last executing test programs: 9.154666025s ago: executing program 2 (id=275): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r3 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x406, r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.883285401s ago: executing program 3 (id=276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x400d0}, 0xc040) 8.8829583s ago: executing program 2 (id=277): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc0984124, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) 8.866284245s ago: executing program 3 (id=278): socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) socket$key(0xf, 0x3, 0x2) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) 8.846242387s ago: executing program 2 (id=279): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d701020303090212"], 0x0) 8.464088912s ago: executing program 0 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(0x0, 0x8000000000000000, 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x1000) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd700a58c57e529480740008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 8.314758621s ago: executing program 0 (id=281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x88, 0x20, 0xffdffffd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x6, 0x227, 0x5, 0x8000}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe0040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd55000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7837, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2caa, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x40000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x578, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) 7.944350436s ago: executing program 0 (id=282): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000500)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x0, 0x0, 0x1}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, r5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x74a2, 0x4, 0x12, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c7}, 0x40) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) 6.006155059s ago: executing program 3 (id=285): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x40004) 5.339795806s ago: executing program 3 (id=288): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (fail_nth: 1) 5.110847036s ago: executing program 2 (id=289): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a100000"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, 0x0, 0x8942, 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x4, r3, &(0x7f0000000880)="58ec41974751846de534260b896b0427327f3826e4d1f260f13c4e29f3f44a8b093bb03672bab315e6b50c9a5d818286cfc40f723c0a30bbe31f2ec8065819afad9b6293e96a96e4678f5900f8987c6288b89cbd5653acdaa10c6f41398e20675b9c37b1b47258ecc6a599c8331e155d2cabeecfb859f50df44fa0461def4be42ce0ebef8fda07465bb530b33f188b4ce4ba6116041383b18b6edd4ed9279d22202e6df02e2f2bd591f8ede88a823aa7646b7aabca9471c45bdac610f8b5871cd398ed567a493c30feadb36c601c3fb844fe5d8ca2b6b50e4679ab7c66875f1790075bbeee", 0xe5, 0x8, 0x0, 0x2, r5}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r5}, 0x4) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read(r1, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000500)="48000000140081fb7059ae08060c040002ff0f03900000000000000400006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ed:cb2e') setuid(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) 5.11044611s ago: executing program 4 (id=290): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x2, 0x0, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x700, 0xffff, 0x5}}) sendto$packet(r0, &(0x7f0000000040)="1682714242fa1e5fb5648cfc6a4136bae859f708fdcb2157be8043c9f025806037e406c98bb37409bb427fe1d7ef83875871124f64b23a10606a975c0218ff733ce57d5f8097f27944be67d0253a982eb56a85438350cf690dfbb72403bcd53ec5fc701885c0933adf2cb337c07a17b98944eda3677b5f8075165d9576412cc6f74d2b008519b7a6417de3b57e7f8c81d55f53063d3d29f751af93523a3c191c9a4b7ae33113", 0xa6, 0x0, &(0x7f00000001c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000200)=""/31) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0x9, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4040) shutdown(r0, 0x0) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r4, &(0x7f0000000540)='\x00', 0x5) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000580)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000005c0)={0x102fe, 0x0, 0x2000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$P9_ROPEN(r0, &(0x7f0000000600)={0x18, 0x71, 0x1, {{0x20, 0x4, 0x3}, 0x1}}, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000640)={'pimreg1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x200}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={r5, 0x54f}, &(0x7f0000000740)=0x8) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '-@.!@/,]@\xf6)}'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '$'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8014) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000008c0)={0x1, 0x6b5a8a2}, 0x8) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x3f) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000900)={0xfc, 0x3, 0x800, 0x8, "f2cd67f7b7a73fda3232e7acffd84a2dbdfe10d14e7da1a5248171833d91b6dcc9e4670f31dfc8783ef92fa784a8e21160699baa87e18a783076eb8ca707cdaada5f0e27895b9cae5316d932377ae1989d7aa71e0962d767690b6add494e2290b9f3beb5347a1fcfd0c71c686f1281f4b46338f30ac789d84bec49456aa048c972075dc9c2422d8078e046216513c370542e4647d1987b1c54570d9d64ceee603a9b4c056caeff6a052805a4fca03e80259a33250e275fcaeb8888a1a463d7eb107356d5d95270f3a18eb03521479bfbfda8113f3e0b5d8240d20b0888cfb0097f69bc3f"}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000004b80)=[{0x1, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/55, 0x37}], &(0x7f0000000a80)=[0x1, 0x0, 0x101, 0xb5, 0x97, 0x200, 0x8, 0x5]}, {0x4, 0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)=""/124, 0x7c}, {&(0x7f0000000b40)=""/166, 0xa6}, {&(0x7f0000000c00)=""/42, 0x2a}, {&(0x7f0000000c40)=""/132, 0x84}], &(0x7f0000000d40)=[0x9, 0x2, 0x2, 0x0, 0x6, 0x3, 0x4cf]}, {0x3, 0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/136, 0x88}, {&(0x7f0000000e40)=""/109, 0x6d}, {&(0x7f0000000ec0)=""/139, 0x8b}], &(0x7f0000000fc0)=[0x7, 0x100]}, {0x7, 0x1, 0x0, &(0x7f0000001480)=[{&(0x7f0000001000)=""/68, 0x44}, {&(0x7f0000001080)=""/14, 0xe}, {&(0x7f00000010c0)=""/252, 0xfc}, {&(0x7f00000011c0)=""/243, 0xf3}, {&(0x7f00000012c0)=""/132, 0x84}, {&(0x7f0000001380)=""/170, 0xaa}, {&(0x7f0000001440)=""/9, 0x9}], &(0x7f0000001500)=[0x2, 0xffff, 0x0, 0x6e7, 0x8]}, {0x2, 0x1, 0x0, &(0x7f0000001640)=[{&(0x7f0000001540)=""/47, 0x2f}, {&(0x7f0000001580)=""/150, 0x96}], &(0x7f0000001680)=[0x74da, 0x0, 0x8, 0x76, 0x72a, 0x0, 0x7fffffff, 0xc, 0xfef6]}, {0x5, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001700)=""/215, 0xd7}, {&(0x7f0000001800)=""/160, 0xa0}, {&(0x7f00000018c0)=""/202, 0xca}, {&(0x7f00000019c0)=""/165, 0xa5}, {&(0x7f0000001a80)=""/211, 0xd3}], &(0x7f0000001c00)=[0xa5]}, {0x6, 0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/186, 0xba}, {&(0x7f0000002d00)=""/6, 0x6}, {&(0x7f0000002d40)=""/46, 0x2e}, {&(0x7f0000002d80)=""/192, 0xc0}, {&(0x7f0000002e40)=""/198, 0xc6}], &(0x7f0000002fc0)=[0x8, 0xc, 0x9, 0xffffffff80000001]}, {0x7, 0x1, 0x0, &(0x7f0000003580)=[{&(0x7f0000003000)=""/231, 0xe7}, {&(0x7f0000003100)=""/196, 0xc4}, {&(0x7f0000003200)=""/101, 0x65}, {&(0x7f0000003280)=""/9, 0x9}, {&(0x7f00000032c0)=""/160, 0xa0}, {&(0x7f0000003380)=""/233, 0xe9}, {&(0x7f0000003480)=""/198, 0xc6}], &(0x7f0000003600)=[0x44b8f85, 0x2, 0x1, 0x40]}, {0x4, 0x1, 0x0, &(0x7f0000004940)=[{&(0x7f0000003640)=""/211, 0xd3}, {&(0x7f0000003740)=""/229, 0xe5}, {&(0x7f0000003840)=""/243, 0xf3}, {&(0x7f0000003940)=""/4096, 0x1000}], &(0x7f0000004980)=[0x5, 0x0, 0x7fff, 0xfffffffffffff800, 0x9]}, {0x3, 0x1, 0x0, &(0x7f0000004b00)=[{&(0x7f00000049c0)=""/56, 0x38}, {&(0x7f0000004a00)=""/101, 0x65}, {&(0x7f0000004a80)=""/105, 0x69}], &(0x7f0000004b40)=[0x0, 0x8, 0x6af, 0x4, 0x6, 0x725356a1, 0x80000000, 0xffffffff]}], 0xa) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0x6611) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000004dc0)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d00)={0x68, 0x0, 0x404, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000004e00)={r7}) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000004fc0)={&(0x7f0000004e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f00)={0x7c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4014) 4.988018211s ago: executing program 1 (id=291): socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtclass={0x4b8, 0x28, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xf, 0xfff1}, {0x2, 0x6}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x448, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x1, 0x9, 0x5, 0x5, 0xffffff01}, {0x2, 0x2, 0xff81, 0x6, 0x8, 0xa}, 0xfffffffa, 0x8002, 0xfffffffb, 0x8000, 0x7}}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x80000001, 0xb, 0xd, 0xe3f, 0x1, 0x6, 0xd, 0x80000000, 0x714f5885, 0x9, 0x6, 0xe, 0x3f, 0x5, 0x4, 0x0, 0x1, 0x2, 0x2, 0x1, 0x8, 0x8, 0x3, 0x3, 0x157522b6, 0x80000000, 0x140, 0x8000200, 0xffff, 0x6a57, 0xbfbc, 0x2, 0x7, 0x10000, 0xfffffffc, 0x6, 0x4, 0x6, 0x0, 0x1, 0x6, 0x0, 0x9, 0x8, 0x8001, 0x7fffffff, 0x27ff, 0x0, 0x6, 0x2, 0xffffff00, 0x2, 0xda, 0x8, 0xfff, 0x8, 0x9, 0xffffff80, 0x9, 0x800, 0x0, 0x596, 0xd, 0x5, 0x5, 0x3, 0x61, 0x9, 0x5, 0x35, 0x3, 0x401, 0x9, 0x0, 0x401, 0x6, 0x7, 0x8, 0x2, 0xa, 0xa6e, 0x1, 0x3, 0xdc, 0x5, 0x7, 0x40, 0x5, 0x2, 0x7fff, 0x2, 0x5, 0x1, 0x80000001, 0x1, 0x4, 0x3623, 0xffffffff, 0xe0000000, 0x94a, 0x7ff, 0xffff, 0xe, 0x9, 0xfffff71a, 0x800, 0x6, 0x6, 0x80000001, 0x2, 0x7, 0x4d, 0x0, 0x11, 0x3, 0xffff, 0x2, 0x10001, 0x200, 0xffffbd14, 0xfffffffb, 0x2, 0x54a6, 0xd932, 0x7, 0x40, 0x17d, 0x3, 0x3, 0x6, 0x1, 0x9, 0x1, 0xe80, 0x9, 0xa, 0x9, 0x2, 0x0, 0x5830, 0x9, 0xacfc, 0x4, 0x80, 0x9, 0x7, 0x0, 0x2c8735a9, 0x80000001, 0x4, 0x23d, 0x4d4, 0x8, 0x1, 0xd, 0x7, 0x800, 0xfffeffff, 0x400, 0x1, 0xd04, 0x5, 0x100, 0x2, 0xfffff276, 0xb6, 0x2, 0x7ff, 0x7, 0x5, 0xb7f, 0xc0000000, 0x5, 0x3, 0x3, 0x2, 0x5, 0x3, 0xffff9c4f, 0xe8dd, 0x100, 0x8, 0x5a0, 0x5, 0x401, 0x3, 0x80000001, 0xa, 0xb443, 0x400, 0x3, 0xb, 0x0, 0x9, 0x80, 0x7, 0x3ff, 0xfff, 0xd, 0x6, 0x5, 0x4, 0x5533, 0x4, 0x2, 0x0, 0x401000, 0x2, 0x2, 0x8, 0x0, 0x0, 0x8, 0x6, 0x6335, 0x80, 0x6e, 0x4, 0x1, 0xffffffff, 0x8, 0x6, 0x40, 0x0, 0x4, 0x9, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x9, 0x8001, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7f, 0x1, 0x7f, 0xd9, 0x2, 0x4, 0x1000, 0x6, 0x4, 0x2, 0x1c, 0x80000001, 0xbc0, 0x6, 0x1ff, 0xe, 0x0, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xe7, 0x1}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_taprio={0xb}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x854}, 0x400c0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = gettid() tkill(r4, 0xb) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setreuid(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa, 0x10, r0, 0xe79a6000) capset(0x0, &(0x7f0000000080)) 4.857020968s ago: executing program 3 (id=292): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="827d", 0x2}], 0x1}}], 0x1, 0x4400c800) sendmmsg$inet6(r0, 0x0, 0x0, 0xc800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 4.454755871s ago: executing program 0 (id=293): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r6, 0x0, 0x106f) 4.349863908s ago: executing program 4 (id=294): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES32=r2, @ANYRES64=0x0, @ANYRESOCT=r3, @ANYRES32=r2, @ANYRES16=r3], 0x20000600}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x7, 0x10, 0x9, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x401}, {0x4000000000000004, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x6e6bb2, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x0, 0x3, 0x2, 0x4, 0x7, 0x5, 0x1}}, 0xe8) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 4.17340962s ago: executing program 3 (id=295): socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) socket$key(0xf, 0x3, 0x2) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'rwm\x00'}, 0xa) 3.438462304s ago: executing program 1 (id=296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f00000006c0)=@sco, 0x80, &(0x7f0000000740)=[{&(0x7f0000001e80)="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", 0x1000}], 0x1, &(0x7f0000000780)}, 0x80) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000007c0)}, {&(0x7f0000001400)="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", 0x90b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506", 0x2}], 0x1}}], 0x3, 0x11) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c0000000000000000000000000000000000000000000000001800000000000000290000000400000000000000000000000801"], 0x180}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.280195099s ago: executing program 0 (id=297): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000200)='^', 0x1, 0x20008010, &(0x7f0000004ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xec}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1002}}) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x100, {0x0, 0x10, 0x0, '\x00', {0x7ff, 0x7, 0x84, 0x2, r3, 0xffffffffffffffff, 0x0, '\x00', 0x1, 0x80000002, 0xb4e7, 0x2, {0x80000008103, 0x8}, {0x8, 0x10001}, {0xffffffff, 0x3e}, {0x9, 0xa82}, 0x8000, 0xb, 0x4, 0x5}}}}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=unix,', {[{@cache_fscache}, {@cache_none}], [{@uid_lt={'uid<', r3}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@appraise}, {@obj_user}, {@obj_user}]}}) 3.227656746s ago: executing program 4 (id=298): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x40004) 3.140910295s ago: executing program 1 (id=299): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="c7a33173d86b27dde42034283e10c4ff10b35bfc2da6b41e1a6238044f7d41f88297c3ed71b139", 0x27}], 0x1, 0x0, 0x30}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="9115463ecc790180c20000030806000108000604"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (fail_nth: 1) 2.998843762s ago: executing program 4 (id=300): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x42, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0xc]}}}}]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x5a, 0x2, 0x0, 0x99, @empty, @mcast1, 0x8, 0x8000, 0x8, 0x4}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x5c, 0x49, 0x200, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r2, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x5c}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) 2.522937176s ago: executing program 1 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000101010101010000080026006c0900000f0024"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.432228273s ago: executing program 1 (id=302): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x18010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000780)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, &(0x7f0000000080)) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], &(0x7f0000000500)=""/177, 0x64, 0xb1, 0x0, 0x6, 0x10000, @value=r3}, 0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(r1, &(0x7f0000000700)="33031600fd10004b1f000000000000000000000000000000810000000000", 0xb0eb381251b8400d, 0x2000c09d, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f00000003c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000400)='GPL\x00', 0x717, 0x26, &(0x7f0000000480)=""/38, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)=[{0x0, 0x4, 0xa}, {0x3, 0x3, 0x6, 0x1}], 0x10, 0xfffffffd}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.390600503s ago: executing program 0 (id=303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r4 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001f00)=[{{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000001800)=[{&(0x7f0000001fc0)=""/180, 