last executing test programs: 17.189325118s ago: executing program 4 (id=258): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f00004a0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 15.498631853s ago: executing program 1 (id=263): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ff7f0000000000faff0000940000000fad8e3e550000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r4, 0x2}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket(0x6, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r7, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000140)='syzkaller\x00', 0x98ee, 0x6d, &(0x7f0000000280)=""/109, 0x41000, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x10000, 0xb095}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, r5, r6]}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{0x0, 0xcb000000, 0x0}}], 0x28000, 0x80fe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) r8 = socket(0x10, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}}}, 0x24}}, 0x0) 14.285094695s ago: executing program 2 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x63}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x120) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) 13.767080272s ago: executing program 1 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b0877f0000ff66de000000eeff1e267fffffeb"}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 12.840509142s ago: executing program 0 (id=268): socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000003cb9c1cc1280707def23435a3c32a676fe6eec6fdf75"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000004b80)=[{0x5, 0x1, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f00000003c0)=""/62, 0x3e}], &(0x7f0000000a00)=[0xd2, 0x80000000, 0x400, 0x0, 0xd, 0xfff, 0x2d65]}, {0x3, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/53, 0x35}], &(0x7f0000000c00)=[0xd, 0xfff]}, {0x2, 0x1, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/50, 0x32}], &(0x7f0000000d80)=[0x5, 0x8d, 0x6, 0x4]}, {0x2, 0x1, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e40)=""/187, 0xbb}], &(0x7f0000000f40)=[0x2dc30952]}, {0x0, 0x0, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0)=[0xfff, 0xfffffffff698e77b, 0x7]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000003440)}, {0x9, 0x1, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003480)=""/109, 0x6d}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/158, 0x9e}, {&(0x7f00000037c0)=""/53, 0x35}, {&(0x7f0000003800)=""/166, 0xa6}, {0x0}, {&(0x7f00000048c0)=""/58, 0x3a}, {&(0x7f0000004900)=""/215, 0xd7}, {&(0x7f0000004a00)=""/94, 0x5e}], &(0x7f0000004b40)=[0xdb1c, 0x3]}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x40, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 11.452813331s ago: executing program 4 (id=269): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 11.438242989s ago: executing program 0 (id=270): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 10.362684047s ago: executing program 4 (id=271): socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000003cb9c1cc1280707def23435a3c32a676fe6eec6fdf75"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000004b80)=[{0x5, 0x1, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f00000003c0)=""/62, 0x3e}], &(0x7f0000000a00)=[0xd2, 0x80000000, 0x400, 0x0, 0xd, 0xfff, 0x2d65]}, {0x3, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/53, 0x35}], &(0x7f0000000c00)=[0xd, 0xfff]}, {0x2, 0x1, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/50, 0x32}], &(0x7f0000000d80)=[0x5, 0x8d, 0x6, 0x4]}, {0x2, 0x1, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e40)=""/187, 0xbb}], &(0x7f0000000f40)=[0x2dc30952]}, {0x0, 0x0, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0)=[0xfff, 0xfffffffff698e77b, 0x7]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000003440)}, {0x9, 0x1, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003480)=""/109, 0x6d}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/158, 0x9e}, {&(0x7f00000037c0)=""/53, 0x35}, {&(0x7f0000003800)=""/166, 0xa6}, {0x0}, {&(0x7f00000048c0)=""/58, 0x3a}, {&(0x7f0000004900)=""/215, 0xd7}, {&(0x7f0000004a00)=""/94, 0x5e}], &(0x7f0000004b40)=[0xdb1c, 0x3]}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x40, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10.227206487s ago: executing program 2 (id=272): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1c5e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) r3 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@lu}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc), 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f00004c8000/0x1000)=nil) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045520, &(0x7f0000002a40)) 9.781574369s ago: executing program 1 (id=274): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6(0xa, 0x0, 0xffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x110, r0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000140)=0x6e) socket(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time={0x1b0}, {}, {0xa}, @result}, {0x0, 0x0, 0x4, 0x0, @time={0xfffeffff, 0x80000000}, {}, {}, @control={0x0, 0x0, 0x1}}, {0x0, 0x0, 0x8, 0x0, @time, {0x0, 0xfc}, {}, @raw32}], 0x54) 7.972960905s ago: executing program 2 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000001100)="fe", 0xca80}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x2a0001, 0x29) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000340)='-$#(\xe5[$\\\x00', 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r6, 0xf92}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 7.971723634s ago: executing program 0 (id=276): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x7, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x800) 7.921010102s ago: executing program 4 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x3, 0xa, 0x8, 0x9, 0x3803}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x41, &(0x7f0000000600)=""/65, 0x41000, 0x10, '\x00', 0x0, 0x3, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0xde3adb1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5], &(0x7f0000000700)=[{0x2, 0x2, 0x2, 0x6}], 0x10, 0x6}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) 6.952793144s ago: executing program 2 (id=279): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f00004a0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.609612113s ago: executing program 3 (id=280): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f00004a0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.496829598s ago: executing program 1 (id=281): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x3, 0xa, 0x8, 0x9, 0x3803}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x41, &(0x7f0000000600)=""/65, 0x41000, 0x10, '\x00', 0x0, 0x3, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0xde3adb1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r5], &(0x7f0000000700), 0x10, 0x6}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) 6.483561899s ago: executing program 0 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x16}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x63}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x120) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) 5.619719143s ago: executing program 0 (id=283): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000340), 0x8001, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x90) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) preadv(r5, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.89604785s ago: executing program 3 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x70}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "b0877f0000ff66de000000eeff1e267fffffeb"}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 4.721718237s ago: executing program 2 (id=285): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000194c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r1, 0x5605) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002ea0000000000000000"], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000019300), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)}, {&(0x7f0000000200)}], 0x2) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0xe, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)={0x87, @multicast2, 0x0, 0x1, 'ovf\x00', 0xa}, 0x2c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) 3.812115201s ago: executing program 3 (id=286): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) setresuid(0xee00, 0xee00, 0xee01) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x10) 3.715627342s ago: executing program 4 (id=287): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.41654059s ago: executing program 1 (id=288): socket$kcm(0x10, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000180)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950000003cb9c1cc1280707def23435a3c32a676fe6eec6fdf75"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000004b80)=[{0x5, 0x1, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f00000003c0)=""/62, 0x3e}], &(0x7f0000000a00)=[0xd2, 0x80000000, 0x400, 0x0, 0xd, 0xfff, 0x2d65]}, {0x3, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/156, 0x9c}, {&(0x7f0000000b80)=""/53, 0x35}], &(0x7f0000000c00)=[0xd, 0xfff]}, {0x2, 0x1, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/170, 0xaa}, {&(0x7f0000000d00)=""/50, 0x32}], &(0x7f0000000d80)=[0x5, 0x8d, 0x6, 0x4]}, {0x2, 0x1, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000e40)=""/187, 0xbb}], &(0x7f0000000f40)=[0x2dc30952]}, {0x0, 0x0, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0)=[0xfff, 0xfffffffff698e77b, 0x7]}, {0x0, 0x1, 0x0, 0x0, &(0x7f0000003440)}, {0x9, 0x1, 0x0, &(0x7f0000004a80)=[{&(0x7f0000003480)=""/109, 0x6d}, {&(0x7f0000003600)=""/227, 0xe3}, {&(0x7f0000003700)=""/158, 0x9e}, {&(0x7f00000037c0)=""/53, 0x35}, {&(0x7f0000003800)=""/166, 0xa6}, {0x0}, {&(0x7f00000048c0)=""/58, 0x3a}, {&(0x7f0000004900)=""/215, 0xd7}, {&(0x7f0000004a00)=""/94, 0x5e}], &(0x7f0000004b40)=[0xdb1c, 0x3]}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x40, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.238497885s ago: executing program 3 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000001100)="fe", 0xca80}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x2a0001, 0x29) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000340)='-$#(\xe5[$\\\x00', 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {r6, 0xf92}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS}}, 0x7) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 2.080491407s ago: executing program 4 (id=290): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000400), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(0x0, 