 [ 411.648788][ C1] Call Trace: [ 411.652062][ C1] [ 411.654990][ C1] __schedule+0x116f/0x5de0 [ 411.659504][ C1] ? bpf_ksym_find+0x127/0x1c0 [ 411.664269][ C1] ? __pfx___schedule+0x10/0x10 [ 411.669119][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 411.674063][ C1] preempt_schedule_irq+0x51/0x90 [ 411.679085][ C1] irqentry_exit+0x36/0x90 [ 411.683499][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.689469][ C1] RIP: 0010:__rcu_read_unlock+0x30/0x580 [ 411.695103][ C1] Code: 41 55 41 54 55 65 48 8b 2d d5 4f 02 12 53 48 8d bd 44 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 <48> 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 42 02 00 00 65 [ 411.714804][ C1] RSP: 0018:ffffc9000346f8c8 EFLAGS: 00000a07 [ 411.720869][ C1] RAX: dffffc0000000000 RBX: ffffc9000346fcc8 RCX: ffffc9000346f8bc [ 411.728834][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbd2d3 RDI: ffff8880216b8444 [ 411.736885][ C1] RBP: ffff8880216b8000 R08: ffffffff912753d2 R09: 0000000000000000 [ 411.744844][ C1] R10: 0000000000000000 R11: 0000000000012093 R12: ffffc9000346f9b8 [ 411.752805][ C1] R13: ffffc9000346f968 R14: ffffc9000346fcc8 R15: ffffc9000346f99c [ 411.760782][ C1] unwind_next_frame+0x3fe/0x20a0 [ 411.765810][ C1] ? kasan_save_track+0x14/0x30 [ 411.770669][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 411.776836][ C1] arch_stack_walk+0x94/0x100 [ 411.781526][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 411.786555][ C1] stack_trace_save+0x8e/0xc0 [ 411.791232][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 411.796602][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 411.801542][ C1] kasan_save_stack+0x33/0x60 [ 411.806210][ C1] ? kasan_save_stack+0x33/0x60 [ 411.811050][ C1] ? kasan_save_track+0x14/0x30 [ 411.815926][ C1] kasan_save_track+0x14/0x30 [ 411.820591][ C1] __kasan_slab_alloc+0x89/0x90 [ 411.825432][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 411.830882][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 411.835636][ C1] ? putname+0x154/0x1a0 [ 411.839867][ C1] ? getname_flags.part.0+0x4c/0x550 [ 411.845150][ C1] getname_flags.part.0+0x4c/0x550 [ 411.850260][ C1] getname_flags+0x93/0xf0 [ 411.854676][ C1] do_sys_openat2+0xb8/0x1d0 [ 411.859259][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.864459][ C1] __x64_sys_openat+0x174/0x210 [ 411.869303][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 411.874679][ C1] do_syscall_64+0xcd/0x260 [ 411.879186][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.885072][ C1] RIP: 0033:0x7f69cab15c3a [ 411.889475][ C1] RSP: 002b:00007ffe44ad9cc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 411.897880][ C1] RAX: ffffffffffffffda RBX: 000055eab902a210 RCX: 00007f69cab15c3a [ 411.905844][ C1] RDX: 0000000000090800 RSI: 000055eab9011030 RDI: 00000000ffffff9c [ 411.913891][ C1] RBP: 000055eab9011030 R08: 0000000000000000 R09: 0000000000000001 [ 411.921851][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000055eab9013130 [ 411.929819][ C1] R13: 00000000000000ff R14: 000055ea9fe0fbe0 R15: 00007ffe44ad9f50 [ 411.937795][ C1] [ 411.940803][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g17205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 411.951987][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 411.961960][ C1] rcu: RCU grace-period kthread stack dump: [ 411.967841][ C1] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 411.981344][ C1] Call Trace: [ 411.984618][ C1] [ 411.987552][ C1] __schedule+0x116f/0x5de0 [ 411.992080][ C1] ? __pfx___schedule+0x10/0x10 [ 411.996937][ C1] ? find_held_lock+0x2b/0x80 [ 412.001617][ C1] ? schedule+0x2d7/0x3a0 [ 412.005953][ C1] schedule+0xe7/0x3a0 [ 412.010021][ C1] schedule_timeout+0x123/0x290 [ 412.014873][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 412.020245][ C1] ? __pfx_process_timeout+0x10/0x10 [ 412.025530][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 412.031330][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 412.036792][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 