last executing test programs: 24.415609816s ago: executing program 1 (id=226): openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x400c815}, 0x8814) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000070000000060a010100000000000000000100000208000b400000000048000480140001800b0001006578746864720000040002803000018008000100636d70002400028010009004090001009c979b3226000000080001400000000208000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='./file1\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000540)='./bus\x00', &(0x7f0000000280), &(0x7f00000003c0)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x2) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x201883, &(0x7f00000015c0)={[], [{@pcr={'pcr', 0x3d, 0x7}}, {@permit_directio}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_eq}, {@uid_eq}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4004) 21.643806308s ago: executing program 1 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f00000007c0)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x60, 0x11, 0x1, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89}, @routing={0x3c, 0x0, 0x2, 0x1}], {0x4e24, 0x4e21, 0x50, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef4004"}}}}}, 0x96) r4 = socket(0xf, 0x4, 0x0) unshare(0x20400) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r5, 0x800000000000000}, 0x38) r6 = socket(0x2b, 0x80801, 0x1) shutdown(r6, 0x7ffffffe) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r8, @ANYBLOB, @ANYRES8=r8], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000150) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80801, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) write(r4, &(0x7f0000000040)="0f03000019002551", 0x8) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x880) 19.241520271s ago: executing program 1 (id=239): syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x62c, 0x1a}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xfff}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x1, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x608, 0x93, 0x1, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xf, 0x5f, {0x7, 0x25, 0x1, 0xc, 0x65, 0x8001}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x33, 0x0}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x5, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone3(&(0x7f0000000380)={0x800100, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x6, 0xfbd5]}, {0x7, 0x3, 0x7fff, 0x4}}, 0x8000, &(0x7f0000000080), &(0x7f00000000c0)=0x4}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40100040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xb, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x40000) 17.73189779s ago: executing program 2 (id=244): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="050000000100", 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234c00000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15.045262198s ago: executing program 2 (id=247): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xf3, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xde, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 14.817000898s ago: executing program 4 (id=248): socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 14.610589036s ago: executing program 2 (id=249): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded147e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd2bf35239d2", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4000005, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r4 = dup(r1) read$FUSE(r4, &(0x7f0000003c40)={0x2020}, 0xffffff0a) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) 14.065020049s ago: executing program 1 (id=250): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10}, 0x8) fadvise64(r0, 0x200, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1004}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') openat$drirender128(0xffffff9c, 0x0, 0x410000, 0x0) open$dir(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff06}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 13.3408287s ago: executing program 4 (id=251): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x621, @private1, 0xd}]}, &(0x7f0000000140)=0x10) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(r3, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x8000, 0x1, 0x61}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 12.293403532s ago: executing program 1 (id=252): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x66020000) r5 = gettid() timer_create(0x2, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r8) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r8, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r9, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000bfd000/0x400000)=nil) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setuid(0xee00) write$binfmt_format(r11, &(0x7f0000000140)='1\x00', 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r10, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) 12.186698431s ago: executing program 2 (id=253): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x30, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x9, 0x8, 0x0, 0x1, "8c5f8a2f45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r4, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}}, 0x0) (async) r6 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r6, 0x0, 0x20004f) io_setup(0x7d, &(0x7f0000000600)) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) splice(r7, 0x0, r9, 0x0, 0xa004, 0x0) (async) io_setup(0x3, &(0x7f0000000500)=0x0) io_destroy(r10) (async, rerun: 64) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) (async) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000500)={0xa, @win={{0x7, 0x2, 0x8, 0x95}, 0x1c, 0x0, 0x0, 0x3, 0x0, 0x5}}) (async) io_cancel(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0) 11.177132073s ago: executing program 2 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x22f0}, @void, @eth={@empty, @local, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xd, 0x24, 0x60, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @opaque="0f12426c4c0f8208"}}}}}}, 0x3a) 10.371991144s ago: executing program 2 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=@newtaction={0x18, 0x76, 0x1, 0x70bd26, 0x3, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg(r5, &(0x7f0000001680)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x8b, @remote, 0x5e}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000540)="d6b08884c7abfc6459b38a264163d0ea01432cc4927983ff9421c68ed3ac9b77b6193faa189f545b38851952f1fac239e17eccd42e02da11338439ae5fa5a5147e3f4f3561395e2cf95bdfb9ba8d07bee52ad3d4d1f708b46a5e8c208a0ac4afc2197f5ef8cb14443b643276253e80a4c8f8951abca00ae72d162c530487db39baa716f3133083c952c75599c23bcfbaef859efccb0b9bc8a2b25056b050af75ef2ecd811217a5971f59651396a24a461a7ea68d24720fc046c38f15ccef7bf1272968cefd2ff30213a97d0a2b0093b986b8fdd3a7ebbb", 0xd7}], 0x2, &(0x7f0000000680)=[{0xb0, 0x112, 0x40, "a502a8d5017c3ef73cb4428fcadf7b676912da4e60d07f45e59ddb216c9b8bea331e4c0778b4459eaf24760788316e54d04e89aacfa2b887764711d5324e05749d5eef87b91481cfe11fb96b120baa4bd5040df97cd4fda078e576a508bd009466dfd044ee83aa92f2a6e7af9af47e63bcea0bfcb8cdbd3d8098513a1eca76f1cc08b98b06eca8ba92f001bb0e8da301f9eb6cc9bbb51d3e74bc218cda3f"}, {0xd8, 0x10e, 0x8, "bf133201ba560b62eee081cb2c65eb0375fe2180be56b123b67bb80f7b317cbaec53ebd5f537a4a60d1b73ccb9f61e99347e452c2d417995b21d270f5298fb207db2dcf48167d81bc9a724a04a973fe2c21692223b5f01bace11986a3012c3c61bc929449b143213287e7504a274dbf3b28f0773831863cd771646a34789f0345e001039613fd1a488d6a9c6e38244d06a412b3ec41f094ea91b6d78d047f2f4eeffbac13c7db44327995742b8e42dca10997eb619781fa989869c19915114f46a6a3c99d0f9"}, {0x70, 0x118, 0x6, "1b766d92acfe4d32ede32b6fcca2cf0069452bcbbe1d5f97b85adc66267da2c2fa3d09a1106ac5291b4bdc668cf4979c0b48ea2366eb7372a58e84dea24bec6316f5756b60e7506641a89a0ed2ea4b15d649d0188973c00fb0d6"}], 