0x64041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x12, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x85}, @generic={0x3, 0xa, 0x8, 0x9, 0x3803}, @call={0x85, 0x0, 0x0, 0x6f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x41, &(0x7f0000000600)=""/65, 0x41000, 0x10, '\x00', 0x0, 0x3, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x3, 0xde3adb1, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r5], &(0x7f0000000700)=[{0x2, 0x2, 0x2, 0x6}], 0x10, 0x6}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r6, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f00000002c0)='./file0\x00', 0x6b14) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) 1.900082084s ago: executing program 3 (id=291): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6(0xa, 0x0, 0xffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x110, r0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000140)=0x6e) socket(0x2, 0x1, 0x0) capset(0x0, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000001c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, @time={0x1b0}, {}, {0xa}, @result}, {0x0, 0x0, 0x4, 0x0, @time={0xfffeffff, 0x80000000}, {}, {}, @control={0x0, 0x0, 0x1}}, {0x0, 0x0, 0x8, 0x0, @time, {0x0, 0xfc}, {}, @raw32}], 0x54) 370.490716ms ago: executing program 1 (id=292): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x7, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x800) 60.734477ms ago: executing program 3 (id=293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000002d55710c64e30cd8655910b3eb2d1451a6bf4b04dc0af703f4c87963ba8fd1c024815f140290fb3f659193ae297fdcd50b6dc8d41dff00000000000000e272e53a081168e74d7189f0e655f66e08f0e108968d80ea3cac636a830bea16f1e27d5761f66d6e252599ca89adacf4e13a2013988c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000500)={0x5, 0x73, 0x8, 0x7f, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c775287d3f10049c652c7505b53904095452c321b613fe278400c40023dd42856fdd79e9fa8192cd711d816fa71d05c1cee7a24ef9ca029e9ef5b38cef4af8f85d7200814e62b02eb9e3b591430696b6f96466178a4f36fc79e8db541093f97f53b349527605bf58d9c70bdced4b091def2d8c601ed4c452fed9e97d166427d0d97402604fca9511c125eeea08b71e472423341f9150e6e5ade36368e053cf1cf6f0aeebfe5a4204bf7a00f6931f62548d328331466238d47e5caa9eef75e0e838802b55cd12f32efea689c5000fb52529d4d0aa0626b5e2bb386638ad8ae5d1a8cd6bad59f64e8d6b148811112c77b24acf2924f70caebaa1d488c9050044be4c5f6bc1638dacdd347a90b2679b29e132f298bdb3f0e900dface9f8e07b7c6e8452e3c801a954a524681211db7d4f9ed3a2e501651d8c891530cb5a31e", @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC=r3, @ANYBLOB=',k']) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 11.529201ms ago: executing program 2 (id=294): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000ff7f0000000000faff0000940000000fad8e3e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r4, 0x2}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket(0x6, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r7, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000140)='syzkaller\x00', 0x98ee, 0x6d, &(0x7f0000000280)=""/109, 0x41000, 0x9, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x10000, 0xb095}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r3, r5, r6]}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{0x0, 0xcb000000, 0x0}}], 0x28000, 0x80fe) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) r8 = socket(0x10, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=295): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b", 0x44, 0x182, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0xffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0xe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f00004a0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 67.504589][ T29] audit: type=1400 audit(1724620463.738:88): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.512027][ T5212] cgroup: Unknown subsys name 'net' [ 67.527343][ T29] audit: type=1400 audit(1724620463.738:89): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.554730][ T29] audit: type=1400 audit(1724620463.768:90): avc: denied { unmount } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.693638][ T5212] cgroup: Unknown subsys name 'rlimit' [ 67.841516][ T29] audit: type=1400 audit(1724620464.068:91): avc: denied { setattr } for pid=5212 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.864845][ T29] audit: type=1400 audit(1724620464.068:92): avc: denied { create } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.896532][ T29] audit: type=1400 audit(1724620464.068:93): avc: denied { write } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.918358][ T29] audit: type=1400 audit(1724620464.068:94): avc: denied { read } for pid=5212 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.939205][ T29] audit: type=1400 audit(1724620464.098:95): avc: denied { mounton } for pid=5212 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.964881][ T29] audit: type=1400 audit(1724620464.098:96): avc: denied { mount } for pid=5212 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.985469][ T5214] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.988590][ T29] audit: type=1400 audit(1724620464.128:97): avc: denied { read } for pid=4888 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 69.298430][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.854787][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.861382][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.907044][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.930380][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.939514][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.939724][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.955181][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.963092][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.971468][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.978812][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.979303][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.987771][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.993762][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.004565][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.015203][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.015267][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.023441][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.030467][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.043474][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.051974][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.060815][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.064439][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.068022][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.082276][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.084864][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.090460][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.106703][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.134064][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.142517][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.155423][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.180536][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.196963][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.656201][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 72.656219][ T29] audit: type=1400 audit(1724620468.888:112): avc: denied { module_request } for pid=5225 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.737023][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 72.912731][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 73.037226][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 73.057548][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 73.252673][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.260590][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.268089][ T5225] bridge_slave_0: entered allmulticast mode [ 73.275699][ T5225] bridge_slave_0: entered promiscuous mode [ 73.285281][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.292477][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.306383][ T5223] bridge_slave_0: entered allmulticast mode [ 73.314609][ T5223] bridge_slave_0: entered promiscuous mode [ 73.367042][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.374434][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.381555][ T5225] bridge_slave_1: entered allmulticast mode [ 73.389284][ T5225] bridge_slave_1: entered promiscuous mode [ 73.396670][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.403806][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.411563][ T5223] bridge_slave_1: entered allmulticast mode [ 73.419433][ T5223] bridge_slave_1: entered promiscuous mode [ 73.452006][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.459309][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.466665][ T5237] bridge_slave_0: entered allmulticast mode [ 73.473556][ T5237] bridge_slave_0: entered promiscuous mode [ 73.542904][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.552353][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.562234][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.569447][ T5224] bridge_slave_0: entered allmulticast mode [ 73.579045][ T5224] bridge_slave_0: entered promiscuous mode [ 73.586961][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.594050][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.601496][ T5224] bridge_slave_1: entered allmulticast mode [ 73.609541][ T5224] bridge_slave_1: entered promiscuous mode [ 73.616456][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.623598][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.631088][ T5237] bridge_slave_1: entered allmulticast mode [ 73.638594][ T5237] bridge_slave_1: entered promiscuous mode [ 73.658348][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 73.674867][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.688232][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.750321][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.761864][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.823512][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.838204][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.875960][ T5225] team0: Port device team_slave_0 added [ 73.885903][ T5223] team0: Port device team_slave_0 added [ 73.906087][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.947549][ T5237] team0: Port device team_slave_0 added [ 73.957020][ T5225] team0: Port device team_slave_1 added [ 73.964992][ T5223] team0: Port device team_slave_1 added [ 74.000533][ T5224] team0: Port device team_slave_0 added [ 74.014078][ T5237] team0: Port device team_slave_1 added [ 74.052655][ T5224] team0: Port device team_slave_1 added [ 74.115078][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.122028][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.148163][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.165550][ T5233] Bluetooth: hci1: command tx timeout [ 74.165690][ T5232] Bluetooth: hci0: command tx timeout [ 74.171197][ T5243] Bluetooth: hci3: command tx timeout [ 74.176706][ T5230] Bluetooth: hci4: command tx timeout [ 74.197555][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.204988][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.231219][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.244964][ T5230] Bluetooth: hci2: command tx timeout [ 74.272209][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.279464][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.305564][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.317753][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.325805][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.352509][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.372119][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.379107][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.405069][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.431199][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.438214][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.464180][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.476167][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.483118][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.509609][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.538329][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.546079][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.553214][ T5222] bridge_slave_0: entered allmulticast mode [ 74.560543][ T5222] bridge_slave_0: entered promiscuous mode [ 74.568317][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.575700][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.582822][ T5222] bridge_slave_1: entered allmulticast mode [ 74.589965][ T5222] bridge_slave_1: entered promiscuous mode [ 74.597468][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.605505][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.631797][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.769832][ T5225] hsr_slave_0: entered promiscuous mode [ 74.779660][ T5225] hsr_slave_1: entered promiscuous mode [ 74.790182][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.831845][ T5224] hsr_slave_0: entered promiscuous mode [ 74.839372][ T5224] hsr_slave_1: entered promiscuous mode [ 74.845798][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.853541][ T5224] Cannot create hsr debugfs directory [ 74.878716][ T5237] hsr_slave_0: entered promiscuous mode [ 74.885935][ T5237] hsr_slave_1: entered promiscuous mode [ 74.892262][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.899895][ T5237] Cannot create hsr debugfs directory [ 74.909718][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.940385][ T5223] hsr_slave_0: entered promiscuous mode [ 74.946897][ T5223] hsr_slave_1: entered promiscuous mode [ 74.952971][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.960582][ T5223] Cannot create hsr debugfs directory [ 75.072004][ T5222] team0: Port device team_slave_0 added [ 75.081963][ T5222] team0: Port device team_slave_1 added [ 75.227202][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.234344][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.260487][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.305097][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.312051][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.345107][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.595200][ T5222] hsr_slave_0: entered promiscuous mode [ 75.601560][ T5222] hsr_slave_1: entered promiscuous mode [ 75.608957][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.616804][ T5222] Cannot create hsr debugfs directory [ 75.818306][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.832493][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.857833][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.884862][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.963220][ T5224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.975795][ T5224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.997242][ T5224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.013705][ T5224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.118323][ T5237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.135063][ T5237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.156377][ T5237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.169242][ T5237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.244754][ T5230] Bluetooth: hci4: command tx timeout [ 76.250186][ T5230] Bluetooth: hci0: command tx timeout [ 76.254959][ T5232] Bluetooth: hci3: command tx timeout [ 76.257011][ T5230] Bluetooth: hci1: command tx timeout [ 76.323194][ T5223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.332857][ T5230] Bluetooth: hci2: command tx timeout [ 76.367098][ T5223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.381715][ T5223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.392692][ T5223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.438422][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.550217][ T5222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.561070][ T5222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.577038][ T5222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.590638][ T5222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.617216][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.653566][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.661008][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.713350][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.720553][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.743909][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.852587][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.900697][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.920542][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.927745][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.938560][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.945755][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.050926][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.089684][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.123048][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.130251][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.178250][ T29] audit: type=1400 audit(1724620473.408:113): avc: denied { sys_module } for pid=5225 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 77.213530][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.244187][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.251355][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.310595][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.317794][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.371397][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.410048][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.417275][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.501287][ T5237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.578859][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.598676][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.658370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.665583][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.706005][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.713196][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.842655][ T5225] veth0_vlan: entered promiscuous mode [ 77.923588][ T5225] veth1_vlan: entered promiscuous mode [ 77.983152][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.133355][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.155308][ T5225] veth0_macvtap: entered promiscuous mode [ 78.179488][ T5225] veth1_macvtap: entered promiscuous mode [ 78.274010][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.289969][ T5224] veth0_vlan: entered promiscuous mode [ 78.327534][ T5230] Bluetooth: hci3: command tx timeout [ 78.332975][ T5230] Bluetooth: hci0: command tx timeout [ 78.339098][ T5243] Bluetooth: hci4: command tx timeout [ 78.349962][ T5243] Bluetooth: hci1: command tx timeout [ 78.369054][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.394658][ T5224] veth1_vlan: entered promiscuous mode [ 78.404846][ T5243] Bluetooth: hci2: command tx timeout [ 78.433354][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.521214][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.540190][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549025][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558948][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.626153][ T5223] veth0_vlan: entered promiscuous mode [ 78.732152][ T5223] veth1_vlan: entered promiscuous mode [ 78.749401][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.771973][ T5224] veth0_macvtap: entered promiscuous mode [ 78.849356][ T5224] veth1_macvtap: entered promiscuous mode [ 78.909836][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.936518][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.967530][ T5237] veth0_vlan: entered promiscuous mode [ 78.988908][ T5222] veth0_vlan: entered promiscuous mode [ 79.028294][ T5223] veth0_macvtap: entered promiscuous mode [ 79.043019][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.055239][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.069199][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.082394][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.085338][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.096152][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.114947][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.123269][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.125852][ T5223] veth1_macvtap: entered promiscuous mode [ 79.163127][ T5224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.172640][ T5224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.181534][ T5224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.190408][ T5224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.213984][ T5237] veth1_vlan: entered promiscuous mode [ 79.219883][ T29] audit: type=1400 audit(1724620475.438:114): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.cyPalp/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 79.259056][ T29] audit: type=1400 audit(1724620475.448:115): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.288302][ T29] audit: type=1400 audit(1724620475.448:116): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/root/syzkaller.cyPalp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.291812][ T5222] veth1_vlan: entered promiscuous mode [ 79.380391][ T29] audit: type=1400 audit(1724620475.458:117): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.410273][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.427169][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.439667][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.458659][ T29] audit: type=1400 audit(1724620475.468:118): avc: denied { unmount } for pid=5225 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.483660][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.498643][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.507082][ T29] audit: type=1400 audit(1724620475.488:119): avc: denied { mounton } for pid=5225 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 79.532229][ T29] audit: type=1400 audit(1724620475.488:120): avc: denied { mount } for pid=5225 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.556744][ T29] audit: type=1400 audit(1724620475.628:121): avc: denied { read write } for pid=5225 comm="syz-executor" name="loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.582639][ T29] audit: type=1400 audit(1724620475.638:122): avc: denied { open } for pid=5225 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.594899][ T5237] veth0_macvtap: entered promiscuous mode [ 79.621682][ T29] audit: type=1400 audit(1724620475.638:123): avc: denied { ioctl } for pid=5225 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.632795][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.660037][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.674691][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.685819][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.697954][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.718259][ T5223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.741442][ T5223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.752611][ T5223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.768138][ T5223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.790721][ T5237] veth1_macvtap: entered promiscuous mode [ 79.890670][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.907571][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.917969][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.936850][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.949797][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.969063][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.988391][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.010112][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.024308][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.055509][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.072386][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.088051][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.099823][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.110134][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.121239][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.135596][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.242320][ T5237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.255074][ T5237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.263929][ T5237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.273311][ T5237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.306241][ T5222] veth0_macvtap: entered promiscuous mode [ 80.371404][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.399487][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.414986][ T5243] Bluetooth: hci1: command tx timeout [ 80.421118][ T5230] Bluetooth: hci0: command tx timeout [ 80.426638][ T5233] Bluetooth: hci4: command tx timeout [ 80.432015][ T5233] Bluetooth: hci3: command tx timeout [ 80.472936][ T5222] veth1_macvtap: entered promiscuous mode [ 80.484321][ T5243] Bluetooth: hci2: command tx timeout [ 80.562735][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.581899][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.650222][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.663402][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.686742][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.701927][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.712157][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.723427][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.734812][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.746438][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.756413][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.767165][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.804804][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.873058][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.888488][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.903836][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.914889][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.924981][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.938899][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.950984][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.964198][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.977426][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.060691][ T5222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.097973][ T5222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.110188][ T5222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.130981][ T5222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.273733][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.292733][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.640328][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.683674][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.433442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.433836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.812499][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.092736][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.404183][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 84.404202][ T29] audit: type=1400 audit(1724620480.628:152): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.712024][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.719980][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.741844][ T29] audit: type=1400 audit(1724620480.738:153): avc: denied { mounton } for pid=5326 comm="syz.2.6" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.874769][ T5337] process 'syz.4.5' launched './file2' with NULL argv: empty string added [ 84.904621][ T29] audit: type=1400 audit(1724620481.108:154): avc: denied { execute } for pid=5335 comm="syz.4.5" name="file2" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.156908][ T5343] loop0: detected capacity change from 0 to 16384 [ 85.177001][ T5343] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.734655][ T29] audit: type=1400 audit(1724620481.188:155): avc: denied { execute_no_trans } for pid=5335 comm="syz.4.5" path="/0/file2" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.928898][ T29] audit: type=1400 audit(1724620481.348:156): avc: denied { create } for pid=5338 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.974309][ T29] audit: type=1400 audit(1724620481.418:157): avc: denied { read write } for pid=5338 comm="syz.3.8" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.353645][ T29] audit: type=1400 audit(1724620481.428:158): avc: denied { open } for pid=5338 comm="syz.3.8" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.481331][ T29] audit: type=1400 audit(1724620481.888:159): avc: denied { create } for pid=5340 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.588757][ T29] audit: type=1400 audit(1724620483.708:160): avc: denied { mounton } for pid=5352 comm="syz.1.2" path="/proc/3/task" dev="proc" ino=7679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.743684][ T946] cfg80211: failed to load regulatory.db [ 87.978678][ T29] audit: type=1400 audit(1724620484.208:161): avc: denied { ioctl } for pid=5361 comm="syz.3.12" path="/dev/vmci" dev="devtmpfs" ino=683 ioctlcmd=0x7ab scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.319690][ T5365] Bluetooth: MGMT ver 1.23 [ 88.368230][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 65 > 9 [ 89.695192][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 89.695232][ T29] audit: type=1400 audit(1724620485.768:172): avc: denied { name_bind } for pid=5374 comm="syz.1.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 90.329407][ T29] audit: type=1400 audit(1724620485.778:173): avc: denied { write } for pid=5374 comm="syz.1.14" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.675434][ T29] audit: type=1400 audit(1724620486.908:174): avc: denied { create } for pid=5373 comm="syz.3.15" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.698553][ T5386] ======================================================= [ 90.698553][ T5386] WARNING: The mand mount option has been deprecated and [ 90.698553][ T5386] and is ignored by this kernel. Remove the mand [ 90.698553][ T5386] option from the mount to silence this warning. [ 90.698553][ T5386] ======================================================= [ 90.756735][ T5386] overlayfs: conflicting lowerdir path [ 90.883046][ T29] audit: type=1400 audit(1724620486.968:175): avc: denied { mount } for pid=5373 comm="syz.3.15" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.946956][ T29] audit: type=1400 audit(1724620486.988:176): avc: denied { unlink } for pid=5373 comm="syz.3.15" name="#1" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.032127][ T29] audit: type=1400 audit(1724620487.108:177): avc: denied { map } for pid=5385 comm="syz.1.