0xb4}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000540)}, {&(0x7f0000000580)}, {&(0x7f0000001780)=""/83, 0x53}], 0x5, &(0x7f0000000640)=""/42, 0x2a}, 0x2}, {{&(0x7f0000001880)=@caif=@dbg, 0x80, &(0x7f0000001900)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=""/151, 0x97}, 0x6}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001a80)=""/52, 0x34}, {&(0x7f0000001ac0)=""/223, 0xdf}, {&(0x7f0000001bc0)=""/87, 0x57}, {&(0x7f0000001c40)=""/8, 0x8}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/69, 0x45}], 0x7, &(0x7f0000001e00)=""/216, 0xd8}, 0x8}], 0x3, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r7}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r8, 0x6f) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r9}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r10, 0x0, r11, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040), 0x0) 2.313242512s ago: executing program 4 (id=304): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2}}}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x48000) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xa8, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf440}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xf050}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r9 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r9, &(0x7f0000000300)={0x800, 0x0, 0x1}, 0x0) 2.014293055s ago: executing program 2 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) socket$isdn(0x22, 0x3, 0x3) ioctl$I2C_TIMEOUT(r0, 0x702, 0x66a0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) inotify_init() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180080ff0000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) unshare(0x72040e80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) unshare(0x6a040000) 385.839037ms ago: executing program 4 (id=306): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 238.744653ms ago: executing program 2 (id=307): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0xc0045007, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/168, 0xa8}], 0x3, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x103, 0x528ec475) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000060102000300000064bb68d50ed68f72e43442b2474a00000000000200ffff270002dd00"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x55) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0300600d698cff9e14f08edd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) syz_usb_connect(0x5, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f000000400000090507"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=308): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878", 0xc4}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 57.091148][ T30] audit: type=1400 audit(1759702397.844:62): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.114565][ T30] audit: type=1400 audit(1759702397.874:63): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.117015][ T5811] cgroup: Unknown subsys name 'net' [ 57.144859][ T30] audit: type=1400 audit(1759702397.904:64): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.296620][ T5811] cgroup: Unknown subsys name 'cpuset' [ 57.304681][ T5811] cgroup: Unknown subsys name 'rlimit' [ 57.469775][ T30] audit: type=1400 audit(1759702398.224:65): avc: denied { setattr } for pid=5811 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.493730][ T30] audit: type=1400 audit(1759702398.224:66): avc: denied { create } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.518041][ T30] audit: type=1400 audit(1759702398.224:67): avc: denied { write } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.547614][ T30] audit: type=1400 audit(1759702398.224:68): avc: denied { read } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.567935][ T30] audit: type=1400 audit(1759702398.254:69): avc: denied { mounton } for pid=5811 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 57.592993][ T30] audit: type=1400 audit(1759702398.254:70): avc: denied { mount } for pid=5811 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 57.614850][ T5813] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 57.616322][ T30] audit: type=1400 audit(1759702398.294:71): avc: denied { read } for pid=5493 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.614033][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.792676][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.806674][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.815342][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.823532][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.826915][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.831042][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.838176][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.845581][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.852612][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.859258][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.867195][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.874658][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.881555][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.893549][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.902050][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.905069][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.909804][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.923202][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.931438][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.931493][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.938990][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.946380][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.953905][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.960755][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.968614][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.371505][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 61.382808][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 61.500831][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 61.556215][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.563305][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.570890][ T5821] bridge_slave_0: entered allmulticast mode [ 61.577849][ T5821] bridge_slave_0: entered promiscuous mode [ 61.592006][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.599168][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.606357][ T5821] bridge_slave_1: entered allmulticast mode [ 61.613349][ T5821] bridge_slave_1: entered promiscuous mode [ 61.660278][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.667661][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.674802][ T5833] bridge_slave_0: entered allmulticast mode [ 61.681403][ T5833] bridge_slave_0: entered promiscuous mode [ 61.723743][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.730991][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.738420][ T5833] bridge_slave_1: entered allmulticast mode [ 61.746262][ T5833] bridge_slave_1: entered promiscuous mode [ 61.763569][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.803775][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.813175][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 61.828503][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.872519][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.896451][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 61.917175][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.924428][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.931516][ T5827] bridge_slave_0: entered allmulticast mode [ 61.938353][ T5827] bridge_slave_0: entered promiscuous mode [ 61.946365][ T5821] team0: Port device team_slave_0 added [ 61.952197][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.959769][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.966918][ T5827] bridge_slave_1: entered allmulticast mode [ 61.973822][ T5827] bridge_slave_1: entered promiscuous mode [ 61.995319][ T5821] team0: Port device team_slave_1 added [ 62.002141][ T5833] team0: Port device team_slave_0 added [ 62.035155][ T5833] team0: Port device team_slave_1 added [ 62.057482][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.093369][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.117255][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.124688][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.150826][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.173445][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.180787][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.188053][ T5824] bridge_slave_0: entered allmulticast mode [ 62.195190][ T5824] bridge_slave_0: entered promiscuous mode [ 62.202673][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.209820][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.235746][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.247122][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.254053][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.280212][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.301500][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.309034][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.316226][ T5824] bridge_slave_1: entered allmulticast mode [ 62.322878][ T5824] bridge_slave_1: entered promiscuous mode [ 62.329940][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.336904][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.362899][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.391826][ T5827] team0: Port device team_slave_0 added [ 62.432224][ T5827] team0: Port device team_slave_1 added [ 62.447539][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.461144][ T5833] hsr_slave_0: entered promiscuous mode [ 62.467953][ T5833] hsr_slave_1: entered promiscuous mode [ 62.474361][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.481423][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.489226][ T5837] bridge_slave_0: entered allmulticast mode [ 62.496328][ T5837] bridge_slave_0: entered promiscuous mode [ 62.503640][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.510800][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.518183][ T5837] bridge_slave_1: entered allmulticast mode [ 62.525821][ T5837] bridge_slave_1: entered promiscuous mode [ 62.540624][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.599259][ T5821] hsr_slave_0: entered promiscuous mode [ 62.605622][ T5821] hsr_slave_1: entered promiscuous mode [ 62.611498][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 62.617484][ T5821] Cannot create hsr debugfs directory [ 62.630600][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.637960][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.664002][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.682862][ T5824] team0: Port device team_slave_0 added [ 62.690356][ T5824] team0: Port device team_slave_1 added [ 62.697820][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.707885][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.714844][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.740882][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.773302][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.829877][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.837039][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.863204][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.875242][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.882170][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.908276][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.920167][ T5837] team0: Port device team_slave_0 added [ 62.956868][ T5837] team0: Port device team_slave_1 added [ 62.966666][ T5827] hsr_slave_0: entered promiscuous mode [ 62.973553][ T5827] hsr_slave_1: entered promiscuous mode [ 62.979954][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 62.986548][ T5827] Cannot create hsr debugfs directory [ 63.041287][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.048628][ T5149] Bluetooth: hci0: command tx timeout [ 63.048632][ T5834] Bluetooth: hci1: command tx timeout [ 63.048837][ T5834] Bluetooth: hci4: command tx timeout [ 63.055051][ T5842] Bluetooth: hci3: command tx timeout [ 63.060349][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.065740][ T5825] Bluetooth: hci2: command tx timeout [ 63.070607][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.133704][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.140749][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.166915][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.206768][ T5824] hsr_slave_0: entered promiscuous mode [ 63.212901][ T5824] hsr_slave_1: entered promiscuous mode [ 63.219024][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 63.224772][ T5824] Cannot create hsr debugfs directory [ 63.309426][ T5837] hsr_slave_0: entered promiscuous mode [ 63.315869][ T5837] hsr_slave_1: entered promiscuous mode [ 63.321816][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 63.327687][ T5837] Cannot create hsr debugfs directory [ 63.438900][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.468958][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.491166][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.503030][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.575020][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.602195][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.611512][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.633081][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.683771][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.698876][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.709462][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.719064][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.850624][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.860548][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.872386][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.882861][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.894056][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.912121][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.946197][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.972832][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.980029][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.995012][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.016873][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.029034][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.038831][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.045956][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.054602][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.061656][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.072528][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.079627][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.096312][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.103111][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.113040][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.162391][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.186506][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.193590][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.206522][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.213595][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.309143][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 64.309158][ T30] audit: type=1400 audit(1759702405.064:86): avc: denied { sys_module } for pid=5833 