0x1f8}}, {{&(0x7f0000000880)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfc}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000900)="e637156f8fc10522aeeb8b53a33771c50c784bbaa071636960700486c581bfe19dbd0301b30a24c2e81aa501f2949ddc40ea33338b783c15184e", 0x3a}, {&(0x7f0000000940)="9a3fb37983445e275c8ce2361f38b01a9c2cfe402c63537b219201aa599c08fccd3ee816f931e9b399bf8478455b983a3060ac5b00cb1b5946cf6e59bef6dc6a7e5329489695df89bb63d5fce91096f992468ba9345ce37167c4", 0x5a}, {&(0x7f00000009c0)="b764097f917ef6c41b531d81778dfb11852945477b1a5d19c492fc", 0x1b}, {&(0x7f0000000a00)="967ba74d84e2b4a81badbab69b2e2845593a89950f8282eef3e16680d95275d273614cddde09fda40f5fde4a0d504ca553dc9027ccae2783eee3ff658c1869610caf7ce686873c075b448d3b6bf3454dfc676a9c33d34fdb142525804fb4fa02591d0f5212b669737f6383ada981f22e95c65b07fbc4a33f9ff46f27b72fc3333e1a9760ee467f73d2778fd940a6ec08ce0e6d82c3d8e06be1bbfcda1044849c35cf1a592ecc792180a7057f1d2246334b41997fcb125f602476faecb7c5312ab58b0921b40359a5486f32df44d7bcd411cd9aea8ef986c6ac61f96256a002071c86", 0xe2}, {&(0x7f0000000b00)="faa27fece905006b47118aa1e75f87cf4baacf4216ce69fc39eef05d4203791745023c57dace08b9964dea9b7aa8725d1e606bc193cd644022ca42d7aa4f7e007abf1bbfed1faff78f3fdd4439bba7f8557790510ead1138f07cbb72f6ab909111d9f3410c42961ee7f5d0878a523ee1c390de17c50ab756b7d0abd9f1fe07a77bbe734100999726dd39d8a4a4097268082cd5d367b3eaee521c0100801271dd4594bbc813b47fd78e358607690d2e9a3a92365d0bea97b2c4e79e552ccd83b01213c6a2f62b8c9c16673387c022bd90a091859acb62a5f0808ba7a350c75f018bf4fd1d2878aef7db871a455a8cfcb652", 0xf1}, {&(0x7f0000000c00)="5780edd423fa5df585cdad0049f1bf21bfe38339265537f4e221f9e2ac503d8122fe49bbe43ef05c550d33c1c974ff8203bcbe6736b9e43da978f25d3c23f627ccc6ea0ae9fce69cf0b047a90156725720a3f7c72be84049104705694f1cd09017bc4da5f8fb9dc52689d46d556c62ca92b07e78cdf71ff1d80c2c360d059e3f8cc6ca8c4b2fd8d621956cac8bd27ca5e57ffc29e663860e8a296ab254a88072e9a9b0ac3af182e87b66ac3c35b2b2c03a3bf76fdd90a8df1f05c8829f", 0xbd}, {&(0x7f0000000cc0)="9841f04235835094b5d741ee7bea47558af711e405bfc8005700ed28ecc7777a409618c05096123574fa1311e91e780c26e3ae216dff58c323a4ca93f18c4f30dd", 0x41}], 0x7, &(0x7f0000000dc0)=[{0x20, 0x116, 0x9, "55e4644388bce2907c20cd65398fbc"}, {0xe8, 0x38f, 0x4, "9041021d3acd6e023bff0a5d1574447de50d7677f40afbb9c9f723ab134d062d3544b3c7f252551c3cd82847ef8d58836c10d159178323d65f0481a0dcbad1703736da498311db0d58d5dab06606f4a136f581002d405837bcc7afc1d4d336e287884945299f745778022979f4e6f6987a3df3f7fe4ae2c4eab1b7f7696588213af0f8f80a8fe25e96298d1178cd87c2315846b559b485a19d0c5ba3ebd504c7707c15732e28855f9d587a6fbc6559087b3da1cfe7789c08675e43e4afa180703508b76093a7a60b27be1340152f420a56b5d56c23"}], 0x108}}, {{&(0x7f0000000f00)=@can, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)="c3ddc04762b28b80af735891cf4e2cce7f3c91e3219dadb6702c59bcecdf800fd13902b3ba76c0e6ca1c78ac7b5cd26884fb0f573d95734390d63f3a21e32b2e7eb5d97a4492238b82a5d91bc3e8d795960e1aaf283885a608025ce2da8159f85d0792e63d2b0284b3b05760bf77edbc147ff2ce8eb294456f056f344fcf72f083bbbf0412604c6aadad579b302fc461857af9471d2f05102d21ea5df4195da7a55ee3c7c4f3412b302b871d0985894e5b13519ae7c7c8d6a9f7493a0827aaaee74284e2eadd049a2a5d43a255b2c13f4a5f903bd03a005b20e8a369ae55759980d6c02df7", 0xe5}], 0x1}}, {{&(0x7f00000010c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0xffffffff, 0x3, 0x2, {0xa, 0x4e21, 0xfb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x71}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001140)="d3afcc0b54919d44a8c2118cf20767ec493306b19b82bc2c34641317eabc6b9ab7202413eb79a76bb6dfa9ed3a248ee79cc9e8ec38ed0d0336db177027501dcd6305f3a84301673ff0f59e754314095d3235fd3d7ca77a0bd2c4f3e949c3a5958105ea62acdd977b3f5ccb74f0cc905e29e46f400cb2d83c0cea95d1bdb0d490a140e11e85f7c50d5a205149db5465c8f1339a62edf337dfdd58bf30e39c9adf11663c2e21f972b4fd", 0xa9}, {&(0x7f0000001200)="627f78d9e828e75e150ffa99bf184a61844f8834dbc9e2bab711317b2622fd5bb12e07e350786cb0a25e9ca2a606ec65222d81a14e329c039bb98d6dbcf320a6089d150901dc67", 0x47}, {&(0x7f0000001300)="7a19762002ffed46c0ffc7d777f6cf801e18001ab62923d7dd3b49eff9a1013b08c495c0a1e6ff7aa76edb804d6a112281b566151a2875c113a281a4ec6dd90d154748e37a67d24667527e58dcc29190ca76e74aba4db2aecc996d3f23b12b4d7356d6419e56494126ee915c066792d82652d594b6b03f2a5e209dc45bcb6db83aebf604a514054bd8cec75c3e79f2fa257ba89837bf67212b", 0x99}, {&(0x7f00000013c0)}], 0x4, &(0x7f0000001540)=[{0x40, 0x103, 0x3ff, "bfde968b6e9f447aeb26459c529b26afa654fd8dbf89bfc2b8b13de2a3c46f1bf5fb1bd442626c8b94d9c1ac5ee3"}, {0xf0, 0x10b, 0x8, "c6aaf6cadbf1f78f878b385b60b45e1453256551118793244670673578843ed11b78418d9d980d4f7e78df5eb80187ed325a4cb83fd8391c31afe5f710ab1f17a54c6f0424fc81d616c938c88e1f66277bf745dec771ace8cdfde31deda58904cc05a824bbb1b3b56aa8ab46e3009252fdd708972b1dc5cb65c5e669bf855cb1f77e14b466c4b4568929f38bd22968c203dd40b73d663eddc6e26a8d150b36c0bcaf7c5804054f70e71e5b691fb079f77a73b0eb39ba477023abae0abc5001ee9698dec84f3d715641fe84e4ceb089b3ea82f46542340b5b160a98"}], 0x130}}], 0x4, 0x810) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r7, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 10.119427685s ago: executing program 3 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) wait4(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) listen(0xffffffffffffffff, 0x39b1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69"], 0x41) getdents64(r4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d74ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc386027734d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b68c5240f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c90eef85b04973390512b4a38fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c", @ANYRESOCT, @ANYRES64=r2, @ANYBLOB="08001b3c07029d2bfa4104e09e32b4a0dd17ba81b5d417c8a7221bcb1c45c10f4d808c9f8a18ce03c5c5a57dcc98070661567c31b76ae2c093921c9f9f42c7f4036fb09aeb6c8db480282d90"], 0x18c0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.303947405s ago: executing program 3 (id=261): socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001ff0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) 8.203267489s ago: executing program 4 (id=263): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x1f4, 0x0, 0x54}, 0x9c) 8.011407s ago: executing program 0 (id=264): r0 = memfd_secret(0x80000) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x200400c0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000001d40), 0x0, 0x80) ppoll(&(0x7f0000001d80), 0x0, &(0x7f0000001dc0)={0x0, 0x989680}, &(0x7f0000001e00)={[0x278dae7f]}, 0x8) 7.883115715s ago: executing program 0 (id=265): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000140)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="39593ef5c0de23eb2958a89d69b60fa342bb90754a8b1bdc15177819253584fa52ad035ea6bbf9afae9e4e6b1962dbd28f11272ccc57c245c45be0e49e41fcbb4e8c7d3e416e17f5cb8047d23f0a5326e547ae3913bf1074eb06fd0d41b53833cfb7e8b926d31462dfb0bade659ff0eba282aca77f9f97a4c418671df52470b8a563a02783d8fca2c8f988929d824f", 0x8f}, {&(0x7f0000000340)="996257286a0679b9345df440b53a3bfbd6c4a0e2728de2cce2d430581f9433bfd3fca5808003248dcf7f8581b01a5846b36b13b2df563e5ac57bab957dec90d79034c82ad590dff317a36a8784ca4944d18f9f829520bbcf24ad576fa7a8130010209a93092c24c6564c1f0174fde039da9285a90479d3c1908394c20e17840d4489e7592059ab94718c80f46a7ba53522d437d8f826119e7d4f688b4a5691f24ec54447943515edf4985acbb9776068537f9716ba7468ca4cb4d3dd3dd5855e0a7c44091a93bd29cd30", 0xca}, {&(0x7f0000000440)="e58ffcc51867b8b64e919cdca248f8e36d2525b516599d55343b7b098194d403fdfc7f125741257020d0bfa009e5b18c", 0x30}], 0x3, &(0x7f00000004c0)=[{0x50, 0x116, 0x6, "edfeac61f994a71866a5a0b6da3db99971b06cc409b651c99ff6f6d4036d9380b0184b6bf290cadb2e7eb24eb6e0ce7b6a7e3297df2e11dfb0e26b95ff23"}, {0x50, 0x111, 0xffff4afd, "8c15c2c8772db6e573119884e19a5e2d307df930c92109d395ba09a067238a5c89b86dcdcb178e364b02e7f3d20015edf72dcbaadedea9790000"}, {0x70, 0x22a, 0x8002, "5bd1215fe660458163a9b9c47668423ddbe6af5c6a60c67fba466088fbfccc8e348c0fe0c1100f277b95f3996c772ec354ca5b67f444eb65c736e606d3b2614a027b70abd8db2fe0d1dc8315962e4f4c578a281fd564b5a7096e"}, {0xe8, 