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.119357][ T29] audit: type=1400 audit(1724620487.108:178): avc: denied { read write } for pid=5385 comm="syz.1.17" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.156665][ T29] audit: type=1400 audit(1724620487.238:179): avc: denied { create } for pid=5385 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.194233][ T29] audit: type=1400 audit(1724620487.248:180): avc: denied { bind } for pid=5385 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.273723][ T29] audit: type=1400 audit(1724620487.248:181): avc: denied { create } for pid=5385 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.258200][ T5400] vivid-001: ================= START STATUS ================= [ 93.269571][ T5400] vivid-001: Radio HW Seek Mode: Bounded [ 93.277167][ T5400] vivid-001: Radio Programmable HW Seek: false [ 93.398219][ T5400] vivid-001: RDS Rx I/O Mode: Block I/O [ 93.463740][ T5400] vivid-001: Generate RBDS Instead of RDS: false [ 93.500566][ T5400] vivid-001: RDS Reception: true [ 93.531107][ T5400] vivid-001: RDS Program Type: 0 inactive [ 93.568893][ T5400] vivid-001: RDS PS Name: inactive [ 93.603050][ T5400] vivid-001: RDS Radio Text: inactive [ 93.625705][ T5400] vivid-001: RDS Traffic Announcement: false inactive [ 93.633303][ T5400] vivid-001: RDS Traffic Program: false inactive [ 93.640112][ T5400] vivid-001: RDS Music: false inactive [ 93.645873][ T5400] vivid-001: ================== END STATUS ================== [ 95.834436][ T946] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.174302][ T946] usb 1-1: Using ep0 maxpacket: 8 [ 96.904394][ T946] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.913745][ T946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.039702][ T946] usb 1-1: Product: syz [ 97.065538][ T946] usb 1-1: Manufacturer: syz [ 97.070174][ T946] usb 1-1: SerialNumber: syz [ 97.136284][ T946] usb 1-1: config 0 descriptor?? [ 97.171239][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 97.171254][ T29] audit: type=1400 audit(1724620493.398:200): avc: denied { read } for pid=5439 comm="syz.3.28" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.352206][ T5442] overlayfs: failed to resolve './file1': -2 [ 97.426201][ T5440] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.464769][ T29] audit: type=1400 audit(1724620493.598:201): avc: denied { open } for pid=5439 comm="syz.3.28" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 97.682916][ T29] audit: type=1400 audit(1724620493.648:202): avc: denied { ioctl } for pid=5439 comm="syz.3.28" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.363859][ T29] audit: type=1400 audit(1724620494.588:203): avc: denied { bind } for pid=5445 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.412697][ T946] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 98.428781][ T946] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.478549][ T946] usb 1-1: USB disconnect, device number 2 [ 98.484831][ T29] audit: type=1400 audit(1724620494.708:204): avc: denied { create } for pid=5445 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.704352][ T29] audit: type=1400 audit(1724620495.858:205): avc: denied { create } for pid=5445 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.068346][ T29] audit: type=1400 audit(1724620496.108:206): avc: denied { mount } for pid=5434 comm="syz.1.29" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.159975][ T29] audit: type=1400 audit(1724620496.108:207): avc: denied { remount } for pid=5434 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.268997][ T5446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.31'. [ 100.314471][ T29] audit: type=1400 audit(1724620496.538:208): avc: denied { read write } for pid=5460 comm="syz.3.35" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 100.479993][ T29] audit: type=1400 audit(1724620496.538:209): avc: denied { open } for pid=5460 comm="syz.3.35" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 101.094877][ T5477] overlayfs: workdir and upperdir must reside under the same mount [ 102.240874][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 102.240891][ T29] audit: type=1400 audit(1724620498.468:213): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 102.634075][ T29] audit: type=1400 audit(1724620498.848:214): avc: denied { read } for pid=5480 comm="syz.0.39" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.704161][ T29] audit: type=1400 audit(1724620498.858:215): avc: denied { open } for pid=5480 comm="syz.0.39" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.761121][ T29] audit: type=1400 audit(1724620498.898:216): avc: denied { ioctl } for pid=5480 comm="syz.0.39" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 102.861556][ T29] audit: type=1400 audit(1724620499.058:217): avc: denied { create } for pid=5480 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.903929][ T5231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.955633][ T29] audit: type=1400 audit(1724620499.078:218): avc: denied { write } for pid=5480 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.104174][ T5231] usb 4-1: Using ep0 maxpacket: 8 [ 103.133505][ T5231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.160602][ T5231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.184238][ T5231] usb 4-1: Product: syz [ 103.188430][ T5231] usb 4-1: Manufacturer: syz [ 103.199545][ T5231] usb 4-1: SerialNumber: syz [ 103.241656][ T5231] usb 4-1: config 0 descriptor?? [ 103.297881][ T29] audit: type=1400 audit(1724620499.518:219): avc: denied { execute_no_trans } for pid=5494 comm="syz.1.42" path="/9/file2" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.472666][ T5231] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.498593][ T29] audit: type=1400 audit(1724620500.678:220): avc: denied { map } for pid=5503 comm="syz.4.44" path="socket:[6822]" dev="sockfs" ino=6822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.521198][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.279473][ T5499] vivid-003: ================= START STATUS ================= [ 105.313868][ T5499] vivid-003: Radio HW Seek Mode: Bounded [ 105.322781][ T5499] vivid-003: Radio Programmable HW Seek: false [ 105.324004][ T29] audit: type=1400 audit(1724620500.688:221): avc: denied { read } for pid=5503 comm="syz.4.44" path="socket:[6822]" dev="sockfs" ino=6822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.415277][ T5499] vivid-003: RDS Rx I/O Mode: Block I/O [ 105.423063][ T5499] vivid-003: Generate RBDS Instead of RDS: false [ 105.449278][ T5499] vivid-003: RDS Reception: true [ 105.459876][ T5499] vivid-003: RDS Program Type: 0 inactive [ 105.467985][ T5499] vivid-003: RDS PS Name: inactive [ 105.513138][ T5499] vivid-003: RDS Radio Text: inactive [ 105.523448][ T5481] infiniband syz1: set down [ 105.534292][ T5499] vivid-003: RDS Traffic Announcement: false inactive [ 105.565613][ T5481] infiniband syz1: added ipvlan1 [ 105.587617][ T5499] vivid-003: RDS Traffic Program: false inactive [ 105.593537][ T5481] syz1: rxe_create_cq: returned err = -12 [ 105.611442][ T5499] vivid-003: RDS Music: false inactive [ 105.617223][ T5499] vivid-003: ================== END STATUS ================== [ 105.641961][ T5481] infiniband syz1: Couldn't create ib_mad CQ [ 105.671888][ T5481] infiniband syz1: Couldn't open port 1 [ 105.717572][ T5231] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 105.818767][ T5231] usb 4-1: USB disconnect, device number 2 [ 105.872512][ T5481] RDS/IB: syz1: added [ 105.895732][ T5481] smc: adding ib device syz1 with port count 1 [ 105.936633][ T5481] smc: ib device syz1 port 1 has pnetid [ 108.330252][ T5243] Bluetooth: hci1: command tx timeout [ 109.234623][ T29] audit: type=1400 audit(1724620505.468:222): avc: denied { create } for pid=5545 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.256548][ T5546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 109.383694][ T29] audit: type=1400 audit(1724620505.488:223): avc: denied { write } for pid=5545 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 109.971853][ T29] audit: type=1400 audit(1724620506.188:224): avc: denied { write } for pid=5548 comm="syz.2.55" name="event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.090306][ T29] audit: type=1400 audit(1724620506.188:225): avc: denied { open } for pid=5548 comm="syz.2.55" path="/dev/input/event2" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 112.077450][ T5573] loop0: detected capacity change from 0 to 16384 [ 114.922014][ T29] audit: type=1400 audit(1724620511.148:226): avc: denied { unmount } for pid=5224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 115.480867][ T5598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 117.709922][ T5604] vivid-002: ================= START STATUS ================= [ 117.732738][ T5604] vivid-002: Radio HW Seek Mode: Bounded [ 117.919292][ T5623] overlayfs: conflicting lowerdir path [ 118.944544][ T5604] vivid-002: Radio Programmable HW Seek: false [ 118.950897][ T5604] vivid-002: RDS Rx I/O Mode: Block I/O [ 118.956813][ T5604] vivid-002: Generate RBDS Instead of RDS: false [ 118.963372][ T5604] vivid-002: RDS Reception: true [ 118.969572][ T5604] vivid-002: RDS Program Type: 0 inactive [ 119.003944][ T5604] vivid-002: RDS PS Name: inactive [ 119.015831][ T5604] vivid-002: RDS Radio Text: inactive [ 119.033500][ T5604] vivid-002: RDS Traffic Announcement: false inactive [ 119.042956][ T5604] vivid-002: RDS Traffic Program: false inactive [ 119.082579][ T5604] vivid-002: RDS Music: false inactive [ 119.101964][ T5604] vivid-002: ================== END STATUS ================== [ 120.157572][ T29] audit: type=1400 audit(1724620515.678:227): avc: denied { setattr } for pid=5620 comm="syz.0.72" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 120.449519][ T29] audit: type=1400 audit(1724620516.668:228): avc: denied { read } for pid=5620 comm="syz.0.72" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.044732][ T5645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 123.725220][ T29] audit: type=1400 audit(1724620519.058:229): avc: denied { ioctl } for pid=5651 comm="syz.1.82" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8318 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.482281][ T29] audit: type=1400 audit(1724620520.708:230): avc: denied { remount } for pid=5664 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.074231][ T29] audit: type=1400 audit(1724620521.238:231): avc: denied { create } for pid=5666 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.457136][ T29] audit: type=1400 audit(1724620521.268:232): avc: denied { connect } for pid=5666 comm="syz.1.