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.389533][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.433840][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.449529][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.503354][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.545653][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.552786][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.563688][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.570817][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.597667][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.617391][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.629015][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.636172][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.646588][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.653722][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.710561][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.759362][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.815807][ T5833] veth0_vlan: entered promiscuous mode [ 64.841808][ T5827] veth0_vlan: entered promiscuous mode [ 64.877792][ T5833] veth1_vlan: entered promiscuous mode [ 64.907684][ T5827] veth1_vlan: entered promiscuous mode [ 64.922735][ T5821] veth0_vlan: entered promiscuous mode [ 64.968653][ T5821] veth1_vlan: entered promiscuous mode [ 65.031043][ T5833] veth0_macvtap: entered promiscuous mode [ 65.041007][ T5827] veth0_macvtap: entered promiscuous mode [ 65.057520][ T5833] veth1_macvtap: entered promiscuous mode [ 65.066354][ T5827] veth1_macvtap: entered promiscuous mode [ 65.077391][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.109441][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.117729][ T5821] veth0_macvtap: entered promiscuous mode [ 65.128258][ T5842] Bluetooth: hci3: command tx timeout [ 65.128271][ T5834] Bluetooth: hci0: command tx timeout [ 65.133652][ T5842] Bluetooth: hci1: command tx timeout [ 65.139131][ T5838] Bluetooth: hci4: command tx timeout [ 65.146549][ T5821] veth1_macvtap: entered promiscuous mode [ 65.152044][ T5825] Bluetooth: hci2: command tx timeout [ 65.178752][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.189905][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.227500][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.241600][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.252828][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.271935][ T5824] veth0_vlan: entered promiscuous mode [ 65.293876][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.306455][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.329086][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.338981][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.373291][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386592][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.397011][ T5824] veth1_vlan: entered promiscuous mode [ 65.433577][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.442399][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.469189][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478194][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.503657][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.512505][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.546744][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.589101][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.597911][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.600551][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.623277][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.647353][ T5824] veth0_macvtap: entered promiscuous mode [ 65.672028][ T5837] veth0_vlan: entered promiscuous mode [ 65.696501][ T5824] veth1_macvtap: entered promiscuous mode [ 65.706583][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.706996][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.731146][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.734596][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.762304][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.770005][ T30] audit: type=1400 audit(1759702406.514:87): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.fzTC4i/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 65.786051][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.819094][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.821698][ T5837] veth1_vlan: entered promiscuous mode [ 65.839973][ T30] audit: type=1400 audit(1759702406.514:88): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.862880][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.867581][ T30] audit: type=1400 audit(1759702406.514:89): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.fzTC4i/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.874940][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.897282][ T30] audit: type=1400 audit(1759702406.514:90): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 65.931797][ T1022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.941039][ T30] audit: type=1400 audit(1759702406.514:91): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.fzTC4i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.963657][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.989878][ T30] audit: type=1400 audit(1759702406.514:92): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.fzTC4i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.025744][ T1022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.043217][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.049494][ T30] audit: type=1400 audit(1759702406.514:93): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.064459][ T1022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.090795][ T30] audit: type=1400 audit(1759702406.534:94): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.118328][ T30] audit: type=1400 audit(1759702406.534:95): avc: denied { mount } for pid=5827 comm="syz-executor" name="/" dev="gadgetfs" ino=8541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.232619][ T5837] veth0_macvtap: entered promiscuous mode [ 66.252186][ T1022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.282383][ T5837] veth1_macvtap: entered promiscuous mode [ 66.843254][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.892588][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.204448][ T5825] Bluetooth: hci0: command tx timeout [ 67.210210][ T5149] Bluetooth: hci3: command tx timeout [ 67.215759][ T5149] Bluetooth: hci2: command tx timeout [ 67.222150][ T5842] Bluetooth: hci4: command tx timeout [ 67.227718][ T5825] Bluetooth: hci1: command tx timeout [ 67.334781][ T5951] syzkaller0: entered promiscuous mode [ 67.340703][ T5951] syzkaller0: entered allmulticast mode [ 67.357455][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.366330][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.380412][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.410314][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.473240][ T1022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.508143][ T1022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.520268][ T1022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.533134][ T5958] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 67.572653][ T5958] bond1: entered promiscuous mode [ 67.578658][ T5958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.586362][ T1022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.604909][ T5831] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 67.658954][ T5960] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.799198][ T5831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.848771][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.906016][ T5831] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 67.940714][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.959156][ T5831] usb 4-1: SerialNumber: syz [ 67.971315][ T5973] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 67.997922][ T5831] usb 4-1: 0:2 : does not exist [ 68.013637][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.027878][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.087488][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.096348][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.260958][ T5979] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 68.269678][ T5831] usb 4-1: USB disconnect, device number 2 [ 68.283255][ T5979] bond1: entered promiscuous mode [ 68.289633][ T5979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.344304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.353673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.434380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.449787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.514416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.552226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.654740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.844652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.859570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.859770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.234397][ T5988] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 69.286581][ T5838] Bluetooth: hci1: command tx timeout [ 69.286595][ T5825] Bluetooth: hci4: command tx timeout [ 69.286628][ T5825] Bluetooth: hci2: command tx timeout [ 69.302890][ T5842] Bluetooth: hci3: command tx timeout [ 69.498747][ T5988] bond1: entered promiscuous mode [ 69.526856][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 69.536289][ T5988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.548027][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 69.600515][ T6005] netlink: 'syz.2.18': attribute type 21 has an invalid length. [ 69.609346][ T6005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18'. [ 69.705948][ T6003] tipc: Started in network mode [ 69.712152][ T6003] tipc: Node identity 3a598ea709e9, cluster identity 4711 [ 69.721812][ T6003] tipc: Enabled bearer , priority 0 [ 69.731757][ T5995] overlayfs: failed lookup in lower (newroot/4, name='bus', err=-40): overlapping layers [ 69.752746][ T6005] netlink: 'syz.2.18': attribute type 5 has an invalid length. [ 69.770790][ T6005] netlink: 'syz.2.18': attribute type 6 has an invalid length. [ 69.804751][ T6005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18'. [ 69.868896][ T5994] tipc: Resetting bearer [ 69.887132][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 69.887150][ T30] audit: type=1400 audit(1759702410.644:147): avc: denied { open } for pid=6013 comm="syz.4.20" path="/dev/ptyqd" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 70.204664][ T30] audit: type=1400 audit(1759702410.844:148): avc: denied { create } for pid=6013 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.417469][ T30] audit: type=1400 audit(1759702411.044:149): avc: denied { read } for pid=6018 comm="syz.1.21" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.422344][ T6009] syzkaller0: entered promiscuous mode [ 70.455240][ T30] audit: type=1400 audit(1759702411.044:150): avc: denied { open } for pid=6018 comm="syz.1.21" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.518328][ T30] audit: type=1400 audit(1759702411.264:151): avc: denied { getopt } for pid=6018 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.544292][ T30] audit: type=1400 audit(1759702411.264:152): avc: denied { ioctl } for pid=6018 comm="syz.1.21" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8895 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 70.634232][ T6009] syzkaller0: entered allmulticast mode [ 70.685348][ T5993] tipc: Resetting bearer [ 70.707191][ T5993] tipc: Disabling bearer [ 71.005840][ T30] audit: type=1400 audit(1759702411.674:153): avc: denied { create } for pid=6021 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 71.014721][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.032206][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.589219][ T30] audit: type=1400 audit(1759702411.674:154): avc: denied { write } for pid=6021 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.725441][ T30] audit: type=1400 audit(1759702412.484:155): avc: denied { ioctl } for pid=6025 comm="syz.1.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 72.068343][ T6038] tipc: Started in network mode [ 72.073941][ T6038] tipc: Node identity 1a1ce256b481, cluster identity 4711 [ 72.081738][ T6038] tipc: Enabled bearer , priority 0 [ 72.184734][ T30] audit: type=1400 audit(1759702412.934:156): avc: denied { block_suspend } for pid=6029 comm="syz.1.26" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.207747][ T6038] Zero length message leads to an empty skb [ 72.214266][ T6038] syzkaller0: entered promiscuous mode [ 72.219879][ T6038] syzkaller0: entered allmulticast mode [ 72.233559][ T6038] tipc: Resetting bearer [ 72.256996][ T6037] tipc: Resetting bearer [ 72.285318][ T6037] tipc: Disabling bearer [ 72.331054][ T6030] random: crng reseeded on system resumption [ 72.671398][ T6044] input: syz1 as /devices/virtual/input/input5 [ 73.355263][ T6060] tipc: Cannot configure node identity twice [ 74.297277][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 74.826938][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 75.468948][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 75.468962][ T30] audit: type=1326 audit(1759702416.224:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6095 comm="syz.0.42" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff23bd8eec9 code=0x0 [ 75.519534][ T30] audit: type=1400 audit(1759702416.274:187): avc: denied { create } for pid=6095 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.246098][ T30] audit: type=1400 audit(1759702417.004:188): avc: denied { ioctl } for pid=6106 comm="syz.3.45" path="socket:[9165]" dev="sockfs" ino=9165 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.362177][ T30] audit: type=1400 audit(1759702417.044:189): avc: denied { bind } for pid=6106 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.789193][ T6116] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 76.850459][ T6116] bond2: entered promiscuous mode [ 76.884533][ T6116] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.343953][ T6118] overlayfs: failed lookup in lower (newroot/5, name='bus', err=-40): overlapping layers [ 78.684572][ T6126] tipc: Enabled bearer , priority 0 [ 78.717778][ T6126] syzkaller0: entered promiscuous mode [ 78.723326][ T6126] syzkaller0: entered allmulticast mode [ 78.805060][ T6125] tipc: Resetting bearer [ 78.817317][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.46'. [ 78.838422][ T6125] tipc: Disabling bearer [ 78.845915][ T30] audit: type=1400 audit(1759702419.604:190): avc: denied { mounton } for pid=6108 comm="syz.1.46" path="/13/bus" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.889940][ T30] audit: type=1400 audit(1759702419.634:191): avc: denied { create } for pid=6129 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.920667][ T30] audit: type=1400 audit(1759702419.644:192): avc: denied { connect } for pid=6129 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.989946][ T6133] syz.4.52 uses obsolete (PF_INET,SOCK_PACKET) [ 79.015862][ T6133] syzkaller1: entered promiscuous mode [ 79.021452][ T6133] syzkaller1: entered allmulticast mode [ 79.068026][ T6133] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 79.129059][ T6135] syz.1.53 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.593112][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.53'. [ 79.760710][ T6153] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 80.063518][ T6153] bond1: entered promiscuous mode [ 80.085126][ T6153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.120179][ T6148] tipc: Enabled bearer , priority 0 [ 80.229596][ T6160] syzkaller0: entered promiscuous mode [ 80.273085][ T6160] syzkaller0: entered allmulticast mode [ 80.359133][ T6152] tipc: Resetting bearer [ 80.369296][ T30] audit: type=1400 audit(1759702421.124:193): avc: denied { create } for pid=6168 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.392640][ T30] audit: type=1400 audit(1759702421.124:194): avc: denied { connect } for pid=6168 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.515678][ T6147] tipc: Resetting bearer [ 80.548780][ T6147] tipc: Disabling bearer [ 80.711143][ T30] audit: type=1400 audit(1759702421.464:195): avc: denied { ioctl } for pid=6168 comm="syz.4.62" path="socket:[9321]" dev="sockfs" ino=9321 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 81.807327][ T1623] cfg80211: failed to load regulatory.db [ 82.688503][ T30] audit: type=1400 audit(1759702423.444:196): avc: denied { listen } for pid=6190 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 82.869981][ T30] audit: type=1400 audit(1759702423.444:197): avc: denied { read } for pid=6190 comm="syz.3.70" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.004357][ T30] audit: type=1400 audit(1759702423.444:198): avc: denied { open } for pid=6190 comm="syz.3.70" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.044438][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.064405][ T30] audit: type=1400 audit(1759702423.524:199): avc: denied { ioctl } for pid=6190 comm="syz.3.70" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 83.166473][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.73'. [ 83.424180][ T10] usb 4-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 83.584429][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 83.613348][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'. [ 83.660368][ T10] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.693608][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.713780][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.747981][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.774469][ T10] usb 4-1: invalid MIDI out EP 0 [ 83.885256][ T10] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 84.652760][ T6227] syz.1.80 (6227): attempted to duplicate a private mapping with mremap. This is not supported. [ 84.696138][ T6229] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 84.794220][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.112724][ T6229] bond1: entered promiscuous mode [ 85.144816][ T6229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.151540][ T30] audit: type=1400 audit(1759702425.884:200): avc: denied { read } for pid=6235 comm="syz.1.83" path="socket:[9603]" dev="sockfs" ino=9603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.182080][ T10] usb 3-1: device descriptor read/64, error -71 [ 85.202545][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.83'. [ 85.212222][ T30] audit: type=1326 audit(1759702425.894:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.83" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5404f8eec9 code=0x0 [ 85.272670][ T6234] overlayfs: failed lookup in lower (newroot/17, name='bus', err=-40): overlapping layers [ 85.526266][ T30] audit: type=1400 audit(1759702426.284:202): avc: denied { read write } for pid=6239 comm="syz.4.84" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.574617][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.593316][ T6240] ALSA: mixer_oss: invalid OSS volume '' [ 85.602405][ T30] audit: type=1400 audit(1759702426.314:203): avc: denied { open } for pid=6239 comm="syz.4.84" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.877950][ T10] usb 3-1: device descriptor read/64, error -71 [ 85.915067][ T30] audit: type=1400 audit(1759702426.444:204): avc: denied { create } for pid=6239 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.994511][ T10] usb usb3-port1: attempt power cycle [ 86.003006][ T6245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.86'. [ 86.017071][ T6246] capability: warning: `syz.0.85' uses deprecated v2 capabilities in a way that may be insecure [ 86.058204][ T30] audit: type=1400 audit(1759702426.814:205): avc: denied { execute } for pid=6243 comm="syz.0.85" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=10480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.239496][ T30] audit: type=1400 audit(1759702426.974:206): avc: denied { append } for pid=6247 comm="syz.4.88" name="video37" dev="devtmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.374229][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.731702][ T10] usb 3-1: device descriptor read/8, error -71 [ 87.092380][ T6266] netlink: 1120 bytes leftover after parsing attributes in process `syz.0.90'. [ 87.166889][ T6266] netlink: 1120 bytes leftover after parsing attributes in process `syz.0.90'. [ 87.187199][ T6263] program syz.4.92 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.236391][ T5823] usb 4-1: USB disconnect, device number 3 [ 87.244944][ T30] audit: type=1400 audit(1759702427.944:207): avc: denied { append } for pid=6260 comm="syz.4.92" name="sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.764953][ T30] audit: type=1400 audit(1759702427.944:208): avc: denied { open } for pid=6260 comm="syz.4.92" path="/dev/sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.811549][ T6200] delete_channel: no stack [ 87.819874][ T30] audit: type=1400 audit(1759702428.574:209): avc: denied { write } for pid=6261 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.038404][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.064192][ T6289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 89.334498][ T5823] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 89.779180][ T5823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.120126][ T5823] usb 3-1: config 0 has no interface number 0 [ 90.127040][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.318117][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 90.330619][ T5823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.341926][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.365538][ T5823] usb 3-1: config 0 descriptor?? [ 90.374232][ T6291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.377700][ T30] audit: type=1400 audit(1759702431.134:210): avc: denied { setopt } for pid=6306 comm="syz.4.102" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.401668][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.414825][ T5823] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 91.176035][ T30] audit: type=1400 audit(1759702431.574:211): avc: denied { create } for pid=6290 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.319074][ T5823] usb 3-1: USB disconnect, device number 6 [ 91.410270][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.426770][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.750065][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 91.763347][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.771382][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.402874][ T6322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.785970][ T30] audit: type=1400 audit(1759702433.544:212): avc: denied { read write } for pid=6323 comm="syz.4.106" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.848327][ T30] audit: type=1400 audit(1759702433.544:213): avc: denied { open } for pid=6323 comm="syz.4.106" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 92.876885][ T30] audit: type=1400 audit(1759702433.544:214): avc: denied { mounton } for pid=6323 comm="syz.4.106" path="/19/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.152793][ T909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.160500][ T5963] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 93.594395][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 93.615092][ T5963] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 93.624780][ T5963] usb 3-1: config 0 has no interface number 0 [ 93.631008][ T909] usb 2-1: device descriptor read/64, error -71 [ 93.927085][ T30] audit: type=1400 audit(1759702434.684:215): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.929812][ T5963] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 94.034523][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.042838][ T5963] usb 3-1: Product: syz [ 94.056757][ T5963] usb 3-1: Manufacturer: syz [ 94.061764][ T5963] usb 3-1: SerialNumber: syz [ 94.102815][ T5963] usb 3-1: config 0 descriptor?? [ 94.184297][ T909] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.308664][ T30] audit: type=1400 audit(1759702435.064:216): avc: denied { read } for pid=6341 comm="syz.4.112" name="sg0" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.334687][ T909] usb 2-1: device descriptor read/64, error -71 [ 94.344865][ T30] audit: type=1400 audit(1759702435.094:217): avc: denied { ioctl } for pid=6341 comm="syz.4.112" path="/dev/sg0" dev="devtmpfs" ino=760 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.393438][ T5963] radio-si470x 3-1:0.35: this is not a si470x device. [ 94.400392][ T30] audit: type=1400 audit(1759702435.144:218): avc: denied { create } for pid=6326 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.464302][ T909] usb usb2-port1: attempt power cycle [ 94.977767][ T30] audit: type=1400 audit(1759702435.274:219): avc: denied { write } for pid=6326 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.004365][ T5963] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 95.041914][ T909] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.063927][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.114298][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.130809][ T909] usb 2-1: device descriptor read/8, error -71 [ 95.155502][ T30] audit: type=1400 audit(1759702435.284:220): avc: denied { name_connect } for pid=6326 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 95.297920][ T6353] netlink: 'syz.4.115': attribute type 21 has an invalid length. [ 95.305829][ T6353] netlink: 128 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.315391][ T6353] netlink: 'syz.4.115': attribute type 5 has an invalid length. [ 95.323113][ T6353] netlink: 'syz.4.115': attribute type 6 has an invalid length. [ 95.454343][ T909] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.473075][ T6353] netlink: 3 bytes leftover after parsing attributes in process `syz.4.115'. [ 95.484928][ T909] usb 2-1: device descriptor read/8, error -71 [ 95.594738][ T909] usb usb2-port1: unable to enumerate USB device [ 96.140868][ T5963] usb 3-1: USB disconnect, device number 7 [ 96.346635][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 96.346653][ T30] audit: type=1400 audit(1759702437.054:224): avc: denied { create } for pid=6373 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.544158][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 96.582459][ T30] audit: type=1400 audit(1759702437.334:225): avc: denied { write } for pid=6370 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.715720][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.726249][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 96.737603][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.747601][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 96.764939][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.774018][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.080358][ T10] usb 1-1: Manufacturer: syz [ 97.092279][ T10] usb 1-1: config 0 descriptor?? [ 97.318037][ T30] audit: type=1400 audit(1759702438.034:226): avc: denied { mount } for pid=6378 comm="syz.4.122" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.511001][ T30] audit: type=1400 audit(1759702438.184:227): avc: denied { mount } for pid=6378 comm="syz.4.122" name="/" dev="pstore" ino=3319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 97.630111][ T30] audit: type=1400 audit(1759702438.254:228): avc: denied { setopt } for pid=6381 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.655213][ T10] rc_core: IR keymap rc-hauppauge not found [ 97.674153][ T10] Registered IR keymap rc-empty [ 97.679404][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.800537][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.266658][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 98.281312][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 98.325738][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.335596][ T30] audit: type=1326 audit(1759702439.084:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6373 comm="syz.0.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff23bd8eec9 code=0x0 [ 98.364314][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.394236][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.434268][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.474379][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.641024][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.852738][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.110681][ T30] audit: type=1400 audit(1759702439.644:230): avc: denied { ioctl } for pid=6407 comm="syz.3.129" path="socket:[10012]" dev="sockfs" ino=10012 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.164346][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.199216][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.254211][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.308086][ T10] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 99.447688][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 99.705637][ T30] audit: type=1400 audit(1759702440.224:231): avc: denied { create } for pid=6412 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.867686][ T6417] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 100.006779][ T6417] bond2: entered promiscuous mode [ 100.026171][ T6417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.135889][ T6423] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 100.174378][ T6423] bond2: entered promiscuous mode [ 100.184643][ T6423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.285082][ T6425] overlayfs: failed lookup in lower (newroot/27, name='bus', err=-40): overlapping layers [ 100.809476][ T6420] overlayfs: failed lookup in lower (newroot/24, name='bus', err=-40): overlapping layers [ 100.863683][ T10] usb 1-1: USB disconnect, device number 2 [ 100.884608][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 100.936763][ T6429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.136'. [ 101.018593][ T30] audit: type=1400 audit(1759702441.764:232): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 101.194181][ T30] audit: type=1400 audit(1759702441.804:233): avc: denied { bind } for pid=6433 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.424981][ T6442] overlayfs: conflicting lowerdir path [ 101.913090][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 101.913105][ T30] audit: type=1400 audit(1759702442.664:236): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.035420][ T30] audit: type=1400 audit(1759702442.774:237): avc: denied { write } for pid=6446 comm="syz.0.141" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.350215][ T30] audit: type=1400 audit(1759702442.784:238): avc: denied { open } for pid=6446 comm="syz.0.141" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 102.491213][ T6462] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 102.519634][ T30] audit: type=1400 audit(1759702443.274:239): avc: denied { connect } for pid=6464 comm="syz.0.146" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.645261][ T6462] bond2: entered promiscuous mode [ 102.650611][ T6462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.669947][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 102.785121][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.148'. [ 103.363957][ T6467] overlayfs: failed lookup in lower (newroot/25, name='bus', err=-40): overlapping layers [ 103.773077][ T6483] SELinux: Context : is not valid (left unmapped). [ 103.809369][ T30] audit: type=1400 audit(1759702444.564:240): avc: denied { relabelto } for pid=6482 comm="syz.1.150" name="rdma.current" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 103.836941][ T6483] netlink: 'syz.1.150': attribute type 2 has an invalid length. [ 103.897675][ T6483] netlink: 119 bytes leftover after parsing attributes in process `syz.1.150'. [ 104.063013][ T30] audit: type=1400 audit(1759702444.564:241): avc: denied { associate } for pid=6482 comm="syz.1.150" name="rdma.current" dev="tmpfs" ino=206 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 104.089207][ T30] audit: type=1400 audit(1759702444.764:242): avc: denied { unlink } for