0x115, 0xff, "b2220a0f62cc7aee9563f0ce5539bd472768938952975ac3869b38c0200a08931f64b2e26c137189515a6993981d18317959d45b73f45836035dc0cb0b8a358ff3959ca773269974df0ba5b56fdcd1dad9397509184f6fae4f6d3dc5cc28649375acab37dafb74c810988d170f287356de7b5912f27dc2633ccc2c6fa28ad7ba47d820eca43b77e2ff2038dfca6e8d8a6cac6f7e9592d987045cdfc900b36f896c9a6e40053c873536efeafa54b780a2306a2fba18616c8968535e7579b9898e271cccda47d585db36a721ba35145a95d2a0ab105801b1"}], 0x1f8}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x10, 0x8, 0x14, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast1, 0x700, 0x80, 0xe, 0x5}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@empty}, &(0x7f0000000240)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x1009, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = dup(r2) write$evdev(r3, &(0x7f0000000180), 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r4 = syz_open_pts(r2, 0x80) r5 = dup3(r4, r2, 0x80000) read(r2, &(0x7f00000005c0)=""/228, 0xe4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0x5) shutdown(r6, 0x0) read$FUSE(r5, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000200)={0x3, 0x6, 0x8, 0xfffffff7, 0x23, "4bbe21000000911604000000f3ab00", 0x1, 0x8}) write$binfmt_script(r3, &(0x7f0000000940)={'#! ', './bus', [], 0xa, "c4013f87aa162f01f5e0c4088b1296194614ae7eb81f4058810740f2fb28271e13a96770146d67bd12bb4704ec89324369c6767933bddc54"}, 0x41) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c243856da70ff0005008005090581030002000000090401"], 0x0) getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) mount$bind(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x800000, 0x0) 6.579901545s ago: executing program 3 (id=266): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000540)=0x800, 0x54) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x376ca33bc14c7753, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x4000000000d20, 0x80c0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e23, @local}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6, 0x3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20040081) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) lseek(r4, 0x164, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) 6.446952449s ago: executing program 1 (id=267): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) gettid() timer_create(0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r5, 0x0, 0x8010002b) io_setup(0xc00, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB="00005a3d72198a420c000000090000001811000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.982375024s ago: executing program 4 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0x1020000, 0x200000, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x74, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x44, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_LIMIT={0x8, 0x5, 0xef}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0x4, 0x0, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9a1f}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x44945}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x2, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r3, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r3, &(0x7f00000008c0)}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x2a020480) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r8, 0x80106408, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 4.507304088s ago: executing program 3 (id=269): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$audion(&(0x7f0000000340), 0x7d, 0x20000) listen(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) socket(0xa, 0x1, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 4.416864467s ago: executing program 3 (id=270): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00034003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$kcm(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x2230}, 0x20008810) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 4.257546121s ago: executing program 4 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) wait4(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) listen(0xffffffffffffffff, 0x39b1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69"], 0x41) getdents64(r4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed275beb2db73e572f6edb59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRESDEC, @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESOCT, @ANYRES64=r2, @ANYBLOB="08001b3c07029d2bfa4104e09e32b4a0dd17ba81b5d417c8a7221bcb1c45c10f4d808c9f8a18ce03c5c5a57dcc98070661567c31b76ae2c093921c9f9f42c7f4036fb09aeb6c8db480282d90"], 0x18c0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.590872671s ago: executing program 3 (id=272): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newtaction={0xef8, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xee4, 0x1, [@m_pedit={0xeb4, 0x5, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x8, 0x3, 0x8, 0x8, 0x58}, 0xb, 0x80, [{0xc0000000, 0x9, 0x2d19, 0x8c3, 0x5}, {0x1, 0x0, 0x5, 0x34c7, 0x800, 0x9b5a}, {0x8, 0x5, 0x80, 0x55a, 0x8, 0xffffffff}, {0x1, 0x1ff, 0x1, 0x9, 0x80000001, 0x4}]}, [{0x233, 0x0, 0x1782, 0x6611, 0x8, 0x7}, {0x8, 0x2, 0x2, 0x10, 0x0, 0x4}, {0x2, 0x3, 0x7f, 0x1, 0xfff, 0xf}, {0x0, 0xfffffffc, 0xa90, 0x6c00000, 0x9, 0x80000000}, {0x3, 0x5, 0x5e01, 0x9, 0x200, 0x4}, {0x77e5, 0x62, 0x7, 0x4ed, 0x81a, 0x6}, {0x400, 0xffffffff, 0xfffffffa, 0x1, 0xf8, 0x100}, {0x4, 0x5, 0x0, 0xb, 0x1}, {0xa, 0x101, 0x3, 0x400, 0x8, 0x8}, {0x8252, 0x7, 0x0, 0x2800000, 0x0, 0x5}, {0x5, 0x0, 0x8, 0x6, 0x8, 0x3}, {0x7f, 0x1888, 0x4, 0x29, 0xa5e, 0x7}, {0x2, 0x34ed, 0xd, 0x8000, 0x10}, {0x1, 0x81, 0x0, 0x6, 0xe, 0x3}, {0x3, 0x2, 0x9, 0x7, 0xffffffc0, 0x2}, {0x8, 0x0, 0x4, 0x10000, 0x4, 0x9}, {0x0, 0xc3f1, 0x0, 0x9, 0x10001, 0x6}, {0x5, 0x1000, 0x80000001, 0x1ff, 0x0, 0x7}, {0x200004, 0xe5c2, 0x2, 0xf, 0x7, 0x7ff}, {0xa, 0x9, 0x80000001, 0x2bc4c164, 0x718e, 0xfffffffd}, {0x10000, 0xff, 0x10000, 0x1, 0x3ff, 0x2}, {0x9, 0x9, 0x2, 0xf, 0x4, 0xf8}, {0x1000, 0x7, 0x69ce9df6, 0x7, 0x5a80, 0xc3}, {0x0, 0x200, 0x1, 0x2}, {0x1364, 0x1, 0x800000, 0x101, 0x5, 0x2}, {0x939, 0x99ad, 0x3, 0xeec, 0xcbca, 0x4}, {0x10001, 0x9, 0xe, 0x80000001, 0x401, 0x4bf}, {0x8, 0x0, 0x2, 0x4, 0x4, 0x401}, {0x9, 0x8, 0x8, 0x6f26, 0x3, 0x3ff}, {0x1, 0x9, 0x5, 0x9, 0xe0b7, 0x4}, {0x7, 0x177f, 0x9, 0xcd, 0x8001, 0x5}, {0x6, 0x1000, 0x9, 0x10000, 0x0, 0x401}, {0x5, 0x8, 0x9, 0x3, 0xd, 0xac0}, {0xffffffff, 0x6, 0xbed1, 0x7, 0x1, 0x1}, {0x8, 0x7, 0xf, 0x4, 0x3, 0x6}, {0x1, 0xab9, 0xc2, 0x25d9, 0x200, 0xfffffff1}, {0xfff, 0x1, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x9, 0x7fff, 0x9, 0x9}, {0xffff, 0x7, 0x9, 0x9, 0x6, 0x7}, {0x3, 0x8, 0xd, 0xa, 0x7f, 0x9}, {0xffffffff, 0x7, 0x2945, 0xf0, 0x1ce, 0x5}, {0x3ff, 0x1, 0x3, 0x5, 0x9, 0x8}, {0x7, 0xd, 0x5, 0x1, 0xf, 0x7}, {0x800, 0x1, 0x3, 0x8, 0x4, 0x8}, {0x2, 0x2, 0x8, 0x7, 0x5, 0xd}, {0x8000, 0x3, 0xb, 0x8, 0x0, 0xe5e}, {0x0, 0xe186, 0xfff, 0x9, 0x6, 0x6}, {0xf, 0x9, 0x1, 0x9, 0x0, 0x7f}, {0xb3, 0x3, 0x80000000, 0x1b7b, 0x4, 0x8}, {0xd39, 0x8c8, 0xeb9, 0x100009, 0x5, 0x5}, {0x0, 0x1772, 0x4, 0x9, 0xc, 0x8}, {0x7fff, 0x8000000, 0x8, 0x20000000, 0x381, 0x8}, {0x5163, 0xfe, 0x4, 0x4, 0x2, 0x89}, {0x1, 0x1, 0x68, 0x7fff, 0x10000, 0x81}, {0x7, 0x6, 0xb69, 0x3, 0x81, 0x6}, {0xd, 0x9, 0xffffffff, 0x5, 0x0, 0x4}, {0x9, 0xffffffff, 0x6, 0x6, 0x3, 0x4}, {0xbb0d, 0x9, 0x9, 0x5, 0xfffffffd, 0x4}, {0xf, 0x731, 0xfffffff9, 0x5, 0x2, 0x3}, {0x0, 0x1, 0xc000, 0x6, 0x1, 0x3}, {0x5, 0x5, 0x2, 0x2, 0x8, 0x7}, {0xb97, 0x800, 0x6, 0xfff, 0x4, 0x1}, {0x4, 0xfffffffb, 0x0, 0xf39, 0x7fff, 0x7d2}, {0x101, 0x2, 0x8000, 0x5, 0x40, 0x4}, {0x1, 0xab, 0x8, 0x2, 0x6, 0x7}, {0x7, 0x81a326bc, 0x5, 0x0, 0x8, 0x8}, {0x3, 0xff, 0x7fffffff, 0x1, 0x4, 0x5}, {0x8, 0xa, 0x80000001, 0x0, 0x3, 0x5}, {0x10, 0x10000, 0x8, 0x7fffffff, 0x1, 0x7}, {0x2, 0x0, 0x2, 0x8, 0x5, 0x5}, {0x7fff, 0x4, 0x2, 0x100, 0x6, 0xab8d}, {0x401, 