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.525402][ T29] audit: type=1400 audit(1724620521.638:233): avc: denied { create } for pid=5676 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.918923][ T5702] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 128.439031][ T5693] vivid-002: ================= START STATUS ================= [ 128.450335][ T5693] vivid-002: Radio HW Seek Mode: Bounded [ 128.474297][ T5693] vivid-002: Radio Programmable HW Seek: false [ 128.482369][ T5693] vivid-002: RDS Rx I/O Mode: Block I/O [ 128.488634][ T5693] vivid-002: Generate RBDS Instead of RDS: false [ 128.495198][ T5693] vivid-002: RDS Reception: true [ 128.502776][ T5693] vivid-002: RDS Program Type: 0 inactive [ 128.534199][ T5693] vivid-002: RDS PS Name: inactive [ 128.545725][ T5693] vivid-002: RDS Radio Text: inactive [ 128.556749][ T5693] vivid-002: RDS Traffic Announcement: false inactive [ 128.576329][ T5693] vivid-002: RDS Traffic Program: false inactive [ 128.593268][ T5706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'. [ 128.695715][ T5693] vivid-002: RDS Music: false inactive [ 128.765737][ T5693] vivid-002: ================== END STATUS ================== [ 130.686905][ T5243] Bluetooth: unknown link type 144 [ 130.692148][ T5243] Bluetooth: hci1: connection err: -111 [ 132.241310][ T5727] vivid-004: ================= START STATUS ================= [ 132.267547][ T5727] vivid-004: Radio HW Seek Mode: Bounded [ 132.293207][ T5727] vivid-004: Radio Programmable HW Seek: false [ 132.336208][ T5727] vivid-004: RDS Rx I/O Mode: Block I/O [ 132.389721][ T5727] vivid-004: Generate RBDS Instead of RDS: false [ 132.408505][ T5727] vivid-004: RDS Reception: true [ 132.425673][ T5727] vivid-004: RDS Program Type: 0 inactive [ 132.658004][ T5727] vivid-004: RDS PS Name: inactive [ 132.663790][ T29] audit: type=1400 audit(1724620528.888:234): avc: denied { name_bind } for pid=5748 comm="syz.2.103" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 132.687846][ T5727] vivid-004: RDS Radio Text: inactive [ 132.719742][ T5727] vivid-004: RDS Traffic Announcement: false inactive [ 132.760273][ T29] audit: type=1400 audit(1724620528.888:235): avc: denied { node_bind } for pid=5748 comm="syz.2.103" saddr=172.20.20.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 132.795917][ T5727] vivid-004: RDS Traffic Program: false inactive [ 132.811935][ T5727] vivid-004: RDS Music: false inactive [ 132.821982][ T5727] vivid-004: ================== END STATUS ================== [ 133.297015][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.303479][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.509095][ T5765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 134.972316][ T5779] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.010372][ T5763] vivid-003: ================= START STATUS ================= [ 135.076142][ T5763] vivid-003: Radio HW Seek Mode: Bounded [ 135.106446][ T5763] vivid-003: Radio Programmable HW Seek: false [ 135.107797][ T29] audit: type=1400 audit(1724620531.328:236): avc: denied { ioctl } for pid=5777 comm="syz.2.110" path="socket:[9345]" dev="sockfs" ino=9345 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.331995][ T5763] [ 135.335116][ T5763] vivid-003: RDS Rx I/O Mode: Block I/O [ 135.341076][ T5763] vivid-003: Generate RBDS Instead of RDS: false [ 136.110321][ T5776] vivid-004: ================= START STATUS ================= [ 136.269504][ T5776] vivid-004: Radio HW Seek Mode: Bounded [ 136.275756][ T5776] vivid-004: Radio Programmable HW Seek: false [ 136.282084][ T5776] vivid-004: RDS Rx I/O Mode: Block I/O [ 136.312901][ T5763] vivid-003: RDS Reception: true [ 136.330518][ T5776] vivid-004: Generate RBDS Instead of RDS: false [ 136.364051][ T5763] vivid-003: RDS Program Type: 0 inactive [ 136.376201][ T5763] vivid-003: RDS PS Name: inactive [ 136.384615][ T5763] vivid-003: RDS Radio Text: inactive [ 136.392496][ T5763] vivid-003: RDS Traffic Announcement: false inactive [ 136.405434][ T5763] vivid-003: RDS Traffic Program: false inactive [ 136.424885][ T5763] vivid-003: RDS Music: false inactive [ 136.436702][ T5776] vivid-004: RDS Reception: true [ 136.444412][ T5776] vivid-004: RDS Program Type: 0 inactive [ 136.450283][ T5776] vivid-004: RDS PS Name: inactive [ 136.455715][ T5776] vivid-004: RDS Radio Text: inactive [ 136.464913][ T5776] vivid-004: RDS Traffic Announcement: false inactive [ 136.472037][ T5776] vivid-004: RDS Traffic Program: false inactive [ 136.479427][ T5776] vivid-004: RDS Music: false inactive [ 136.513763][ T5763] vivid-003: ================== END STATUS ================== [ 136.616068][ T5776] vivid-004: ================== END STATUS ================== [ 138.346622][ T5798] syz1: rxe_newlink: already configured on ipvlan1 [ 138.676651][ T5814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 141.634420][ T5243] Bluetooth: unknown link type 144 [ 141.648944][ T5243] Bluetooth: hci3: connection err: -111 [ 145.390264][ T29] audit: type=1400 audit(1724620538.508:237): avc: denied { mount } for pid=5848 comm="syz.2.127" name="/" dev="autofs" ino=8515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 145.652562][ T29] audit: type=1400 audit(1724620541.718:238): avc: denied { unmount } for pid=5223 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 146.620984][ T5863] overlayfs: workdir and upperdir must reside under the same mount [ 148.704383][ T5869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 149.615670][ T5882] vivid-000: ================= START STATUS ================= [ 149.683795][ T5882] vivid-000: Radio HW Seek Mode: Bounded [ 149.739545][ T5882] vivid-000: Radio Programmable HW Seek: false [ 149.786379][ T5882] vivid-000: RDS Rx I/O Mode: Block I/O [ 149.810029][ T5882] vivid-000: Generate RBDS Instead of RDS: false [ 149.826712][ T5882] vivid-000: RDS Reception: true [ 149.833528][ T5882] vivid-000: RDS Program Type: 0 inactive [ 149.843561][ T5882] vivid-000: RDS PS Name: inactive [ 149.857136][ T5882] vivid-000: RDS Radio Text: inactive [ 149.863747][ T5882] vivid-000: RDS Traffic Announcement: false inactive [ 149.953230][ T5882] vivid-000: RDS Traffic Program: false inactive [ 150.007710][ T5882] vivid-000: RDS Music: false inactive [ 150.044240][ T5882] vivid-000: ================== END STATUS ================== [ 150.330141][ T5896] loop0: detected capacity change from 0 to 16384 [ 150.348171][ T5896] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 153.381157][ T5912] overlayfs: conflicting lowerdir path [ 154.376583][ T5916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.145'. [ 154.877194][ T5924] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 155.110071][ T5927] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 156.381023][ T29] audit: type=1400 audit(1724620551.968:239): avc: denied { connect } for pid=5936 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.946222][ T29] audit: type=1400 audit(1724620552.068:240): avc: denied { read } for pid=5936 comm="syz.3.152" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.106471][ T29] audit: type=1400 audit(1724620552.088:241): avc: denied { ioctl } for pid=5936 comm="syz.3.152" path="/dev/uinput" dev="devtmpfs" ino=837 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.131356][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.189708][ T29] audit: type=1400 audit(1724620552.138:242): avc: denied { ioctl } for pid=5936 comm="syz.3.152" path="socket:[9570]" dev="sockfs" ino=9570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.837800][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 158.609460][ T5949] vivid-001: ================= START STATUS ================= [ 158.629862][ T5949] vivid-001: Radio HW Seek Mode: Bounded [ 158.650696][ T5949] vivid-001: Radio Programmable HW Seek: false [ 158.678368][ T5949] vivid-001: RDS Rx I/O Mode: Block I/O [ 158.693536][ T5949] vivid-001: Generate RBDS Instead of RDS: false [ 158.724148][ T5949] vivid-001: RDS Reception: true [ 158.733605][ T5949] vivid-001: RDS Program Type: 0 inactive [ 158.918056][ T5949] vivid-001: RDS PS Name: inactive [ 158.923349][ T5949] vivid-001: RDS Radio Text: inactive [ 158.931850][ T5949] vivid-001: RDS Traffic Announcement: false inactive [ 158.945658][ T5949] vivid-001: RDS Traffic Program: false inactive [ 158.952270][ T5949] vivid-001: RDS Music: false inactive [ 160.233897][ T5949] vivid-001: ================== END STATUS ================== [ 161.525816][ T5985] netlink: 140 bytes leftover after parsing attributes in process `syz.4.165'. [ 161.590348][ T5985] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 161.811688][ T5985] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 162.242166][ T5985] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 162.362781][ T5985] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 162.558110][ T5985] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 162.616034][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 162.873129][ T5998] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 163.348094][ T5994] vivid-001: ================= START STATUS ================= [ 163.356121][ T5994] vivid-001: Radio HW Seek Mode: Bounded [ 163.362037][ T5994] vivid-001: Radio Programmable HW Seek: false [ 163.369630][ T5994] vivid-001: RDS Rx I/O Mode: Block I/O [ 163.375857][ T5994] vivid-001: Generate RBDS Instead of RDS: false [ 163.384229][ T5994] vivid-001: RDS Reception: true [ 163.389308][ T5994] vivid-001: RDS Program Type: 0 inactive [ 163.399845][ T5994] vivid-001: RDS PS Name: inactive [ 163.405739][ T5994] vivid-001: RDS Radio Text: inactive [ 163.411441][ T5994] vivid-001: RDS Traffic Announcement: [ 163.413075][ T29] audit: type=1326 audit(1724620559.608:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6003 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3835d79e79 code=0x7fc00000 [ 163.447681][ T5994] false inactive [ 163.512564][ T5994] vivid-001: RDS Traffic Program: false inactive [ 163.562263][ T5994] vivid-001: RDS Music: false inactive [ 163.573968][ T5994] vivid-001: ================== END STATUS ================== [ 163.724885][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.736705][ T5308] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 163.965451][ T5308] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.994813][ T5308] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.007318][ T5308] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.019639][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.106439][ T29] audit: type=1326 audit(1724620560.318:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6003 comm="syz.2.