pid=5833 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 104.141964][ T6498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.178594][ T6500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 104.221464][ T30] audit: type=1400 audit(1759702444.974:243): avc: denied { append } for pid=6501 comm="syz.0.156" name="cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.273666][ T30] audit: type=1400 audit(1759702444.984:244): avc: denied { create } for pid=6502 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.296859][ T30] audit: type=1400 audit(1759702444.994:245): avc: denied { connect } for pid=6502 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.484399][ T6517] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 104.602680][ T6518] overlayfs: failed lookup in lower (newroot/33, name='bus', err=-40): overlapping layers [ 104.734177][ T5942] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.957297][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.009984][ T5942] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 105.051120][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.076299][ T5942] usb 2-1: config 0 descriptor?? [ 105.504204][ T1623] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.677019][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 105.883597][ T6530] : entered promiscuous mode [ 105.889611][ T1623] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.980067][ T1623] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.002114][ T1623] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.032388][ T1623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.105355][ T1623] usb 5-1: SerialNumber: syz [ 106.322724][ T1623] usb 5-1: 0:2 : does not exist [ 106.360660][ T1623] usb 5-1: USB disconnect, device number 2 [ 106.499091][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.838558][ T6548] vlan0: entered promiscuous mode [ 107.031400][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 107.031416][ T30] audit: type=1400 audit(1759702447.784:263): avc: denied { bind } for pid=6545 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.168093][ T30] audit: type=1400 audit(1759702447.884:264): avc: denied { write } for pid=6545 comm="syz.3.167" path="socket:[10954]" dev="sockfs" ino=10954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 108.053773][ T5942] usbhid 2-1:0.0: can't add hid device: -71 [ 108.079901][ T5942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.103160][ T6565] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 108.187423][ T6567] FAULT_INJECTION: forcing a failure. [ 108.187423][ T6567] name failslab, interval 1, probability 0, space 0, times 1 [ 108.200594][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.1.173 Not tainted syzkaller #0 PREEMPT(full) [ 108.200618][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.200628][ T6567] Call Trace: [ 108.200634][ T6567] [ 108.200641][ T6567] dump_stack_lvl+0x16c/0x1f0 [ 108.200662][ T6567] should_fail_ex+0x512/0x640 [ 108.200682][ T6567] ? fs_reclaim_acquire+0xae/0x150 [ 108.200707][ T6567] should_failslab+0xc2/0x120 [ 108.200729][ T6567] __kmalloc_noprof+0xdd/0x880 [ 108.200756][ T6567] ? tomoyo_encode2+0x100/0x3e0 [ 108.200780][ T6567] ? tomoyo_encode2+0x100/0x3e0 [ 108.200798][ T6567] tomoyo_encode2+0x100/0x3e0 [ 108.200821][ T6567] tomoyo_encode+0x29/0x50 [ 108.200840][ T6567] tomoyo_realpath_from_path+0x18f/0x6e0 [ 108.200863][ T6567] ? tomoyo_profile+0x47/0x60 [ 108.200895][ T6567] tomoyo_path_number_perm+0x245/0x580 [ 108.200921][ T6567] ? tomoyo_path_number_perm+0x237/0x580 [ 108.200950][ T6567] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.200978][ T6567] ? find_held_lock+0x2b/0x80 [ 108.201025][ T6567] ? find_held_lock+0x2b/0x80 [ 108.201048][ T6567] ? hook_file_ioctl_common+0x145/0x410 [ 108.201076][ T6567] ? __fget_files+0x20e/0x3c0 [ 108.201100][ T6567] security_file_ioctl+0x9b/0x240 [ 108.201121][ T6567] __x64_sys_ioctl+0xb7/0x210 [ 108.201149][ T6567] do_syscall_64+0xcd/0x4e0 [ 108.201168][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.201186][ T6567] RIP: 0033:0x7f5404f8eec9 [ 108.201200][ T6567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.201216][ T6567] RSP: 002b:00007f5405d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.201233][ T6567] RAX: ffffffffffffffda RBX: 00007f54051e6090 RCX: 00007f5404f8eec9 [ 108.201243][ T6567] RDX: 0000200000000fc0 RSI: 00000000c0189373 RDI: 0000000000000006 [ 108.201253][ T6567] RBP: 00007f5405d40090 R08: 0000000000000000 R09: 0000000000000000 [ 108.201263][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.201273][ T6567] R13: 00007f54051e6128 R14: 00007f54051e6090 R15: 00007ffdab2f6fa8 [ 108.201296][ T6567] [ 108.201636][ T6567] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.643767][ T6570] input: syz1 as /devices/virtual/input/input8 [ 108.650182][ T5942] usb 2-1: USB disconnect, device number 6 [ 108.863838][ T6571] mmap: syz.4.171 (6571) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.939835][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'. [ 109.036506][ T6572] overlayfs: failed lookup in lower (newroot/29, name='bus', err=-40): overlapping layers [ 109.036837][ T6565] bond3: entered promiscuous mode [ 109.053279][ T6565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.464862][ T5963] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.654325][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 109.671664][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 109.703913][ T5963] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 109.723267][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.753673][ T5963] usb 1-1: Product: syz [ 109.764215][ T5963] usb 1-1: Manufacturer: syz [ 109.768821][ T5963] usb 1-1: SerialNumber: syz [ 109.832692][ T5963] usb 1-1: config 0 descriptor?? [ 109.843078][ T5963] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.847315][ T6590] tipc: Started in network mode [ 109.859723][ T6590] tipc: Node identity 6a8fde63b6c1, cluster identity 4711 [ 109.867036][ T6590] tipc: Enabled bearer , priority 0 [ 109.867412][ T5963] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 109.994664][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz.4.179'. [ 110.166961][ T5963] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 110.268494][ T6590] syzkaller0: entered promiscuous mode [ 110.284812][ T6596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.174'. [ 110.295265][ T6590] syzkaller0: entered allmulticast mode [ 110.309662][ T6590] tipc: Resetting bearer [ 110.320142][ T6589] tipc: Resetting bearer [ 110.329994][ T30] audit: type=1400 audit(1759702451.084:265): avc: denied { ioctl } for pid=6577 comm="syz.0.175" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.380591][ T5963] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.389718][ T5963] em28xx 1-1:0.0: board has no eeprom [ 110.415254][ T6589] tipc: Disabling bearer [ 110.437107][ T30] audit: type=1400 audit(1759702451.194:266): avc: denied { bind } for pid=6583 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.484818][ T5963] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.493788][ T5963] em28xx 1-1:0.0: dvb set to bulk mode. [ 110.518495][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'. [ 110.650439][ T909] em28xx 1-1:0.0: Binding DVB extension [ 110.663282][ T5963] usb 1-1: USB disconnect, device number 3 [ 110.670435][ T5963] em28xx 1-1:0.0: Disconnecting em28xx [ 111.277385][ T30] audit: type=1400 audit(1759702452.024:267): avc: denied { relabelfrom } for pid=6602 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.505325][ T909] em28xx 1-1:0.0: Registering input extension [ 111.519218][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 111.538339][ T5963] em28xx 1-1:0.0: Closing input extension [ 111.557235][ T30] audit: type=1400 audit(1759702452.024:268): avc: denied { relabelto } for pid=6602 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 111.576676][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.602325][ T30] audit: type=1400 audit(1759702452.304:269): avc: denied { write } for pid=6609 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.625262][ T30] audit: type=1400 audit(1759702452.384:270): avc: denied { getopt } for pid=6609 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.477658][ T5963] em28xx 1-1:0.0: Freeing device [ 112.573809][ T30] audit: type=1400 audit(1759702453.324:271): avc: denied { read } for pid=6623 comm="syz.4.188" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 112.596335][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.042797][ T30] audit: type=1400 audit(1759702453.324:272): avc: denied { open } for pid=6623 comm="syz.4.188" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.177020][ T30] audit: type=1400 audit(1759702453.934:273): avc: denied { bind } for pid=6632 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.201774][ T6635] Bluetooth: MGMT ver 1.23 [ 113.227294][ T30] audit: type=1400 audit(1759702453.954:274): avc: denied { read write } for pid=6632 comm="syz.0.189" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.265441][ T30] audit: type=1400 audit(1759702453.954:275): avc: denied { open } for pid=6632 comm="syz.0.189" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 113.290027][ T30] audit: type=1400 audit(1759702453.954:276): avc: denied { write } for pid=6632 comm="syz.0.189" path="socket:[11161]" dev="sockfs" ino=11161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.394387][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.568459][ T48] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.156959][ T6655] 9pnet_virtio: no channels available for device syz [ 114.203025][ T6655] bridge1: entered promiscuous mode [ 114.473260][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 114.501729][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.538306][ T48] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 114.588486][ T48] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 114.602936][ T48] usb 5-1: config 13 has no interface number 0 [ 114.611194][ T48] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 114.662102][ T48] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.677706][ T6654] "syz.2.196" (6654) uses obsolete ecb(arc4) skcipher [ 114.894562][ T48] usb 5-1: config 13 interface 50 has no altsetting 0 [ 114.916507][ T48] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 114.925694][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.933858][ T48] usb 5-1: Product: syz [ 114.938931][ T48] usb 5-1: Manufacturer: syz [ 115.407624][ T48] usb 5-1: SerialNumber: syz [ 115.458061][ T6637] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.703725][ T6670] netlink: 830 bytes leftover after parsing attributes in process `syz.2.199'. [ 116.094643][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.104463][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.143141][ T6676] netlink: 'syz.2.200': attribute type 10 has an invalid length. [ 116.166663][ T6676] team0: Port device dummy0 added [ 116.178960][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.212562][ T48] usb 5-1: MIDIStreaming interface descriptor not found [ 116.317602][ T48] usb 5-1: USB disconnect, device number 3 [ 116.480419][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.505688][ T6679] evm: overlay not supported [ 116.558404][ T30] audit: type=1400 audit(1759702457.314:277): avc: denied { map } for pid=6680 comm="syz.1.202" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.634178][ T30] audit: type=1400 audit(1759702457.314:278): avc: denied { execute } for pid=6680 comm="syz.1.202" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 116.674800][ T30] audit: type=1400 audit(1759702457.424:279): avc: denied { write } for pid=6682 comm="syz.3.203" name="card0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 116.838013][ T30] audit: type=1400 audit(1759702457.594:280): avc: denied { read } for pid=6682 comm="syz.3.203" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 116.871056][ T1623] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.394537][ T1623] usb 3-1: device descriptor read/64, error -71 [ 117.739557][ T1623] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.889021][ T6708] netlink: 'syz.1.210': attribute type 21 has an invalid length. [ 117.896966][ T6708] netlink: 128 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.906058][ T1623] usb 3-1: device descriptor read/64, error -71 [ 117.917606][ T6708] netlink: 'syz.1.210': attribute type 5 has an invalid length. [ 117.934167][ T6708] netlink: 'syz.1.210': attribute type 6 has an invalid length. [ 117.949050][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 117.961184][ T6708] netlink: 3 bytes leftover after parsing attributes in process `syz.1.210'. [ 117.971761][ T6707] bridge_slave_1: left allmulticast mode [ 117.978932][ T6707] bridge_slave_1: left promiscuous mode [ 117.986205][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.014832][ T1623] usb usb3-port1: attempt power cycle [ 118.027514][ T6707] bridge_slave_0: left allmulticast mode [ 118.054793][ T6707] bridge_slave_0: left promiscuous mode [ 118.062452][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.152081][ T6714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6714 comm=syz.3.211 [ 118.418523][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 118.427832][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 118.465598][ T1623] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.494594][ T1623] usb 3-1: device descriptor read/8, error -71 [ 118.794152][ T1623] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.817192][ T1623] usb 3-1: device descriptor read/8, error -71 [ 118.934382][ T1623] usb usb3-port1: unable to enumerate USB device [ 118.969037][ T30] audit: type=1400 audit(1759702459.724:281): avc: denied { create } for pid=6722 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 119.010849][ T30] audit: type=1400 audit(1759702459.764:282): avc: denied { bind } for pid=6720 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.022393][ T6725] tipc: Started in network mode [ 119.038477][ T6725] tipc: Node identity 8237219cf684, cluster identity 4711 [ 119.046807][ T6725] tipc: Enabled bearer , priority 0 [ 119.079129][ T6725] syzkaller0: entered promiscuous mode [ 119.084865][ T6725] syzkaller0: entered allmulticast mode [ 119.088902][ T30] audit: type=1400 audit(1759702459.844:283): avc: denied { connect } for pid=6720 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.650629][ T6725] tipc: Resetting bearer [ 119.666015][ T6724] tipc: Resetting bearer [ 119.678657][ T6724] tipc: Disabling bearer [ 119.929305][ T6736] lo: entered allmulticast mode [ 120.416253][ T6742] dvmrp8: entered allmulticast mode [ 120.776970][ T5838] Bluetooth: hci3: connection err: -111 [ 121.050670][ T6744] process 'syz.0.220' launched '/dev/fd/3' with NULL argv: empty string added [ 121.099325][ T30] audit: type=1400 audit(1759702461.854:284): avc: denied { execute_no_trans } for pid=6743 comm="syz.0.220" path=2F6D656D66643A5B0BDBD16D64C8138A485C3B540152E0202864656C6574656429 dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.141622][ T30] audit: type=1400 audit(1759702461.884:285): avc: denied { setopt } for pid=6746 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.203019][ T30] audit: type=1400 audit(1759702461.894:286): avc: denied { getopt } for pid=6746 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.384932][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 121.395103][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 121.404343][ T6754] netlink: 'syz.1.224': attribute type 14 has an invalid length. [ 121.642248][ T30] audit: type=1400 audit(1759702462.384:287): avc: denied { name_bind } for pid=6756 comm="syz.4.225" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 121.774695][ T30] audit: type=1400 audit(1759702462.484:288): avc: denied { getopt } for pid=6758 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.061552][ T6770] tipc: Enabled bearer , priority 0 [ 122.114983][ T6770] syzkaller0: entered promiscuous mode [ 122.120476][ T6770] syzkaller0: entered allmulticast mode [ 122.311677][ T6776] tipc: Resetting bearer [ 122.429067][ T6769] tipc: Resetting bearer [ 122.502920][ T6769] tipc: Disabling bearer [ 123.015842][ T6759] infiniband syz1: set down [ 123.034745][ T6759] infiniband syz1: added ipvlan0 [ 123.058763][ T6759] syz1: rxe_create_cq: returned err = -12 [ 123.081588][ T6759] infiniband syz1: Couldn't create ib_mad CQ [ 123.094807][ T6759] infiniband syz1: Couldn't open port 1 [ 123.236662][ T6759] RDS/IB: syz1: added [ 123.485365][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.551743][ T6789] tipc: Enabled bearer , priority 0 [ 123.561049][ T6789] syzkaller0: entered promiscuous mode [ 123.574133][ T6789] syzkaller0: entered allmulticast mode [ 123.624426][ T30] audit: type=1400 audit(1759702464.384:289): avc: denied { name_bind } for pid=6792 comm="syz.2.237" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.645530][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.663230][ T6796] tipc: Resetting bearer [ 123.670300][ T30] audit: type=1400 audit(1759702464.404:290): avc: denied { create } for pid=6792 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.683565][ T48] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 123.705804][ T6788] tipc: Resetting bearer [ 123.731970][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.777559][ T6788] tipc: Disabling bearer [ 123.900587][ T48] usb 5-1: config 0 descriptor?? [ 124.154394][ T5955] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 124.189067][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 124.201019][ T30] audit: type=1400 audit(1759702464.774:292): avc: denied { create } for pid=6794 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.417162][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 124.440900][ T30] audit: type=1400 audit(1759702465.174:293): avc: denied { ioctl } for pid=6800 comm="syz.1.239" path="socket:[12591]" dev="sockfs" ino=12591 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.465542][ T5955] usb 3-1: config 0 has no interfaces? [ 124.465582][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.554228][ T5955] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 124.583419][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.594771][ T48] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 124.614842][ T5955] usb 3-1: config 0 descriptor?? [ 124.642283][ T48] hid_mf 0003:0079:1846.0001: Invalid report, this should never happen! [ 124.662932][ T48] hid_mf 0003:0079:1846.0001: Force feedback init failed. [ 124.904699][ T1623] usb 3-1: USB disconnect, device number 12 [ 125.437628][ T6810] FAULT_INJECTION: forcing a failure. [ 125.437628][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 125.450694][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.0.241 Not tainted syzkaller #0 PREEMPT(full) [ 125.450717][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 125.450727][ T6810] Call Trace: [ 125.450733][ T6810] [ 125.450739][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 125.450761][ T6810] should_fail_ex+0x512/0x640 [ 125.450779][ T6810] ? fs_reclaim_acquire+0xae/0x150 [ 125.450802][ T6810] should_failslab+0xc2/0x120 [ 125.450824][ T6810] __kmalloc_noprof+0xdd/0x880 [ 125.450850][ T6810] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.450876][ T6810] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.450894][ T6810] tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.450916][ T6810] ? tomoyo_profile+0x47/0x60 [ 125.450941][ T6810] tomoyo_path_number_perm+0x245/0x580 [ 125.450966][ T6810] ? tomoyo_path_number_perm+0x237/0x580 [ 125.451000][ T6810] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.451029][ T6810] ? find_held_lock+0x2b/0x80 [ 125.451074][ T6810] ? find_held_lock+0x2b/0x80 [ 125.451098][ T6810] ? hook_file_ioctl_common+0x145/0x410 [ 125.451126][ T6810] ? __fget_files+0x20e/0x3c0 [ 125.451150][ T6810] security_file_ioctl+0x9b/0x240 [ 125.451170][ T6810] __x64_sys_ioctl+0xb7/0x210 [ 125.451199][ T6810] do_syscall_64+0xcd/0x4e0 [ 125.451218][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.451236][ T6810] RIP: 0033:0x7ff23bd8eec9 [ 125.451250][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.451266][ T6810] RSP: 002b:00007ff23cd0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.451282][ T6810] RAX: ffffffffffffffda RBX: 00007ff23bfe5fa0 RCX: 00007ff23bd8eec9 [ 125.451293][ T6810] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 125.451304][ T6810] RBP: 00007ff23cd0f090 R08: 0000000000000000 R09: 0000000000000000 [ 125.451314][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.451324][ T6810] R13: 00007ff23bfe6038 R14: 00007ff23bfe5fa0 R15: 00007ffec703e248 [ 125.451349][ T6810] [ 125.451357][ T6810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.664856][ T6810] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 125.777347][ T6812] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 125.840025][ T30] audit: type=1400 audit(1759702466.554:294): avc: denied { bind } for pid=6813 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.862429][ T30] audit: type=1400 audit(1759702466.554:295): avc: denied { node_bind } for pid=6813 comm="syz.0.243" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 126.353096][ T6821] FAULT_INJECTION: forcing a failure. [ 126.353096][ T6821] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.418249][ T48] usb 5-1: USB disconnect, device number 4 [ 126.424178][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.245 Not tainted syzkaller #0 PREEMPT(full) [ 126.424199][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.424208][ T6821] Call Trace: [ 126.424214][ T6821] [ 126.424220][ T6821] dump_stack_lvl+0x16c/0x1f0 [ 126.424241][ T6821] should_fail_ex+0x512/0x640 [ 126.424264][ T6821] _copy_from_user+0x2e/0xd0 [ 126.424283][ T6821] __sys_bpf+0x248/0x4980 [ 126.424303][ T6821] ? __pfx___sys_bpf+0x10/0x10 [ 126.424318][ T6821] ? find_held_lock+0x2b/0x80 [ 126.424345][ T6821] ? find_held_lock+0x2b/0x80 [ 126.424373][ T6821] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 126.424404][ T6821] ? fput+0x9b/0xd0 [ 126.424426][ T6821] ? ksys_write+0x1ac/0x250 [ 126.424441][ T6821] ? __pfx_ksys_write+0x10/0x10 [ 126.424463][ T6821] __x64_sys_bpf+0x78/0xc0 [ 126.424478][ T6821] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.424504][ T6821] do_syscall_64+0xcd/0x4e0 [ 126.424520][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.424536][ T6821] RIP: 0033:0x7f51ced8eec9 [ 126.424549][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.424564][ T6821] RSP: 002b:00007f51cfced038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.424581][ T6821] RAX: ffffffffffffffda RBX: 00007f51cefe5fa0 RCX: 00007f51ced8eec9 [ 126.424591][ T6821] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 126.424601][ T6821] RBP: 00007f51cfced090 R08: 0000000000000000 R09: 0000000000000000 [ 126.424610][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.424619][ T6821] R13: 00007f51cefe6038 R14: 00007f51cefe5fa0 R15: 00007ffd3cf4da98 [ 126.424640][ T6821] [ 126.605273][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.926362][ T30] audit: type=1400 audit(1759702467.684:296): avc: denied { read write } for pid=6842 comm="syz.4.253" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.949657][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.956145][ T30] audit: type=1400 audit(1759702467.684:297): avc: denied { open } for pid=6842 comm="syz.4.253" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.002990][ T30] audit: type=1400 audit(1759702467.684:298): avc: denied { ioctl } for pid=6842 comm="syz.4.253" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.038866][ T6848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.250'. [ 127.174136][ T48] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 127.374156][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.405700][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.413793][ T48] usb 5-1: not running at top speed; connect to a high speed hub [ 127.422655][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.433923][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.459075][ T6847] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 127.469647][ T6847] bridge1: entered allmulticast mode [ 127.714864][ T30] audit: type=1400 audit(1759702468.264:299): avc: denied { ioctl } for pid=6836 comm="syz.1.251" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.741834][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.773177][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.791606][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.805359][ T5902] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.815830][ T48] usb 5-1: string descriptor 0 read error: -22 [ 127.822099][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.832008][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.844929][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.875640][ T5902] usb 1-1: config 0 descriptor?? [ 127.921608][ T48] usb 5-1: 0:2 : does not exist [ 128.286400][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.310145][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.323071][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.334320][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.344794][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.358470][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.378526][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.386307][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.395624][ T5902] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 128.601086][ T5902] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.118168][ T30] audit: type=1400 audit(1759702469.544:300): avc: denied { map } for pid=6842 comm="syz.4.253" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 129.726304][ T6841] usb 1-1: string descriptor 0 read error: -71 [ 129.757602][ T6878] input: syz1 as /devices/virtual/input/input10 [ 129.780191][ T48] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 129.802006][ T48] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 129.834312][ T30] audit: type=1326 audit(1759702470.594:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 129.860367][ T48] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 129.959294][ T30] audit: type=1326 audit(1759702470.594:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 129.983401][ T30] audit: type=1326 audit(1759702470.594:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 130.027754][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 130.490774][ T30] audit: type=1326 audit(1759702470.594:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 130.641667][ T6888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.261'. [ 130.718882][ T48] usb 5-1: USB disconnect, device number 5 [ 130.754352][ T30] audit: type=1326 audit(1759702470.594:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 130.924562][ T1623] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.456025][ T10] usb 1-1: USB disconnect, device number 4 [ 131.551053][ T30] audit: type=1326 audit(1759702470.594:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 131.575379][ T1623] usb 2-1: device descriptor read/64, error -71 [ 131.842057][ T30] audit: type=1326 audit(1759702470.594:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 131.974892][ T1623] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 132.033976][ T30] audit: type=1326 audit(1759702470.594:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 132.058401][ T30] audit: type=1326 audit(1759702470.594:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 132.082017][ T30] audit: type=1326 audit(1759702470.764:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51ced8eec9 code=0x7ffc0000 [ 133.144148][ T1623] usb 2-1: device descriptor read/64, error -71 [ 133.344342][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.350715][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.474451][ T1623] usb usb2-port1: attempt power cycle [ 133.480937][ T6912] FAULT_INJECTION: forcing a failure. [ 133.480937][ T6912] name failslab, interval 1, probability 0, space 0, times 0 [ 133.518624][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 133.518648][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.518657][ T6912] Call Trace: [ 133.518663][ T6912] [ 133.518669][ T6912] dump_stack_lvl+0x16c/0x1f0 [ 133.518691][ T6912] should_fail_ex+0x512/0x640 [ 133.518709][ T6912] ? __kmalloc_noprof+0xca/0x880 [ 133.518736][ T6912] should_failslab+0xc2/0x120 [ 133.518757][ T6912] __kmalloc_noprof+0xdd/0x880 [ 133.518779][ T6912] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.518806][ T6912] ? tls_get_rec+0xfa/0x730 [ 133.518825][ T6912] ? tls_get_rec+0xfa/0x730 [ 133.518838][ T6912] tls_get_rec+0xfa/0x730 [ 133.518851][ T6912] ? __local_bh_enable_ip+0xa4/0x120 [ 133.518877][ T6912] tls_sw_sendmsg+0xff6/0x23f0 [ 133.518900][ T6912] ? __pfx_avc_has_perm+0x10/0x10 [ 133.518930][ T6912] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 133.518945][ T6912] ? selinux_ip_forward+0x507/0x550 [ 133.518969][ T6912] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 133.518998][ T6912] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 133.519015][ T6912] inet6_sendmsg+0x119/0x140 [ 133.519039][ T6912] sock_write_iter+0x437/0x610 [ 133.519063][ T6912] ? __pfx_sock_write_iter+0x10/0x10 [ 133.519097][ T6912] ? __pfx_file_has_perm+0x10/0x10 [ 133.519123][ T6912] do_iter_readv_writev+0x65f/0x9e0 [ 133.519151][ T6912] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 133.519174][ T6912] ? selinux_file_permission+0x126/0x660 [ 133.519194][ T6912] ? bpf_lsm_file_permission+0x9/0x10 [ 133.519210][ T6912] ? security_file_permission+0x71/0x210 [ 133.519230][ T6912] ? rw_verify_area+0xcf/0x6c0 [ 133.519255][ T6912] vfs_writev+0x35f/0xde0 [ 133.519271][ T6912] ? __lock_acquire+0x62e/0x1ce0 [ 133.519289][ T6912] ? __pfx_vfs_writev+0x10/0x10 [ 133.519320][ T6912] ? __fget_files+0x20e/0x3c0 [ 133.519335][ T6912] ? __fget_files+0x200/0x3c0 [ 133.519356][ T6912] ? do_writev+0x28c/0x340 [ 133.519368][ T6912] do_writev+0x28c/0x340 [ 133.519381][ T6912] ? __pfx_do_writev+0x10/0x10 [ 133.519402][ T6912] do_syscall_64+0xcd/0x4e0 [ 133.519418][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.519434][ T6912] RIP: 0033:0x7f2416f8eec9 [ 133.519448][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.519463][ T6912] RSP: 002b:00007f2417eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 133.519478][ T6912] RAX: ffffffffffffffda RBX: 00007f24171e5fa0 RCX: 00007f2416f8eec9 [ 133.519488][ T6912] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 133.519497][ T6912] RBP: 00007f2417eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 133.519505][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.519514][ T6912] R13: 00007f24171e6038 R14: 00007f24171e5fa0 R15: 00007ffe06354ee8 [ 133.519535][ T6912] [ 134.029453][ T6923] FAULT_INJECTION: forcing a failure. [ 134.029453][ T6923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.042905][ T6923] CPU: 0 UID: 0 PID: 6923 Comm: syz.3.273 Not tainted syzkaller #0 PREEMPT(full) [ 134.042928][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.042937][ T6923] Call Trace: [ 134.042941][ T6923] [ 134.042947][ T6923] dump_stack_lvl+0x16c/0x1f0 [ 134.042966][ T6923] should_fail_ex+0x512/0x640 [ 134.042985][ T6923] _copy_from_user+0x2e/0xd0 [ 134.043002][ T6923] copy_msghdr_from_user+0x98/0x160 [ 134.043020][ T6923] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 134.043046][ T6923] ___sys_sendmsg+0xfe/0x1d0 [ 134.043064][ T6923] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.043105][ T6923] __sys_sendmsg+0x16d/0x220 [ 134.043121][ T6923] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.043150][ T6923] do_syscall_64+0xcd/0x4e0 [ 134.043165][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.043179][ T6923] RIP: 0033:0x7f2416f8eec9 [ 134.043191][ T6923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.043204][ T6923] RSP: 002b:00007f2417eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.043218][ T6923] RAX: ffffffffffffffda RBX: 00007f24171e5fa0 RCX: 00007f2416f8eec9 [ 134.043227][ T6923] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 134.043235][ T6923] RBP: 00007f2417eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 134.043243][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.043251][ T6923] R13: 00007f24171e6038 R14: 00007f24171e5fa0 R15: 00007ffe06354ee8 [ 134.043270][ T6923] [ 134.265168][ T1623] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.284540][ T1623] usb 2-1: Using ep0 maxpacket: 16 [ 134.291831][ T1623] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 134.301498][ T1623] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.310830][ T1623] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.319509][ T1623] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 134.328338][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.338113][ T1623] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.353912][ T1623] usb 2-1: config 0 has no interface number 0 [ 134.361985][ T1623] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 134.373224][ T1623] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 134.386239][ T1623] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.398263][ T1623] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.460344][ T1623] usb 2-1: config 0 interface 125 has no altsetting 0 [ 134.467925][ T1623] usb 2-1: config 0 interface 125 has no altsetting 2 [ 134.476523][ T1623] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 134.486141][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 134.491323][ T1623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.500732][ T1623] usb 2-1: Product: syz [ 134.505258][ T1623] usb 2-1: Manufacturer: syz [ 134.510068][ T1623] usb 2-1: SerialNumber: syz [ 134.515075][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.526314][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.536863][ T1623] usb 2-1: config 0 descriptor?? [ 134.549463][ T5942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.561100][ T1623] usb 2-1: selecting invalid altsetting 2 [ 134.569568][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.586442][ T5942] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.595864][ T5942] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.605876][ T5942] usb 5-1: Manufacturer: syz [ 134.613965][ T5942] usb 5-1: config 0 descriptor?? [ 134.694457][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 134.770132][ C0] usb 2-1: async_complete: urb error -71 [ 134.775987][ C0] usb 2-1: async_complete: urb error -71 [ 134.781813][ C0] usb 2-1: async_complete: urb error -71 [ 134.787546][ C0] usb 2-1: async_complete: urb error -71 [ 135.010310][ T1623] get_1284_register: usb error -71 [ 135.015610][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 135.023170][ T1623] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 135.035274][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.048699][ T5838] Bluetooth: hci4: link tx timeout [ 135.054654][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.064164][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 135.064178][ T30] audit: type=1400 audit(1759702475.814:343): avc: denied { map } for pid=6938 comm="syz.0.281" path="socket:[13342]" dev="sockfs" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.095502][ T10] usb 3-1: config 0 has no interfaces? [ 135.101391][ T1623] usb 2-1: USB disconnect, device number 9 [ 135.107132][ T30] audit: type=1400 audit(1759702475.814:344): avc: denied { read } for pid=6938 comm="syz.0.281" path="socket:[13342]" dev="sockfs" ino=13342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.114173][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.131158][ T30] audit: type=1400 audit(1759702475.864:345): avc: denied { ioctl } for pid=6938 comm="syz.0.281" path="socket:[13343]" dev="sockfs" ino=13343 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 135.198154][ T10] usb 3-1: config 0 has no interfaces? [ 135.218208][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.298925][ T30] audit: type=1326 audit(1759702476.034:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 135.330109][ T10] usb 3-1: config 0 has no interfaces? [ 135.514328][ T30] audit: type=1326 audit(1759702476.034:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 135.687173][ T30] audit: type=1326 audit(1759702476.034:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 135.964215][ T909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.669976][ T30] audit: type=1326 audit(1759702476.034:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 136.701016][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 136.710702][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.719177][ T10] usb 3-1: Product: syz [ 136.723426][ T10] usb 3-1: Manufacturer: syz [ 136.728286][ T10] usb 3-1: SerialNumber: syz [ 136.733762][ T30] audit: type=1326 audit(1759702476.034:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 136.780167][ T10] usb 3-1: config 0 descriptor?? [ 136.791277][ T30] audit: type=1326 audit(1759702476.044:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 137.080601][ T909] usb 1-1: device descriptor read/64, error -71 [ 137.099187][ T30] audit: type=1326 audit(1759702476.044:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.4.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1698eec9 code=0x7ffc0000 [ 137.128185][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 137.136988][ T5875] usb 3-1: USB disconnect, device number 13 [ 137.244209][ T6954] overlayfs: failed lookup in lower (newroot/62, name='bus', err=-40): overlapping layers [ 137.522052][ T10] usb 5-1: USB disconnect, device number 6 [ 137.614163][ T909] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.974157][ T909] usb 1-1: device descriptor read/64, error -71 [ 137.975601][ T6961] FAULT_INJECTION: forcing a failure. [ 137.975601][ T6961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.028670][ T6961] CPU: 1 UID: 0 PID: 6961 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(full) [ 138.028695][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.028705][ T6961] Call Trace: [ 138.028711][ T6961] [ 138.028718][ T6961] dump_stack_lvl+0x16c/0x1f0 [ 138.028740][ T6961] should_fail_ex+0x512/0x640 [ 138.028763][ T6961] _copy_from_iter+0x29f/0x1720 [ 138.028787][ T6961] ? __lock_acquire+0x62e/0x1ce0 [ 138.028808][ T6961] ? __pfx__copy_from_iter+0x10/0x10 [ 138.028831][ T6961] ? find_held_lock+0x2b/0x80 [ 138.028856][ T6961] ? rawv6_sendmsg+0xb68/0x4860 [ 138.028887][ T6961] rawv6_sendmsg+0x238c/0x4860 [ 138.028924][ T6961] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 138.028950][ T6961] ? avc_has_perm_noaudit+0x149/0x3b0 [ 138.028977][ T6961] ? avc_has_perm+0x144/0x1f0 [ 138.029001][ T6961] ? __pfx_avc_has_perm+0x10/0x10 [ 138.029047][ T6961] ? inode_has_perm+0x16f/0x1d0 [ 138.029072][ T6961] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 138.029101][ T6961] ? inet_sendmsg+0x119/0x140 [ 138.029116][ T6961] inet_sendmsg+0x119/0x140 [ 138.029132][ T6961] sock_write_iter+0x509/0x610 [ 138.029159][ T6961] ? __pfx_sock_write_iter+0x10/0x10 [ 138.029193][ T6961] ? bpf_lsm_file_permission+0x9/0x10 [ 138.029211][ T6961] ? security_file_permission+0x71/0x210 [ 138.029232][ T6961] ? rw_verify_area+0xcf/0x6c0 [ 138.029262][ T6961] vfs_write+0x7d3/0x11d0 [ 138.029280][ T6961] ? __pfx_sock_write_iter+0x10/0x10 [ 138.029307][ T6961] ? __pfx_vfs_write+0x10/0x10 [ 138.029323][ T6961] ? find_held_lock+0x2b/0x80 [ 138.029363][ T6961] ksys_write+0x1f8/0x250 [ 138.029380][ T6961] ? __pfx_ksys_write+0x10/0x10 [ 138.029405][ T6961] do_syscall_64+0xcd/0x4e0 [ 138.029424][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.029441][ T6961] RIP: 0033:0x7f2416f8eec9 [ 138.029455][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.029470][ T6961] RSP: 002b:00007f2417eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.029487][ T6961] RAX: ffffffffffffffda RBX: 00007f24171e5fa0 RCX: 00007f2416f8eec9 [ 138.029503][ T6961] RDX: 00000000000005ac RSI: 00002000000000c0 RDI: 0000000000000003 [ 138.029514][ T6961] RBP: 00007f2417eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 138.029524][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.029534][ T6961] R13: 00007f24171e6038 R14: 00007f24171e5fa0 R15: 00007ffe06354ee8 [ 138.029558][ T6961] [ 138.289521][ T909] usb usb1-port1: attempt power cycle [ 140.095455][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 140.095470][ T30] audit: type=1400 audit(1759702480.824:387): avc: denied { listen } for pid=6989 comm="syz.0.297" laddr=172.20.20.66 lport=35583 faddr=100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.102031][ T6996] FAULT_INJECTION: forcing a failure. [ 140.102031][ T6996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.184175][ T6998] 9pnet_fd: p9_fd_create_unix (6998): problem connecting socket: ./file0: -111 [ 140.274341][ T6996] CPU: 0 UID: 0 PID: 6996 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 140.274366][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.274376][ T6996] Call Trace: [ 140.274382][ T6996] [ 140.274389][ T6996] dump_stack_lvl+0x16c/0x1f0 [ 140.274408][ T6996] should_fail_ex+0x512/0x640 [ 140.274430][ T6996] _copy_from_user+0x2e/0xd0 [ 140.274450][ T6996] move_addr_to_kernel+0x65/0x170 [ 140.274477][ T6996] __sys_sendto+0x1be/0x520 [ 140.274497][ T6996] ? __pfx___sys_sendto+0x10/0x10 [ 140.274537][ T6996] ? ksys_write+0x1ac/0x250 [ 140.274556][ T6996] ? __pfx_ksys_write+0x10/0x10 [ 140.274577][ T6996] __x64_sys_sendto+0xe0/0x1c0 [ 140.274595][ T6996] ? do_syscall_64+0x91/0x4e0 [ 140.274611][ T6996] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.274637][ T6996] do_syscall_64+0xcd/0x4e0 [ 140.274656][ T6996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.274674][ T6996] RIP: 0033:0x7f5404f8eec9 [ 140.274690][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.274712][ T6996] RSP: 002b:00007f5405d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 140.274730][ T6996] RAX: ffffffffffffffda RBX: 00007f54051e5fa0 RCX: 00007f5404f8eec9 [ 140.274741][ T6996] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 140.274752][ T6996] RBP: 00007f5405d61090 R08: 0000200000000200 R09: 0000000000000014 [ 140.274763][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.274773][ T6996] R13: 00007f54051e6038 R14: 00007f54051e5fa0 R15: 00007ffdab2f6fa8 [ 140.274797][ T6996] [ 140.453254][ T30] audit: type=1400 audit(1759702480.824:388): avc: denied { accept } for pid=6989 comm="syz.0.297" laddr=172.20.20.66 lport=35583 faddr=100.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.478169][ T30] audit: type=1400 audit(1759702480.934:389): avc: denied { mounton } for pid=6989 comm="syz.0.297" path="/65/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 140.550828][ T30] audit: type=1400 audit(1759702481.304:390): avc: denied { setopt } for pid=7000 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.571362][ T30] audit: type=1400 audit(1759702481.324:391): avc: denied { mounton } for pid=7000 comm="syz.4.300" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 140.609862][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 140.667906][ T7001] ======================================================= [ 140.667906][ T7001] WARNING: The mand mount option has been deprecated and [ 140.667906][ T7001] and is ignored by this kernel. Remove the mand [ 140.667906][ T7001] option from the mount to silence this warning. [ 140.667906][ T7001] ======================================================= [ 140.724475][ T7001] tmpfs: Bad value for 'mpol' [ 140.983529][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 141.012706][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 141.656427][ T7011] netlink: 'syz.1.302': attribute type 21 has an invalid length. [ 141.664227][ T7011] netlink: 128 bytes leftover after parsing attributes in process `syz.1.302'. [ 141.684112][ T7011] netlink: 'syz.1.302': attribute type 5 has an invalid length. [ 141.691887][ T7011] netlink: 'syz.1.302': attribute type 6 has an invalid length. [ 141.701473][ T7011] netlink: 3 bytes leftover after parsing attributes in process `syz.1.302'. [ 142.892232][ T7022] netlink: 'syz.4.306': attribute type 1 has an invalid length. [ 143.045165][ T7025] CIFS: VFS: Malformed UNC in devname [ 143.221742][ T7029] overlayfs: failed lookup in lower (newroot/60, name='bus', err=-40): overlapping layers [ 143.228462][ T7022] bond3: entered promiscuous mode [ 143.240651][ T7022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.311719][ T7031] FAULT_INJECTION: forcing a failure. [ 143.311719][ T7031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.312529][ T7031] [ 143.312536][ T7031] ====================================================== [ 143.312542][ T7031] WARNING: possible circular locking dependency detected [ 143.312548][ T7031] syzkaller #0 Not tainted [ 143.312556][ T7031] ------------------------------------------------------ [ 143.312562][ T7031] syz.1.308/7031 is trying to acquire lock: [ 143.312570][ T7031] ffffffff8e0cf5c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 143.312617][ T7031] [ 143.312617][ T7031] but task is already holding lock: [ 143.312622][ T7031] ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 143.312662][ T7031] [ 143.312662][ T7031] which lock already depends on the new lock. [ 143.312662][ T7031] [ 143.312667][ T7031] [ 143.312667][ T7031] the existing dependency chain (in reverse order) is: [ 143.312672][ T7031] [ 143.312672][ T7031] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 143.312691][ T7031] _raw_spin_lock_nested+0x31/0x40 [ 143.312714][ T7031] raw_spin_rq_lock_nested+0x29/0x130 [ 143.312736][ T7031] task_rq_lock+0xcf/0x490 [ 143.312757][ T7031] cgroup_move_task+0x81/0x2a0 [ 143.312781][ T7031] css_set_move_task+0x288/0x5f0 [ 143.312798][ T7031] cgroup_post_fork+0x201/0x9d0 [ 143.312820][ T7031] copy_process+0x602d/0x76a0 [ 143.312844][ T7031] kernel_clone+0xfc/0x930 [ 143.312866][ T7031] user_mode_thread+0xc8/0x110 [ 143.312889][ T7031] rest_init+0x23/0x2b0 [ 143.312906][ T7031] start_kernel+0x3f3/0x4e0 [ 143.312928][ T7031] x86_64_start_reservations+0x18/0x30 [ 143.312950][ T7031] x86_64_start_kernel+0x130/0x190 [ 143.312972][ T7031] common_startup_64+0x13e/0x148 [ 143.312991][ T7031] [ 143.312991][ T7031] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 143.313010][ T7031] _raw_spin_lock_irqsave+0x3a/0x60 [ 143.313032][ T7031] try_to_wake_up+0xb7/0x1870 [ 143.313053][ T7031] __wake_up_common+0x132/0x1f0 [ 143.313068][ T7031] __wake_up+0x31/0x60 [ 143.313090][ T7031] tty_port_default_wakeup+0x47/0x60 [ 143.313109][ T7031] serial8250_tx_chars+0x68e/0x860 [ 143.313129][ T7031] serial8250_handle_irq+0x761/0xcb0 [ 143.313149][ T7031] serial8250_default_handle_irq+0x9e/0x270 [ 143.313170][ T7031] serial8250_interrupt+0xf8/0x1d0 [ 143.313192][ T7031] __handle_irq_event_percpu+0x233/0x920 [ 143.313214][ T7031] handle_irq_event+0xab/0x1e0 [ 143.313235][ T7031] handle_edge_irq+0x3ca/0x9e0 [ 143.313255][ T7031] __common_interrupt+0xcd/0x2f0 [ 143.313278][ T7031] common_interrupt+0xba/0xe0 [ 143.313296][ T7031] asm_common_interrupt+0x26/0x40 [ 143.313311][ T7031] pv_native_safe_halt+0xf/0x20 [ 143.313334][ T7031] default_idle+0x13/0x20 [ 143.313348][ T7031] default_idle_call+0x6c/0xb0 [ 143.313365][ T7031] do_idle+0x38d/0x500 [ 143.313385][ T7031] cpu_startup_entry+0x4f/0x60 [ 143.313407][ T7031] start_secondary+0x21d/0x2b0 [ 143.313426][ T7031] common_startup_64+0x13e/0x148 [ 143.313445][ T7031] [ 143.313445][ T7031] -> #2 (&tty->write_wait){-...