0x5, 0x4e5, 0xfffffffe, 0x2, 0xb}, {0xfffffffd, 0x872, 0x9, 0x7, 0x40, 0x4}, {0xc, 0x9, 0x7, 0x2, 0x10, 0x6}, {0x9, 0xffffff94, 0x30000000, 0x2, 0x4, 0x401}, {0x10, 0x7, 0x6, 0x4, 0x63f, 0x7}, {0x3, 0x96ad, 0x9, 0x2, 0x2, 0xc}, {0x7f, 0x9, 0x7ff, 0xc97, 0x3, 0x1ff}, {0x4, 0x9, 0x4, 0x5, 0x569, 0x7fff}, {0x9, 0x9, 0x2, 0xd469, 0x4, 0x1}, {0x9, 0x2cce, 0x3, 0x101, 0x0, 0x3}, {0xffffffff, 0x4, 0x6, 0x7, 0x8, 0x8}, {0x0, 0x6, 0xffffdfe9, 0x7, 0x6, 0x34}, {0x1, 0x5, 0x8c50, 0x3, 0x41c1, 0xb8f5}, {0xeb98, 0x9, 0xffffffff, 0x5b48, 0x8001, 0xf5}, {0x6, 0x0, 0x2, 0x1, 0x40, 0x51af}, {0x7, 0x9, 0x81, 0x6, 0x2, 0x9}, {0x3, 0x74a, 0x17c, 0xa0f, 0x0, 0x5}, {0xb956, 0x4, 0x0, 0x0, 0xc587, 0xb}, {0x9, 0x55, 0x8000, 0xf203, 0x100, 0xfffffff8}, {0x6, 0x0, 0x1, 0x0, 0x4, 0x8}, {0x1c1437bc, 0x1, 0x2, 0x3, 0x8, 0x6}, {0x80000001, 0xffffffff, 0x9000000, 0xfc, 0x1, 0xad}, {0x5, 0x56, 0x5, 0xffff, 0x9, 0x3}, {0x80000000, 0x7, 0x7fff, 0x8, 0x4, 0x1}, {0xc, 0x2, 0x6, 0x8, 0xfd9, 0x1}, {0x5, 0x0, 0x5, 0x6d9, 0x9b1c, 0x3}, {0x2, 0x3, 0x8, 0xa, 0x1, 0x1}, {0x7, 0x4, 0x7, 0x7, 0x0, 0xff}, {0xffffffb1, 0x8, 0x1, 0x9, 0x5, 0xfff}, {0x7, 0x7, 0x5, 0x1, 0x5, 0x4}, {0x4b, 0x3, 0x9, 0xb48, 0x1, 0x7}, {0x80, 0xbdc, 0x8, 0x242cb8c2, 0x8, 0x1}, {0xffff, 0x9, 0x12, 0x8, 0x0, 0x6}, {0x0, 0xfffffffd, 0x7ed, 0xffffffff, 0x567b, 0x9}, {0x1, 0x5, 0x5}, {0x10000, 0x2, 0xf, 0x2, 0x6, 0x4}, {0xa, 0x80, 0x7, 0x6, 0x1, 0x7c}, {0x101, 0x1, 0x10, 0x80000000, 0x0, 0x7f}, {0x3, 0x3, 0xfff, 0x7fffffff, 0xc17d, 0x6}, {0x10000, 0x3, 0x7fffffff, 0x10001, 0x7fffffff, 0x2}, {0x2, 0x7, 0x5, 0x2, 0x9, 0x80000001}, {0x0, 0x8001, 0x80000000, 0x9, 0x9, 0x6}, {0xe, 0x6, 0xb, 0x6, 0x2, 0xff}, {0x8, 0x0, 0x7fd, 0x5, 0x1, 0xfffffffe}, {0x9, 0x0, 0x4, 0x1c0e34cd, 0xca, 0x1}, {0x7, 0x8, 0x7, 0x101, 0x6, 0x7f}, {0x217, 0x4, 0x3ff, 0x5, 0x7, 0x2}, {0x7, 0xeb6, 0xe710, 0x9, 0x98d, 0x2}, {0x40000, 0x6, 0x8, 0xe, 0x7fffffff, 0x4}, {0x5, 0xffffffff, 0x0, 0x2, 0x0, 0x6}, {0x400, 0x1, 0x6, 0x2, 0x400, 0x3}, {0x1000, 0x2, 0x7f80, 0xc87e, 0x5, 0x400}, {0x4, 0x1000, 0x179c, 0x9, 0x8001, 0xe}, {0x0, 0x7ff, 0x2, 0x7, 0xc0, 0xf2f5}, {0x9, 0xc3, 0xbd, 0x1, 0x1, 0x800}, {0x7, 0x3, 0xe, 0x7, 0x2, 0x1}, {0x7ff, 0x11, 0x7, 0x8, 0x1, 0x4c}], [{}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4}, {}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4}, {0x3}, {0x5}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x47a2c68db05f4987}], 0x1}}]}, {0x6, 0x6, "c89e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x2c, 0x3ffd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xef8}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 1.443620105s ago: executing program 0 (id=273): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) 1.375828556s ago: executing program 4 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000000c0)=0x9, 0x4) 1.301168419s ago: executing program 0 (id=275): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38e56a907464e17c44bd700000000000090000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44988}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r7, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) 241.040487ms ago: executing program 0 (id=276): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4008af12, &(0x7f00000026c0)) 0s ago: executing program 0 (id=277): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): [ 48.814568][ T29] audit: type=1400 audit(1780180740.762:121): avc: denied { write } for pid=5535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.868250][ T29] audit: type=1400 audit(1780180740.812:122): avc: denied { write } for pid=5546 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.037593][ T29] audit: type=1400 audit(1780180740.982:123): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.092785][ T29] audit: type=1400 audit(1780180741.042:124): avc: denied { write } for pid=5560 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.265062][ T29] audit: type=1400 audit(1780180741.212:125): avc: denied { write } for pid=5563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.317291][ T29] audit: type=1400 audit(1780180741.262:126): avc: denied { write } for pid=5574 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 56.090579][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 56.090595][ T29] audit: type=1400 audit(1780180748.032:129): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 56.120842][ T29] audit: type=1400 audit(1780180748.062:130): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.123639][ T5600] cgroup: Unknown subsys name 'net' [ 56.150147][ T29] audit: type=1400 audit(1780180748.092:131): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.285458][ T5600] cgroup: Unknown subsys name 'cpuset' [ 56.293653][ T5600] cgroup: Unknown subsys name 'rlimit' [ 56.423164][ T29] audit: type=1400 audit(1780180748.362:132): avc: denied { setattr } for pid=5600 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.447069][ T29] audit: type=1400 audit(1780180748.372:133): avc: denied { create } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.494654][ T29] audit: type=1400 audit(1780180748.372:134): avc: denied { write } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.515642][ T29] audit: type=1400 audit(1780180748.372:135): avc: denied { read } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.536980][ T29] audit: type=1400 audit(1780180748.382:136): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.562085][ T29] audit: type=1400 audit(1780180748.382:137): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 56.582793][ T5602] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 56.594662][ T29] audit: type=1400 audit(1780180748.542:138): avc: denied { relabelto } for pid=5602 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.495717][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.750761][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.759953][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.768185][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.773410][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.776801][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.789307][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.792181][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.797647][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.805578][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.812758][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.824676][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.827858][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.833449][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.839867][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.846539][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.855153][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.862372][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.868891][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.882392][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.883405][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.890308][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.899100][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.910987][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.912180][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.925590][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.232159][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.240258][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.247408][ T5612] bridge_slave_0: entered allmulticast mode [ 62.254210][ T5612] bridge_slave_0: entered promiscuous mode [ 62.262097][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.269187][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.276623][ T5614] bridge_slave_0: entered allmulticast mode [ 62.283450][ T5614] bridge_slave_0: entered promiscuous mode [ 62.300609][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.308369][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.315716][ T5613] bridge_slave_0: entered allmulticast mode [ 62.322578][ T5613] bridge_slave_0: entered promiscuous mode [ 62.329932][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.337752][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.345113][ T5613] bridge_slave_1: entered allmulticast mode [ 62.351982][ T5613] bridge_slave_1: entered promiscuous mode [ 62.365575][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.372734][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.379832][ T5612] bridge_slave_1: entered allmulticast mode [ 62.386650][ T5612] bridge_slave_1: entered promiscuous mode [ 62.393217][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.400283][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.407436][ T5614] bridge_slave_1: entered allmulticast mode [ 62.414070][ T5614] bridge_slave_1: entered promiscuous mode [ 62.465768][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.499918][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.510886][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.522295][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.535910][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.543227][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.550347][ T5624] bridge_slave_0: entered allmulticast mode [ 62.557247][ T5624] bridge_slave_0: entered promiscuous mode [ 62.571104][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.588525][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.612971][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.620073][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.627231][ T5624] bridge_slave_1: entered allmulticast mode [ 62.634083][ T5624] bridge_slave_1: entered promiscuous mode [ 62.661540][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.668953][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.676235][ T5615] bridge_slave_0: entered allmulticast mode [ 62.682994][ T5615] bridge_slave_0: entered promiscuous mode [ 62.698296][ T5613] team0: Port device team_slave_0 added [ 62.705521][ T5612] team0: Port device team_slave_0 added [ 62.717860][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.725223][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.732496][ T5615] bridge_slave_1: entered allmulticast mode [ 62.739217][ T5615] bridge_slave_1: entered promiscuous mode [ 62.753524][ T5613] team0: Port device team_slave_1 added [ 62.760187][ T5612] team0: Port device team_slave_1 added [ 62.767231][ T5614] team0: Port device team_slave_0 added [ 62.781564][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.804907][ T5614] team0: Port device team_slave_1 added [ 62.819731][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.851010][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.867418][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.874624][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.900661][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.912922][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.919981][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.946014][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.957411][ T5626] Bluetooth: hci1: command tx timeout [ 62.963664][ T4932] Bluetooth: hci0: command tx timeout [ 62.963699][ T5627] Bluetooth: hci4: command tx timeout [ 62.969681][ T49] Bluetooth: hci2: command tx timeout [ 62.975313][ T5629] Bluetooth: hci3: command tx timeout [ 62.989200][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.011212][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.018221][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.044591][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.056007][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.062998][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.089061][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.100312][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.107732][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.134138][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.153201][ T5624] team0: Port device team_slave_0 added [ 63.171128][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.178178][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.204264][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.223269][ T5624] team0: Port device team_slave_1 added [ 63.243380][ T5615] team0: Port device team_slave_0 added [ 63.275566][ T5613] hsr_slave_0: entered promiscuous mode [ 63.282105][ T5613] hsr_slave_1: entered promiscuous mode [ 63.290052][ T5615] team0: Port device team_slave_1 added [ 63.302251][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.309232][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.335431][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.347524][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.354600][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.380570][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.430330][ T5614] hsr_slave_0: entered promiscuous mode [ 63.436832][ T5614] hsr_slave_1: entered promiscuous mode [ 63.442920][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 63.448719][ T5614] Cannot create hsr debugfs directory [ 63.466934][ T5612] hsr_slave_0: entered promiscuous mode [ 63.473187][ T5612] hsr_slave_1: entered promiscuous mode [ 63.479098][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 63.484921][ T5612] Cannot create hsr debugfs directory [ 63.511353][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.518749][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.544790][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.556723][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.563744][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.589743][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.653765][ T5624] hsr_slave_0: entered promiscuous mode [ 63.659901][ T5624] hsr_slave_1: entered promiscuous mode [ 63.666084][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 63.671990][ T5624] Cannot create hsr debugfs directory [ 63.774231][ T5615] hsr_slave_0: entered promiscuous mode [ 63.780493][ T5615] hsr_slave_1: entered promiscuous mode [ 63.786582][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 63.792326][ T5615] Cannot create hsr debugfs directory [ 64.059073][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.070036][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.083911][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.093908][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.107895][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.116793][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.124599][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.134396][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.187192][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.200362][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.208836][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.218722][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.227108][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.236538][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.244482][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.253141][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.335959][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.346125][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.354957][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.364575][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.372971][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.381663][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.389616][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.399453][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.484622][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.494255][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.507158][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