412.041556][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 412.046841][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 412.051696][ C1] rcu_gp_kthread+0x270/0x380 [ 412.056373][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.061567][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.066325][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.071519][ C1] ? __kthread_parkme+0x19e/0x250 [ 412.076552][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.081751][ C1] kthread+0x3c2/0x780 [ 412.085815][ C1] ? __pfx_kthread+0x10/0x10 [ 412.090393][ C1] ? __pfx_kthread+0x10/0x10 [ 412.094971][ C1] ? __pfx_kthread+0x10/0x10 [ 412.099548][ C1] ? __pfx_kthread+0x10/0x10 [ 412.104127][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.108883][ C1] ? __pfx_kthread+0x10/0x10 [ 412.113550][ C1] ret_from_fork+0x45/0x80 [ 412.117959][ C1] ? __pfx_kthread+0x10/0x10 [ 412.122541][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.127314][ C1] [ 412.130321][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 412.136631][ C1] CPU: 1 UID: 0 PID: 6044 Comm: kworker/u8:10 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 412.148855][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.158903][ C1] Workqueue: events_unbound toggle_allocation_gate [ 412.165399][ C1] RIP: 0010:write_comp_data+0x8b/0x90 [ 412.170770][ C1] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 90 b8 b4 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 412.190366][ C1] RSP: 0018:ffffc900052c7930 EFLAGS: 00000293 [ 412.196420][ C1] RAX: 0000000000000000 RBX: ffff8880b8441720 RCX: ffffffff81af2ee9 [ 412.204387][ C1] RDX: ffff888031024880 RSI: 0000000000000000 RDI: 0000000000000005 [ 412.212346][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 412.220313][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170882e5 [ 412.228270][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b853b040 [ 412.236230][ C1] FS: 0000000000000000(0000) GS:ffff888124adf000(0000) knlGS:0000000000000000 [ 412.245149][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.251724][ C1] CR2: 0000001b2ecf9ff8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 412.259691][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.267649][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.275609][ C1] Call Trace: [ 412.278876][ C1] [ 412.281801][ C1] smp_call_function_many_cond+0x4c9/0x1290 [ 412.287698][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 412.292717][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 412.297825][ C1] text_poke_bp_batch+0x220/0x760 [ 412.302850][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 412.308389][ C1] ? __jump_label_patch+0x1db/0x400 [ 412.313589][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 412.319826][ C1] ? find_held_lock+0x2b/0x80 [ 412.324499][ C1] text_poke_finish+0x30/0x40 [ 412.329169][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 412.335146][ C1] jump_label_update+0x376/0x550 [ 412.340075][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 412.345959][ C1] static_key_enable+0x1a/0x20 [ 412.350709][ C1] toggle_allocation_gate+0xfa/0x280 [ 412.355987][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 412.361871][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.366631][ C1] process_one_work+0x9cf/0x1b70 [ 412.371567][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 412.377714][ C1] ? __pfx_process_one_work+0x10/0x10 [ 412.383085][ C1] ? assign_work+0x1a0/0x250 [ 412.387667][ C1] worker_thread+0x6c8/0xf10 [ 412.392258][ C1] ? __pfx_worker_thread+0x10/0x10 [ 412.397359][ C1] kthread+0x3c2/0x780 [ 412.401419][ C1] ? __pfx_kthread+0x10/0x10 [ 412.405997][ C1] ? __pfx_kthread+0x10/0x10 [ 412.410573][ C1] ? __pfx_kthread+0x10/0x10 [ 412.415152][ C1] ? __pfx_kthread+0x10/0x10 [ 412.419733][ C1] ? rcu_is_watching+0x12/0xc0 [ 412.424495][ C1] ? __pfx_kthread+0x10/0x10 [ 412.429074][ C1] ret_from_fork+0x45/0x80 [ 412.433481][ C1] ? __pfx_kthread+0x10/0x10 [ 412.438059][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.442832][ C1]