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3835d79e79 code=0x7fc00000 [ 164.452229][ T6008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.501742][ T5308] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.063616][ T5315] usb 4-1: USB disconnect, device number 3 [ 165.213427][ T5276] udevd[5276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.742860][ T6033] loop0: detected capacity change from 0 to 16384 [ 165.752583][ T6033] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.153882][ T29] audit: type=1400 audit(1724620562.378:245): avc: denied { setopt } for pid=6035 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.619756][ T6042] netlink: 140 bytes leftover after parsing attributes in process `syz.0.178'. [ 166.658933][ T6042] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 166.689852][ T6042] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 166.734199][ T6042] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 166.757588][ T6042] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 166.773259][ T6042] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 169.757594][ T6060] netlink: 'syz.2.184': attribute type 12 has an invalid length. [ 170.703085][ T6069] netlink: 140 bytes leftover after parsing attributes in process `syz.2.189'. [ 171.296189][ T6077] loop0: detected capacity change from 0 to 16384 [ 171.312105][ T6077] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.995763][ T5243] Bluetooth: hci2: command tx timeout [ 172.154086][ C0] sched: RT throttling activated [ 172.210705][ T6069] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 172.228286][ T6069] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 172.274194][ T6069] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 172.284435][ T6069] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 172.292215][ T6069] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 172.507737][ T29] audit: type=1400 audit(1724620568.688:246): avc: denied { create } for pid=6084 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.305908][ T6098] loop0: detected capacity change from 0 to 16384 [ 173.316752][ T6098] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.294654][ T6121] netlink: 'syz.3.199': attribute type 12 has an invalid length. [ 177.894386][ T29] audit: type=1400 audit(1724620574.058:247): avc: denied { ioctl } for pid=6141 comm="syz.0.204" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 178.280660][ T6146] loop0: detected capacity change from 0 to 16384 [ 178.291326][ T6146] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 178.800226][ T6142] 9pnet_fd: Insufficient options for proto=fd [ 180.277046][ T6168] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 180.307438][ T6168] netlink: 9292 bytes leftover after parsing attributes in process `syz.0.208'. [ 180.337103][ T6168] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 180.352215][ T6168] netlink: 'syz.0.208': attribute type 2 has an invalid length. [ 181.238974][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 65 > 9 [ 182.096844][ T29] audit: type=1800 audit(1724620578.308:248): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.211" name="/newroot/43/file0" dev="tmpfs" ino=248 res=0 errno=0 [ 184.229692][ T6191] vivid-004: ================= START STATUS ================= [ 184.267345][ T6191] vivid-004: Radio HW Seek Mode: Bounded [ 184.273272][ T6191] vivid-004: Radio Programmable HW Seek: false [ 184.343583][ T6191] vivid-004: RDS Rx I/O Mode: Block I/O [ 184.654240][ T6191] vivid-004: Generate RBDS Instead of RDS: false [ 184.666726][ T6191] vivid-004: RDS Reception: true [ 184.680173][ T6191] vivid-004: RDS Program Type: 0 inactive [ 184.693221][ T6191] vivid-004: RDS PS Name: inactive [ 184.700240][ T6191] vivid-004: RDS Radio Text: inactive [ 184.722414][ T6191] vivid-004: RDS Traffic Announcement: false inactive [ 184.793406][ T6191] vivid-004: RDS Traffic Program: false inactive [ 184.825135][ T6191] vivid-004: RDS Music: false inactive [ 184.878838][ T6191] vivid-004: ================== END STATUS ================== [ 185.465857][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 185.684166][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 185.764802][ T52] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.780285][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.803373][ T52] usb 3-1: Product: syz [ 185.812958][ T52] usb 3-1: Manufacturer: syz [ 185.832851][ T52] usb 3-1: SerialNumber: syz [ 185.869272][ T52] usb 3-1: config 0 descriptor?? [ 185.916451][ T6219] vivid-001: ================= START STATUS ================= [ 185.925466][ T6219] vivid-001: Radio HW Seek Mode: Bounded [ 185.932289][ T6219] vivid-001: Radio Programmable HW Seek: false [ 185.962049][ T6219] vivid-001: RDS Rx I/O Mode: Block I/O [ 186.125778][ T6219] vivid-001: Generate RBDS Instead of RDS: false [ 186.134199][ T6219] vivid-001: RDS Reception: true [ 186.176163][ T52] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.508267][ T6226] vivid-004: ================= START STATUS ================= [ 186.521453][ T6219] vivid-001: RDS Program Type: 0 inactive [ 187.226621][ T5243] Bluetooth: hci2: command tx timeout [ 187.257432][ T6219] vivid-001: RDS PS Name: inactive [ 187.263583][ T6219] vivid-001: RDS Radio Text: inactive [ 187.269531][ T6219] vivid-001: RDS Traffic Announcement: false inactive [ 187.276964][ T6219] vivid-001: RDS Traffic Program: false inactive [ 187.284438][ T5233] Bluetooth: hci0: command tx timeout [ 187.293770][ T6219] vivid-001: RDS Music: false inactive [ 187.301837][ T6219] vivid-001: ================== END STATUS ================== [ 187.319901][ T6226] vivid-004: Radio HW Seek Mode: Bounded [ 187.326806][ T6226] vivid-004: Radio Programmable HW Seek: false [ 187.333111][ T6226] vivid-004: RDS Rx I/O Mode: Block I/O [ 187.339198][ T6226] vivid-004: Generate RBDS Instead of RDS: false [ 187.346021][ T6226] vivid-004: RDS Reception: true [ 187.351521][ T6226] vivid-004: RDS Program Type: 0 inactive [ 187.357478][ T6226] vivid-004: RDS PS Name: inactive [ 187.362871][ T6226] vivid-004: RDS Radio Text: inactive [ 187.369630][ T6226] vivid-004: RDS Traffic Announcement: false inactive [ 187.376914][ T6226] vivid-004: RDS Traffic Program: false inactive [ 187.383658][ T6226] vivid-004: RDS Music: false inactive [ 187.389979][ T6226] vivid-004: ================== END STATUS ================== [ 187.525029][ T52] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 188.581306][ T1170] usb 3-1: USB disconnect, device number 2 [ 188.770993][ T29] audit: type=1400 audit(1724620584.998:249): avc: denied { create } for pid=6253 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.534157][ T29] audit: type=1400 audit(1724620588.758:250): avc: denied { create } for pid=6268 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 192.658901][ T29] audit: type=1400 audit(1724620588.838:251): avc: denied { ioctl } for pid=6268 comm="syz.3.231" path="socket:[9134]" dev="sockfs" ino=9134 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 193.936443][ T6295] loop0: detected capacity change from 0 to 16384 [ 193.945066][ T6295] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 194.699976][ T6287] vivid-003: ================= START STATUS ================= [ 194.736903][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.743265][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.753641][ T6287] vivid-003: Radio HW Seek Mode: Bounded [ 194.779823][ T6287] vivid-003: Radio Programmable HW Seek: false [ 194.819014][ T6287] vivid-003: RDS Rx I/O Mode: Block I/O [ 194.825030][ T6287] vivid-003: Generate RBDS Instead of RDS: false [ 194.831544][ T6287] vivid-003: RDS Reception: true [ 194.837178][ T6287] vivid-003: RDS Program Type: 0 inactive [ 194.843132][ T6287] vivid-003: RDS PS Name: inactive [ 194.858805][ T6287] vivid-003: RDS Radio Text: inactive [ 194.865319][ T6287] vivid-003: RDS Traffic Announcement: false inactive [ 194.872972][ T6287] vivid-003: RDS Traffic Program: false inactive [ 194.880265][ T6287] vivid-003: RDS Music: false inactive [ 194.886360][ T6287] vivid-003: ================== END STATUS ================== [ 196.809467][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 196.816887][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 196.823961][ T4612] Bluetooth: hci0: command 0x0406 tx timeout [ 196.830885][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 196.837280][ T5239] Bluetooth: hci4: command 0x0405 tx timeout [ 197.247788][ T6321] netlink: 'syz.4.243': attribute type 12 has an invalid length. [ 197.280630][ T6324] loop0: detected capacity change from 0 to 16384 [ 197.452637][ T6326] overlayfs: conflicting lowerdir path [ 200.638180][ T6346] overlayfs: conflicting lowerdir path [ 202.025066][ T5280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.287760][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 202.814830][ T5280] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 202.825464][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.913511][ T5280] usb 5-1: Product: syz [ 202.940659][ T5280] usb 5-1: Manufacturer: syz [ 202.978302][ T5280] usb 5-1: SerialNumber: syz [ 203.043415][ T5280] usb 5-1: config 0 descriptor?? [ 203.051747][ T6359] vivid-003: ================= START STATUS ================= [ 203.062219][ T6359] vivid-003: Radio HW Seek Mode: Bounded [ 203.081792][ T6359] vivid-003: Radio Programmable HW Seek: false [ 203.099265][ T5280] gspca_main: spca500-2.14.0 probing 046d:0900 [ 203.110473][ T6359] vivid-003: RDS Rx I/O Mode: Block I/O [ 203.118213][ T6359] vivid-003: Generate RBDS Instead of RDS: false [ 203.128968][ T6359] vivid-003: RDS Reception: true [ 203.249073][ T6359] vivid-003: RDS Program Type: 0 inactive [ 203.260092][ T6359] vivid-003: RDS PS Name: inactive [ 203.286014][ T6359] vivid-003: RDS Radio Text: [ 203.318928][ T6377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'. [ 203.320903][ T6359] inactive [ 203.336239][ T6359] vivid-003: RDS Traffic Announcement: false inactive [ 203.360248][ T6359] vivid-003: RDS Traffic Program: false inactive [ 203.555558][ T5280] gspca_spca500: reg write: error -71 [ 203.565663][ T6359] vivid-003: RDS Music: false inactive [ 203.580588][ T5280] gspca_spca500: reg write: error -71 [ 203.602553][ T6359] vivid-003: ================== END STATUS ================== [ 203.612509][ T5280] gspca_spca500: reg write: error -71 [ 203.654324][ T5280] gspca_spca500: reg write: error -71 [ 203.661808][ T6364] vivid-000: ================= START STATUS ================= [ 203.684347][ T6364] vivid-000: Radio HW Seek Mode: Bounded [ 203.688528][ T5280] gspca_spca500: reg write: error -71 [ 203.700181][ T6364] [ 203.706488][ T6364] vivid-000: Radio Programmable HW Seek: false [ 203.742816][ T5280] gspca_spca500: reg write: error -71 [ 203.758040][ T5280] gspca_spca500: reg write: error -71 [ 203.765415][ T6364] vivid-000: RDS Rx I/O Mode: Block I/O [ 203.788780][ T6364] vivid-000: Generate RBDS Instead of RDS: false [ 203.798288][ T6364] vivid-000: RDS Reception: [ 203.798864][ T5280] gspca_spca500: reg write: error -71 [ 203.809610][ T6364] true [ 203.812718][ T6364] vivid-000: RDS Program Type: 0 inactive [ 203.829957][ T6364] vivid-000: RDS PS Name: inactive [ 203.855948][ T6364] vivid-000: RDS Radio Text: inactive [ 203.861759][ T6364] vivid-000: RDS Traffic Announcement: false inactive [ 203.868878][ T6364] vivid-000: RDS Traffic Program: false inactive [ 203.875465][ T6364] vivid-000: RDS Music: false inactive [ 203.883418][ T6364] vivid-000: ================== END STATUS ================== [ 203.901135][ T5280] gspca_spca500: reg write: error -71 [ 203.914635][ T5280] gspca_spca500: reg write: error -71 [ 203.926848][ T5280] gspca_spca500: reg write: error -71 [ 203.943834][ T5280] gspca_spca500: reg write: error -71 [ 203.954091][ T5280] gspca_spca500: reg write: error -71 [ 203.974680][ T5280] usb 5-1: USB disconnect, device number 2 [ 204.044397][ T6387] loop0: detected capacity change from 0 to 16384 [ 204.293771][ T6389] netlink: 'syz.3.257': attribute type 12 has an invalid length. [ 204.324496][ T5243] Bluetooth: hci4: command 0x0405 tx timeout [ 206.142176][ T29] audit: type=1400 audit(1724620602.368:252): avc: denied { read } for pid=6392 comm="syz.4.258" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.180535][ T5308] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 206.203341][ T29] audit: type=1400 audit(1724620602.398:253): avc: denied { open } for pid=6392 comm="syz.4.258" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.429596][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 207.223630][ T5308] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.406553][ T5308] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.424262][ T5308] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.455839][ T5308] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 207.470420][ T5308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.495264][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 207.729884][ T29] audit: type=1400 audit(1724620603.958:254): avc: denied { write } for pid=6416 comm="syz.2.265" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.864776][ T6422] loop0: detected capacity change from 0 to 16384 [ 207.878781][ T6422] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.067468][ T6429] overlayfs: conflicting lowerdir path [ 211.204878][ T5308] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 211.264875][ T5308] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 212.747407][ T29] audit: type=1400 audit(1724620608.978:255): avc: denied { read } for pid=4659 comm="acpid" name="mouse1" dev="devtmpfs" ino=2357 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.800105][ T5308] usb 4-1: USB disconnect, device number 4 [ 212.800149][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 212.999886][ T6455] loop0: detected capacity change from 0 to 16384 [ 213.010808][ T6455] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.070940][ T6453] overlayfs: conflicting lowerdir path [ 213.131637][ T29] audit: type=1400 audit(1724620608.978:256): avc: denied { open } for pid=4659 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2357 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.548696][ T29] audit: type=1400 audit(1724620608.978:257): avc: denied { ioctl } for pid=4659 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2357 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 213.643512][ T5232] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 213.703856][ T29] audit: type=1400 audit(1724620609.888:258): avc: denied { connect } for pid=6457 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 213.809750][ T29] audit: type=1400 audit(1724620609.888:259): avc: denied { name_connect } for pid=6457 comm="syz.2.275" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 214.012995][ T6471] overlayfs: conflicting lowerdir path [ 216.684162][ T5280] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.908603][ T5280] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.037929][ T5280] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 217.157119][ T5280] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.250218][ T5280] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 217.272472][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.350751][ T6494] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.685296][ T5232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 217.694531][ T5232] Bluetooth: hci1: Injecting HCI hardware error event [ 217.706926][ T5232] Bluetooth: hci1: hardware error 0x00 [ 217.838204][ T6501] vivid-000: ================= START STATUS ================= [ 217.847690][ T6501] vivid-000: Radio HW Seek Mode: Bounded [ 217.853445][ T6501] vivid-000: Radio Programmable HW Seek: false [ 217.865338][ T6501] vivid-000: RDS Rx I/O Mode: Block I/O [ 218.074215][ T6501] vivid-000: Generate RBDS Instead of RDS: false [ 219.153118][ T6501] vivid-000: RDS Reception: true [ 219.162702][ T6501] vivid-000: RDS Program Type: 0 inactive [ 219.185710][ T6501] vivid-000: RDS PS Name: inactive [ 219.191157][ T6501] vivid-000: RDS Radio Text: inactive [ 219.197777][ T6501] vivid-000: RDS Traffic Announcement: false inactive [ 219.214123][ T6501] vivid-000: RDS Traffic Program: false inactive [ 219.229617][ T6501] vivid-000: RDS Music: false inactive [ 219.235450][ T6501] vivid-000: ================== END STATUS ================== [ 219.278874][ T6517] vivid-000: disconnect [ 219.294596][ T29] audit: type=1400 audit(1724620615.518:260): avc: denied { write } for pid=6493 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 219.540099][ T5243] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 219.886759][ T6528] overlayfs: conflicting lowerdir path [ 219.893666][ T5232] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 221.416799][ T6499] vivid-000: reconnect [ 221.443809][ T5280] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 221.521086][ T5280] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input11 [ 223.604281][ T5232] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 223.612985][ T5232] Bluetooth: hci2: Injecting HCI hardware error event [ 223.622506][ T5243] Bluetooth: hci2: hardware error 0x00 [ 256.169915][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.176343][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.013986][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 330.020962][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1311/1:b..l [ 330.029185][ C0] rcu: (detected by 0, t=10502 jiffies, g=17417, q=120 ncpus=2) [ 330.036932][ C0] task:kworker/u8:8 state:R running task stack:23344 pid:1311 tgid:1311 ppid:2 flags:0x00004000 [ 330.049352][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 330.057195][ C0] Call Trace: [ 330.060497][ C0] [ 330.063417][ C0] __schedule+0xe37/0x5490 [ 330.067832][ C0] ? __pfx_mark_lock+0x10/0x10 [ 330.072587][ C0] ? __pfx___schedule+0x10/0x10 [ 330.077427][ C0] ? hlock_class+0x4e/0x130 [ 330.081920][ C0] ? mark_held_locks+0x9f/0xe0 [ 330.086667][ C0] preempt_schedule_irq+0x51/0x90 [ 330.091676][ C0] irqentry_exit+0x36/0x90 [ 330.096079][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.102049][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 330.107324][ C0] Code: c1 05 8a 10 9a 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 330.126919][ C0] RSP: 0018:ffffc90004c6fa70 EFLAGS: 00000206 [ 330.132973][ C0] RAX: dffffc0000000000 RBX: 1ffff9200098df50 RCX: 0000000000000001 [ 330.140931][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cc7a0 RDI: ffffffff8bb09ac0 [ 330.148895][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff28c5ae0 [ 330.156887][ C0] R10: ffffffff9462d707 R11: 0000000000000000 R12: 0000000000000000 [ 330.164865][ C0] R13: 0000000000000000 R14: ffffffff8ddb5be0 R15: 0000000000000000 [ 330.172846][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 330.177867][ C0] ? batadv_iv_ogm_schedule_buff+0x75c/0x14d0 [ 330.183949][ C0] ? __pfx_lock_release+0x10/0x10 [ 330.188963][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 330.194237][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.199421][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 330.205821][ C0] ? batadv_tvlv_container_ogm_append+0x3c5/0x510 [ 330.212236][ C0] batadv_iv_ogm_schedule_buff+0x5ac/0x14d0 [ 330.218120][ C0] ? batadv_iv_ogm_schedule_buff+0x5a6/0x14d0 [ 330.224171][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 330.230512][ C0] ? batadv_send_skb_packet+0x56e/0x6b0 [ 330.236043][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x31e/0x8d0 [ 330.243055][ C0] process_one_work+0x9c5/0x1b40 [ 330.247983][ C0] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 330.254040][ C0] ? __pfx_process_one_work+0x10/0x10 [ 330.259398][ C0] ? assign_work+0x1a0/0x250 [ 330.263969][ C0] worker_thread+0x6c8/0xed0 [ 330.268583][ C0] ? __kthread_parkme+0x148/0x220 [ 330.273612][ C0] ? __pfx_worker_thread+0x10/0x10 [ 330.278716][ C0] kthread+0x2c1/0x3a0 [ 330.282764][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.287948][ C0] ? __pfx_kthread+0x10/0x10 [ 330.292516][ C0] ret_from_fork+0x45/0x80 [ 330.296920][ C0] ? __pfx_kthread+0x10/0x10 [ 330.301492][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.306245][ C0] [ 330.309348][ C0] rcu: rcu_preempt kthread starved for 10161 jiffies! g17417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 330.320521][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 330.330469][ C0] rcu: RCU grace-period kthread stack dump: [ 330.336350][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 330.348061][ C0] Call Trace: [ 330.351321][ C0] [ 330.354237][ C0] __schedule+0xe37/0x5490 [ 330.358641][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 330.363847][ C0] ? __pfx___schedule+0x10/0x10 [ 330.368683][ C0] ? schedule+0x298/0x350 [ 330.372995][ C0] ? __pfx_lock_release+0x10/0x10 [ 330.378002][ C0] ? __pfx___mod_timer+0x10/0x10 [ 330.382924][ C0] ? lock_acquire+0x1b1/0x560 [ 330.387584][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 330.393025][ C0] schedule+0xe7/0x350 [ 330.397081][ C0] schedule_timeout+0x136/0x2a0 [ 330.401936][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 330.407291][ C0] ? __pfx_process_timeout+0x10/0x10 [ 330.412558][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.418351][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 330.423793][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 330.428540][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 330.433813][ C0] ? rcu_gp_init+0xc82/0x1630 [ 330.438476][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 330.444275][ C0] rcu_gp_kthread+0x271/0x380 [ 330.448965][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.454149][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.459334][ C0] ? __kthread_parkme+0x148/0x220 [ 330.464347][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.469529][ C0] kthread+0x2c1/0x3a0 [ 330.473576][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.478759][ C0] ? __pfx_kthread+0x10/0x10 [ 330.483327][ C0] ret_from_fork+0x45/0x80 [ 330.487732][ C0] ? __pfx_kthread+0x10/0x10 [ 330.492300][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.497051][ C0] [ 330.500053][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 330.506359][ C0] Sending NMI from CPU 0 to CPUs 1: [ 330.511557][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20