}-{3:3}: [ 143.313464][ T7031] _raw_spin_lock_irqsave+0x3a/0x60 [ 143.313486][ T7031] __wake_up+0x1c/0x60 [ 143.313508][ T7031] tty_port_default_wakeup+0x47/0x60 [ 143.313526][ T7031] serial8250_tx_chars+0x68e/0x860 [ 143.313545][ T7031] serial8250_handle_irq+0x761/0xcb0 [ 143.313565][ T7031] serial8250_default_handle_irq+0x9e/0x270 [ 143.313586][ T7031] serial8250_interrupt+0xf8/0x1d0 [ 143.313608][ T7031] __handle_irq_event_percpu+0x233/0x920 [ 143.313630][ T7031] handle_irq_event+0xab/0x1e0 [ 143.313652][ T7031] handle_edge_irq+0x3ca/0x9e0 [ 143.313671][ T7031] __common_interrupt+0xcd/0x2f0 [ 143.313694][ T7031] common_interrupt+0xba/0xe0 [ 143.313712][ T7031] asm_common_interrupt+0x26/0x40 [ 143.313727][ T7031] pv_native_safe_halt+0xf/0x20 [ 143.313750][ T7031] default_idle+0x13/0x20 [ 143.313766][ T7031] default_idle_call+0x6c/0xb0 [ 143.313782][ T7031] do_idle+0x38d/0x500 [ 143.313803][ T7031] cpu_startup_entry+0x4f/0x60 [ 143.313825][ T7031] start_secondary+0x21d/0x2b0 [ 143.313838][ T7031] common_startup_64+0x13e/0x148 [ 143.313857][ T7031] [ 143.313857][ T7031] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 143.313877][ T7031] _raw_spin_lock_irqsave+0x3a/0x60 [ 143.313898][ T7031] serial8250_console_write+0x181/0x1890 [ 143.313920][ T7031] console_flush_all+0x801/0xc60 [ 143.313942][ T7031] console_unlock+0xd8/0x210 [ 143.313962][ T7031] vprintk_emit+0x3d7/0x680 [ 143.313983][ T7031] _printk+0xc7/0x100 [ 143.313999][ T7031] register_console+0xc2d/0x11b0 [ 143.314021][ T7031] univ8250_console_init+0x5f/0x90 [ 143.314049][ T7031] console_init+0x14f/0x680 [ 143.314071][ T7031] start_kernel+0x29f/0x4e0 [ 143.314090][ T7031] x86_64_start_reservations+0x18/0x30 [ 143.314111][ T7031] x86_64_start_kernel+0x130/0x190 [ 143.314132][ T7031] common_startup_64+0x13e/0x148 [ 143.314149][ T7031] [ 143.314149][ T7031] -> #0 (console_owner){-.-.}-{0:0}: [ 143.314169][ T7031] __lock_acquire+0x12a6/0x1ce0 [ 143.314184][ T7031] lock_acquire+0x179/0x350 [ 143.314198][ T7031] console_lock_spinning_enable+0x72/0x80 [ 143.314218][ T7031] console_flush_all+0x7aa/0xc60 [ 143.314238][ T7031] console_unlock+0xd8/0x210 [ 143.314259][ T7031] vprintk_emit+0x3d7/0x680 [ 143.314281][ T7031] _printk+0xc7/0x100 [ 143.314296][ T7031] should_fail_ex+0x4e7/0x640 [ 143.314313][ T7031] strncpy_from_user+0x3b/0x2e0 [ 143.314327][ T7031] strncpy_from_user_nofault+0x7f/0x180 [ 143.314344][ T7031] bpf_bprintf_prepare+0xe90/0x13f0 [ 143.314362][ T7031] bpf_trace_printk+0xda/0x190 [ 143.314380][ T7031] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 143.314393][ T7031] bpf_trace_run2+0x236/0x590 [ 143.314413][ T7031] __bpf_trace_contention_begin+0xc9/0x110 [ 143.314436][ T7031] trace_contention_begin.constprop.0+0xde/0x160 [ 143.314457][ T7031] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 143.314482][ T7031] do_raw_spin_lock+0x20e/0x2b0 [ 143.314502][ T7031] raw_spin_rq_lock_nested+0x7e/0x130 [ 143.314523][ T7031] __schedule+0x307/0x5de0 [ 143.314544][ T7031] preempt_schedule_common+0x44/0xc0 [ 143.314567][ T7031] preempt_schedule_thunk+0x16/0x30 [ 143.314592][ T7031] _raw_spin_unlock_irqrestore+0x61/0x80 [ 143.314614][ T7031] send_sig+0x100/0x170 [ 143.314635][ T7031] sk_stream_error+0xb8/0x120 [ 143.314651][ T7031] tcp_sendmsg_locked+0xea7/0x42e0 [ 143.314674][ T7031] tcp_sendmsg+0x2e/0x50 [ 143.314696][ T7031] inet_sendmsg+0xb9/0x140 [ 143.314710][ T7031] __sys_sendto+0x43c/0x520 [ 143.314725][ T7031] __x64_sys_sendto+0xe0/0x1c0 [ 143.314740][ T7031] do_syscall_64+0xcd/0x4e0 [ 143.314754][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.314769][ T7031] [ 143.314769][ T7031] other info that might help us debug this: [ 143.314769][ T7031] [ 143.314774][ T7031] Chain exists of: [ 143.314774][ T7031] console_owner --> &p->pi_lock --> &rq->__lock [ 143.314774][ T7031] [ 143.314797][ T7031] Possible unsafe locking scenario: [ 143.314797][ T7031] [ 143.314801][ T7031] CPU0 CPU1 [ 143.314805][ T7031] ---- ---- [ 143.314809][ T7031] lock(&rq->__lock); [ 143.314819][ T7031] lock(&p->pi_lock); [ 143.314829][ T7031] lock(&rq->__lock); [ 143.314839][ T7031] lock(console_owner); [ 143.314848][ T7031] [ 143.314848][ T7031] *** DEADLOCK *** [ 143.314848][ T7031] [ 143.314852][ T7031] 5 locks held by syz.1.308/7031: [ 143.314861][ T7031] #0: ffff888053b9db98 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x20/0x50 [ 143.314905][ T7031] #1: ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 143.314947][ T7031] #2: ffffffff8e1c23a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 143.314988][ T7031] #3: ffffffff8e1afa00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 143.315024][ T7031] #4: ffffffff8e1afa70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 143.315066][ T7031] [ 143.315066][ T7031] stack backtrace: [ 143.315073][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 143.315092][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.315103][ T7031] Call Trace: [ 143.315108][ T7031] [ 143.315114][ T7031] dump_stack_lvl+0x116/0x1f0 [ 143.315130][ T7031] print_circular_bug+0x275/0x350 [ 143.315149][ T7031] check_noncircular+0x14c/0x170 [ 143.315168][ T7031] __lock_acquire+0x12a6/0x1ce0 [ 143.315191][ T7031] lock_acquire+0x179/0x350 [ 143.315208][ T7031] ? console_lock_spinning_enable+0x61/0x80 [ 143.315231][ T7031] ? console_lock_spinning_enable+0x4a/0x80 [ 143.315256][ T7031] console_lock_spinning_enable+0x72/0x80 [ 143.315278][ T7031] ? console_lock_spinning_enable+0x61/0x80 [ 143.315301][ T7031] console_flush_all+0x7aa/0xc60 [ 143.315325][ T7031] ? __pfx_console_flush_all+0x10/0x10 [ 143.315352][ T7031] ? is_printk_cpu_sync_owner+0x32/0x40 [ 143.315379][ T7031] console_unlock+0xd8/0x210 [ 143.315401][ T7031] ? __pfx_console_unlock+0x10/0x10 [ 143.315428][ T7031] ? do_raw_spin_unlock+0x140/0x230 [ 143.315450][ T7031] ? _printk+0xc7/0x100 [ 143.315468][ T7031] ? __down_trylock_console_sem+0xb0/0x140 [ 143.315489][ T7031] vprintk_emit+0x3d7/0x680 [ 143.315513][ T7031] ? __pfx_vprintk_emit+0x10/0x10 [ 143.315537][ T7031] ? rb_read_data_buffer.constprop.0+0x18c/0x430 [ 143.315559][ T7031] _printk+0xc7/0x100 [ 143.315576][ T7031] ? __pfx__printk+0x10/0x10 [ 143.315594][ T7031] ? __pfx_check_buffer+0x10/0x10 [ 143.315612][ T7031] ? __pfx____ratelimit+0x10/0x10 [ 143.315639][ T7031] should_fail_ex+0x4e7/0x640 [ 143.315658][ T7031] strncpy_from_user+0x3b/0x2e0 [ 143.315674][ T7031] strncpy_from_user_nofault+0x7f/0x180 [ 143.315691][ T7031] bpf_bprintf_prepare+0xe90/0x13f0 [ 143.315712][ T7031] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 143.315735][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 143.315756][ T7031] bpf_trace_printk+0xda/0x190 [ 143.315775][ T7031] ? __pfx_bpf_trace_printk+0x10/0x10 [ 143.315795][ T7031] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 143.315813][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 143.315838][ T7031] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 143.315851][ T7031] bpf_trace_run2+0x236/0x590 [ 143.315872][ T7031] ? __pfx_bpf_trace_run2+0x10/0x10 [ 143.315896][ T7031] ? rcu_is_watching+0x12/0xc0 [ 143.315922][ T7031] __bpf_trace_contention_begin+0xc9/0x110 [ 143.315940][ T7031] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 143.315960][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 143.315982][ T7031] ? find_held_lock+0x2b/0x80 [ 143.316005][ T7031] trace_contention_begin.constprop.0+0xde/0x160 [ 143.316028][ T7031] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 143.316056][ T7031] ? __lock_acquire+0xb97/0x1ce0 [ 143.316074][ T7031] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 143.316102][ T7031] ? __pfx_trace_clock_local+0x10/0x10 [ 143.316129][ T7031] do_raw_spin_lock+0x20e/0x2b0 [ 143.316150][ T7031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.316170][ T7031] ? rcu_qs+0x2b/0xe0 [ 143.316191][ T7031] ? rcu_note_context_switch+0x192/0x1e00 [ 143.316217][ T7031] raw_spin_rq_lock_nested+0x7e/0x130 [ 143.316240][ T7031] ? preempt_schedule_common+0x44/0xc0 [ 143.316264][ T7031] __schedule+0x307/0x5de0 [ 143.316286][ T7031] ? css_rstat_updated+0x1c2/0x510 [ 143.316312][ T7031] ? __pfx_css_rstat_updated+0x10/0x10 [ 143.316340][ T7031] ? __lock_acquire+0x62e/0x1ce0 [ 143.316358][ T7031] ? __pfx___schedule+0x10/0x10 [ 143.316383][ T7031] ? mark_held_locks+0x49/0x80 [ 143.316400][ T7031] ? irqentry_exit+0x3b/0x90 [ 143.316413][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.316444][ T7031] ? preempt_schedule_thunk+0x16/0x30 [ 143.316470][ T7031] preempt_schedule_common+0x44/0xc0 [ 143.316494][ T7031] preempt_schedule_thunk+0x16/0x30 [ 143.316521][ T7031] _raw_spin_unlock_irqrestore+0x61/0x80 [ 143.316546][ T7031] send_sig+0x100/0x170 [ 143.316568][ T7031] ? __pfx_send_sig+0x10/0x10 [ 143.316591][ T7031] ? __pfx_woken_wake_function+0x10/0x10 [ 143.316615][ T7031] sk_stream_error+0xb8/0x120 [ 143.316631][ T7031] tcp_sendmsg_locked+0xea7/0x42e0 [ 143.316657][ T7031] ? avc_has_perm+0x144/0x1f0 [ 143.316679][ T7031] ? __lock_acquire+0xb97/0x1ce0 [ 143.316700][ T7031] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 143.316726][ T7031] ? do_raw_spin_lock+0x12c/0x2b0 [ 143.316747][ T7031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 143.316770][ T7031] ? __local_bh_enable_ip+0xa4/0x120 [ 143.316796][ T7031] tcp_sendmsg+0x2e/0x50 [ 143.316819][ T7031] ? __pfx_tcp_sendmsg+0x10/0x10 [ 143.316843][ T7031] inet_sendmsg+0xb9/0x140 [ 143.316859][ T7031] __sys_sendto+0x43c/0x520 [ 143.316875][ T7031] ? __pfx___sys_sendto+0x10/0x10 [ 143.316900][ T7031] ? ksys_write+0x1ac/0x250 [ 143.316917][ T7031] ? __pfx_ksys_write+0x10/0x10 [ 143.316934][ T7031] __x64_sys_sendto+0xe0/0x1c0 [ 143.316950][ T7031] ? do_syscall_64+0x91/0x4e0 [ 143.316964][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 143.316988][ T7031] do_syscall_64+0xcd/0x4e0 [ 143.317004][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.317019][ T7031] RIP: 0033:0x7f5404f8eec9 [ 143.317030][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.317046][ T7031] RSP: 002b:00007f5405d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 143.317060][ T7031] RAX: ffffffffffffffda RBX: 00007f54051e5fa0 RCX: 00007f5404f8eec9 [ 143.317070][ T7031] RDX: 0000000000001d4c RSI: 0000200000000580 RDI: 0000000000000003 [ 143.317080][ T7031] RBP: 00007f5405d61090 R08: 0000000000000000 R09: 0000000000000000 [ 143.317088][ T7031] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 143.317095][ T7031] R13: 00007f54051e6038 R14: 00007f54051e5fa0 R15: 00007ffdab2f6fa8 [ 143.317105][ T7031] [ 144.668005][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 144.668024][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.668033][ T7031] Call Trace: [ 144.668038][ T7031] [ 144.668042][ T7031] dump_stack_lvl+0x116/0x1f0 [ 144.668060][ T7031] should_fail_ex+0x512/0x640 [ 144.668077][ T7031] strncpy_from_user+0x3b/0x2e0 [ 144.668092][ T7031] strncpy_from_user_nofault+0x7f/0x180 [ 144.668108][ T7031] bpf_bprintf_prepare+0xe90/0x13f0 [ 144.668126][ T7031] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 144.668145][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 144.668163][ T7031] bpf_trace_printk+0xda/0x190 [ 144.668179][ T7031] ? __pfx_bpf_trace_printk+0x10/0x10 [ 144.668195][ T7031] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 144.668211][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 144.668230][ T7031] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 144.668242][ T7031] bpf_trace_run2+0x236/0x590 [ 144.668259][ T7031] ? __pfx_bpf_trace_run2+0x10/0x10 [ 144.668279][ T7031] ? rcu_is_watching+0x12/0xc0 [ 144.668300][ T7031] __bpf_trace_contention_begin+0xc9/0x110 [ 144.668316][ T7031] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 144.668333][ T7031] ? bpf_trace_run2+0x3e1/0x590 [ 144.668350][ T7031] ? find_held_lock+0x2b/0x80 [ 144.668369][ T7031] trace_contention_begin.constprop.0+0xde/0x160 [ 144.668388][ T7031] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 144.668413][ T7031] ? __lock_acquire+0xb97/0x1ce0 [ 144.668442][ T7031] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 144.668465][ T7031] ? __pfx_trace_clock_local+0x10/0x10 [ 144.668488][ T7031] do_raw_spin_lock+0x20e/0x2b0 [ 144.668506][ T7031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.668523][ T7031] ? rcu_qs+0x2b/0xe0 [ 144.668540][ T7031] ? rcu_note_context_switch+0x192/0x1e00 [ 144.668561][ T7031] raw_spin_rq_lock_nested+0x7e/0x130 [ 144.668582][ T7031] ? preempt_schedule_common+0x44/0xc0 [ 144.668602][ T7031] __schedule+0x307/0x5de0 [ 144.668621][ T7031] ? css_rstat_updated+0x1c2/0x510 [ 144.668643][ T7031] ? __pfx_css_rstat_updated+0x10/0x10 [ 144.668665][ T7031] ? __lock_acquire+0x62e/0x1ce0 [ 144.668681][ T7031] ? __pfx___schedule+0x10/0x10 [ 144.668702][ T7031] ? mark_held_locks+0x49/0x80 [ 144.668719][ T7031] ? irqentry_exit+0x3b/0x90 [ 144.668730][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.668752][ T7031] ? preempt_schedule_thunk+0x16/0x30 [ 144.668774][ T7031] preempt_schedule_common+0x44/0xc0 [ 144.668795][ T7031] preempt_schedule_thunk+0x16/0x30 [ 144.668817][ T7031] _raw_spin_unlock_irqrestore+0x61/0x80 [ 144.668837][ T7031] send_sig+0x100/0x170 [ 144.668857][ T7031] ? __pfx_send_sig+0x10/0x10 [ 144.668876][ T7031] ? __pfx_woken_wake_function+0x10/0x10 [ 144.668895][ T7031] sk_stream_error+0xb8/0x120 [ 144.668910][ T7031] tcp_sendmsg_locked+0xea7/0x42e0 [ 144.668933][ T7031] ? avc_has_perm+0x144/0x1f0 [ 144.668952][ T7031] ? __lock_acquire+0xb97/0x1ce0 [ 144.668969][ T7031] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 144.668991][ T7031] ? do_raw_spin_lock+0x12c/0x2b0 [ 144.669008][ T7031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.669027][ T7031] ? __local_bh_enable_ip+0xa4/0x120 [ 144.669048][ T7031] tcp_sendmsg+0x2e/0x50 [ 144.669067][ T7031] ? __pfx_tcp_sendmsg+0x10/0x10 [ 144.669087][ T7031] inet_sendmsg+0xb9/0x140 [ 144.669100][ T7031] __sys_sendto+0x43c/0x520 [ 144.669114][ T7031] ? __pfx___sys_sendto+0x10/0x10 [ 144.669135][ T7031] ? ksys_write+0x1ac/0x250 [ 144.669149][ T7031] ? __pfx_ksys_write+0x10/0x10 [ 144.669164][ T7031] __x64_sys_sendto+0xe0/0x1c0 [ 144.669177][ T7031] ? do_syscall_64+0x91/0x4e0 [ 144.669189][ T7031] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.669209][ T7031] do_syscall_64+0xcd/0x4e0 [ 144.669222][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.669236][ T7031] RIP: 0033:0x7f5404f8eec9 [ 144.669247][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.669261][ T7031] RSP: 002b:00007f5405d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.669275][ T7031] RAX: ffffffffffffffda RBX: 00007f54051e5fa0 RCX: 00007f5404f8eec9 [ 144.669284][ T7031] RDX: 0000000000001d4c RSI: 0000200000000580 RDI: 0000000000000003 [ 144.669293][ T7031] RBP: 00007f5405d61090 R08: 0000000000000000 R09: 0000000000000000 [ 144.669301][ T7031] R10: 0000000010048095 R11: 0000000000000246 R12: 0000000000000001 [ 144.669310][ T7031] R13: 00007f54051e6038 R14: 00007f54051e5fa0 R15: 00007ffdab2f6fa8 [ 144.669323][ T7031] [ 145.254147][ T5831] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.474208][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 145.480702][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.489115][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 145.500956][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 145.511846][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 145.521585][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.531237][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 145.540874][ T5831] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 145.550588][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 145.560686][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 145.571900][ T5831] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 145.581001][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.589015][ T5831] usb 3-1: Product: syz [ 145.593162][ T5831] usb 3-1: Manufacturer: syz [ 145.597769][ T5831] usb 3-1: SerialNumber: syz [ 145.604791][ T5831] usb 3-1: config 0 descriptor?? [ 145.611474][ T5831] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.637318][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.816742][ T5831] usb 3-1: USB disconnect, device number 14