.516589][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.525097][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.533724][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.542760][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.550737][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.559578][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.603170][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.637474][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.644995][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.686726][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.693859][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.708655][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.717479][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.726089][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.744163][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.754180][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.770158][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.778948][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.787268][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.796342][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.848566][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.874958][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.882069][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.898730][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.919344][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.926458][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.961490][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.979503][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.003146][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.010248][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.032727][ T5629] Bluetooth: hci2: command tx timeout [ 65.038622][ T5627] Bluetooth: hci3: command tx timeout [ 65.038692][ T4932] Bluetooth: hci4: command tx timeout [ 65.044896][ T5627] Bluetooth: hci1: command tx timeout [ 65.049953][ T49] Bluetooth: hci0: command tx timeout [ 65.058539][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.067490][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.119048][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.152574][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.159709][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.214252][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.221387][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.238422][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.325924][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.349545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.356747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.371181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.378360][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.835838][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.844827][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.902831][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.934940][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.033445][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.120412][ T5612] veth0_vlan: entered promiscuous mode [ 66.128933][ T5614] veth0_vlan: entered promiscuous mode [ 66.163268][ T5614] veth1_vlan: entered promiscuous mode [ 66.185502][ T5612] veth1_vlan: entered promiscuous mode [ 66.224190][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.263699][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.271559][ T5624] veth0_vlan: entered promiscuous mode [ 66.309907][ T5624] veth1_vlan: entered promiscuous mode [ 66.339578][ T5614] veth0_macvtap: entered promiscuous mode [ 66.348983][ T5612] veth0_macvtap: entered promiscuous mode [ 66.365019][ T5614] veth1_macvtap: entered promiscuous mode [ 66.383462][ T5612] veth1_macvtap: entered promiscuous mode [ 66.451536][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.469344][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.479525][ T5615] veth0_vlan: entered promiscuous mode [ 66.493456][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.508263][ T5615] veth1_vlan: entered promiscuous mode [ 66.524043][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.532590][ T5624] veth0_macvtap: entered promiscuous mode [ 66.555807][ T137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.565202][ T137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.580535][ T137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.589537][ T137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.606958][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.617648][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.629195][ T5624] veth1_macvtap: entered promiscuous mode [ 66.643767][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.654002][ T1171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.720832][ T5615] veth0_macvtap: entered promiscuous mode [ 66.733377][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.769617][ T5615] veth1_macvtap: entered promiscuous mode [ 66.800827][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.803039][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.811169][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.819698][ T5613] veth0_vlan: entered promiscuous mode [ 66.873445][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.882626][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899229][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.901445][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.911996][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.917304][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.925928][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.933628][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.938650][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.948305][ T5613] veth1_vlan: entered promiscuous mode [ 66.972410][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.997803][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 66.997826][ T29] audit: type=1400 audit(1780180758.942:153): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9lSyG0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.052434][ T29] audit: type=1400 audit(1780180758.972:154): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.056252][ T1171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.075345][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.087435][ T29] audit: type=1400 audit(1780180758.982:155): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9lSyG0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.092479][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.123087][ T29] audit: type=1400 audit(1780180758.982:156): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.132284][ T49] Bluetooth: hci0: command tx timeout [ 67.151941][ T29] audit: type=1400 audit(1780180758.992:157): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9lSyG0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.155614][ T4932] Bluetooth: hci1: command tx timeout [ 67.189435][ T5627] Bluetooth: hci4: command tx timeout [ 67.196825][ T49] Bluetooth: hci2: command tx timeout [ 67.199773][ T5627] Bluetooth: hci3: command tx timeout [ 67.213877][ T29] audit: type=1400 audit(1780180758.992:158): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/root/syzkaller.9lSyG0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.249100][ T29] audit: type=1400 audit(1780180758.992:159): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.250856][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.279104][ T5613] veth0_macvtap: entered promiscuous mode [ 67.302997][ T1171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.306476][ T29] audit: type=1400 audit(1780180759.072:160): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.312480][ T1171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.343386][ T29] audit: type=1400 audit(1780180759.072:161): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="gadgetfs" ino=7504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.372175][ T29] audit: type=1400 audit(1780180759.072:162): avc: denied { mount } for pid=5614 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.423524][ T5613] veth1_macvtap: entered promiscuous mode [ 67.435628][ T1171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.497250][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.518766][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.861566][ T5810] Cannot find add_set index 0 as target [ 67.979065][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.992138][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.006160][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.044858][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.099828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.109940][ T137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.123987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.134816][ T137] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.173210][ T137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.387644][ T137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.302359][ T5629] Bluetooth: hci3: command tx timeout [ 69.307830][ T5629] Bluetooth: hci1: command tx timeout [ 69.313285][ T5629] Bluetooth: hci2: command tx timeout [ 69.318672][ T5629] Bluetooth: hci4: command tx timeout [ 69.324698][ T5629] Bluetooth: hci0: command tx timeout [ 69.387264][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.395624][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.788829][ T5822] Zero length message leads to an empty skb [ 71.945176][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.987181][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.090132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.113793][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.449140][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 72.449158][ T29] audit: type=1400 audit(1780180764.392:180): avc: denied { read write } for pid=5830 comm="syz.3.4" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.489152][ T29] audit: type=1400 audit(1780180764.392:181): avc: denied { open } for pid=5830 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.607220][ T29] audit: type=1400 audit(1780180764.392:182): avc: denied { ioctl } for pid=5830 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.136123][ T5619] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.582952][ T5616] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.811861][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.841824][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 73.946190][ T5619] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 73.984346][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 74.001962][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 74.004273][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.016128][ T5813] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 74.026775][ T5813] usb 3-1: config 0 has no interface number 0 [ 74.036167][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.059135][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 74.060128][ T5616] usb 2-1: config 4 interface 0 has no altsetting 0 [ 74.075345][ T5619] usb 4-1: Product: syz [ 74.081833][ T5619] usb 4-1: Manufacturer: syz [ 74.088816][ T5619] usb 4-1: SerialNumber: syz [ 74.101335][ T5616] usb 2-1: string descriptor 0 read error: -22 [ 74.111028][ T5619] usb 4-1: config 0 descriptor?? [ 74.119627][ T5616] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 74.134675][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.138062][ T5619] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 74.149675][ T5616] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 74.181171][ T5616] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 74.199190][ T5813] usb 3-1: Product: syz [ 74.209526][ T5813] usb 3-1: Manufacturer: syz [ 74.218764][ T5813] usb 3-1: SerialNumber: syz [ 74.232078][ T5747] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.240046][ T5616] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.265732][ T5813] usb 3-1: config 0 descriptor?? [ 74.277800][ T5616] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 74.285737][ T5813] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 74.297024][ T5616] usb 2-1: media controller created [ 74.301406][ T5843] warning: `syz.4.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.302955][ T29] audit: type=1400 audit(1780180766.242:183): avc: denied { ioctl } for pid=5841 comm="syz.4.11" path="socket:[9150]" dev="sockfs" ino=9150 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.364393][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.403396][ T29] audit: type=1400 audit(1780180766.302:184): avc: denied { create } for pid=5844 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.432418][ T5747] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.471692][ T29] audit: type=1400 audit(1780180766.302:185): avc: denied { getopt } for pid=5844 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.600811][ T29] audit: type=1400 audit(1780180766.302:186): avc: denied { create } for pid=5844 comm="syz.4.12" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.602815][ T5747] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 74.861493][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.882469][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 74.885950][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.899803][ T29] audit: type=1400 audit(1780180766.312:187): avc: denied { create } for pid=5830 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.933750][ T5747] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.943999][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 74.987762][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.989948][ T29] audit: type=1400 audit(1780180766.322:188): avc: denied { read } for pid=5844 comm="syz.4.12" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.044685][ T5840] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 75.106220][ T5747] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.124336][ T29] audit: type=1400 audit(1780180766.322:189): avc: denied { open } for pid=5844 comm="syz.4.12" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.128939][ T5619] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 75.222195][ T5619] visor 4-1:0.0: probe with driver visor failed with error -71 [ 75.257791][ T5619] usb 4-1: USB disconnect, device number 2 [ 75.512754][ T5616] zl10353_read_register: readreg error (reg=127, ret==0) [ 75.882081][ T5837] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 76.185605][ T5863] syzkaller0: entered promiscuous mode [ 76.262930][ T5863] syzkaller0: entered allmulticast mode [ 76.346326][ T804] cfg80211: failed to load regulatory.db [ 76.788486][ T5872] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.16'. [ 77.202178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.211768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.361769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.631789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.751763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.761766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.791772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 77.871849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.134731][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 78.134835][ T29] audit: type=1400 audit(1780180768.722:213): avc: denied { compute_member } for pid=5870 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.600463][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 78.613185][ T5616] usb 3-1: USB disconnect, device number 2 [ 79.043390][ T5616] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 79.067754][ T29] audit: type=1400 audit(1780180771.012:214): avc: denied { create } for pid=5877 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.117638][ T5731] usb 2-1: USB disconnect, device number 2 [ 79.171878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 79.513692][ T5880] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.126064][ T5616] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 80.166690][ T29] audit: type=1400 audit(1780180771.022:215): avc: denied { setopt } for pid=5877 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.172914][ T5616] quatech2 3-1:0.51: device disconnected [ 80.202846][ T29] audit: type=1400 audit(1780180771.052:216): avc: denied { prog_run } for pid=5877 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.329160][ T29] audit: type=1400 audit(1780180772.272:217): avc: denied { read } for pid=5882 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.402038][ T29] audit: type=1400 audit(1780180772.272:218): avc: denied { open } for pid=5882 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.453914][ T5730] usb 1-1: USB disconnect, device number 2 [ 80.502321][ T29] audit: type=1400 audit(1780180772.322:219): avc: denied { ioctl } for pid=5882 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.537258][ T5883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.610946][ T29] audit: type=1400 audit(1780180772.552:220): avc: denied { read write } for pid=5887 comm="syz.0.23" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.702682][ T29] audit: type=1400 audit(1780180772.552:221): avc: denied { open } for pid=5887 comm="syz.0.23" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 80.757995][ T29] audit: type=1400 audit(1780180772.552:222): avc: denied { block_suspend } for pid=5887 comm="syz.0.23" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.226949][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.272492][ T5616] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.565737][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 82.589244][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1 [ 82.991415][ T5616] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 83.145895][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.270734][ T5616] usb 3-1: Product: syz [ 83.283786][ T5923] can0: slcan on ttyS3. [ 83.292687][ T5616] usb 3-1: Manufacturer: syz [ 83.297432][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 83.297447][ T29] audit: type=1400 audit(1780180775.242:232): avc: denied { read } for pid=5278 comm="dhcpcd" name="n30" dev="tmpfs" ino=2029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.325568][ T5616] usb 3-1: SerialNumber: syz [ 83.333622][ T5616] usb 3-1: config 0 descriptor?? [ 83.338783][ T29] audit: type=1400 audit(1780180775.242:233): avc: denied { open } for pid=5278 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.373844][ T5908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.392472][ T5908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.420049][ T29] audit: type=1400 audit(1780180775.242:234): avc: denied { getattr } for pid=5278 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2029 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.572983][ T29] audit: type=1400 audit(1780180775.512:235): avc: denied { read write } for pid=5922 comm="syz.3.33" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.628990][ T5925] ubi16: attaching mtd0 [ 83.656942][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.719188][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.746611][ T29] audit: type=1400 audit(1780180775.512:236): avc: denied { open } for pid=5922 comm="syz.3.33" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.830236][ T5738] usb 3-1: USB disconnect, device number 3 [ 83.874162][ T29] audit: type=1400 audit(1780180775.562:237): avc: denied { ioctl } for pid=5922 comm="syz.3.33" path="/dev/video1" dev="devtmpfs" ino=932 ioctlcmd=0x563a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.935122][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 83.944277][ T5923] can0 (unregistered): slcan off ttyS3. [ 84.137435][ T29] audit: type=1400 audit(1780180776.052:238): avc: denied { create } for pid=5944 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.171410][ T29] audit: type=1400 audit(1780180776.082:239): avc: denied { mounton } for pid=5944 comm="syz.4.37" path="/8" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.194524][ T10] usb 2-1: device descriptor read/64, error -71 [ 84.431992][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 84.680878][ T10] usb 2-1: device descriptor read/64, error -71 [ 84.780710][ T5945] ======================================================= [ 84.780710][ T5945] WARNING: The mand mount option has been deprecated and [ 84.780710][ T5945] and is ignored by this kernel. Remove the mand [ 84.780710][ T5945] option from the mount to silence this warning. [ 84.780710][ T5945] ======================================================= [ 84.942018][ T10] usb usb2-port1: attempt power cycle [ 85.045660][ T29] audit: type=1400 audit(1780180776.972:240): avc: denied { read } for pid=5944 comm="syz.4.37" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.069573][ T5945] overlayfs: failed to resolve './bus': -2 [ 85.122923][ T5949] process 'syz.4.37' launched '/dev/fd/9' with NULL argv: empty string added [ 85.183269][ T29] audit: type=1400 audit(1780180777.032:241): avc: denied { open } for pid=5944 comm="syz.4.37" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 85.740036][ T5738] libceph: connect (1)[c::]:6789 error -101 [ 85.763129][ T5738] libceph: mon0 (1)[c::]:6789 connect error [ 85.795879][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 86.023433][ T5616] libceph: connect (1)[c::]:6789 error -101 [ 86.042371][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 86.280458][ T5738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.437444][ T5969] ceph: No mds server is up or the cluster is laggy [ 86.832734][ T5616] libceph: connect (1)[c::]:6789 error -101 [ 86.862484][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 86.918836][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 86.944450][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.974486][ T5738] usb 1-1: config 0 has no interface number 0 [ 86.987655][ T5738] usb 1-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.072039][ T5738] usb 1-1: config 0 interface 1 has no altsetting 0 [ 88.041750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 88.608363][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 88.608392][ T29] audit: type=1400 audit(1780180780.552:259): avc: denied { setopt } for pid=6011 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.781851][ T29] audit: type=1400 audit(1780180780.562:260): avc: denied { bind } for pid=6011 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.880279][ T29] audit: type=1400 audit(1780180780.822:261): avc: denied { node_bind } for pid=6016 comm="syz.3.54" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.906307][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.083576][ T29] audit: type=1400 audit(1780180781.022:262): avc: denied { create } for pid=6021 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.324260][ T29] audit: type=1400 audit(1780180781.272:263): avc: denied { connect } for pid=6021 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.348405][ T29] audit: type=1400 audit(1780180781.292:264): avc: denied { execute } for pid=6021 comm="syz.4.55" name="file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.385551][ T29] audit: type=1400 audit(1780180781.292:265): avc: denied { execute_no_trans } for pid=6021 comm="syz.4.55" path="/13/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.602677][ T29] audit: type=1400 audit(1780180781.312:266): avc: denied { ioctl } for pid=6021 comm="syz.4.55" path="socket:[9438]" dev="sockfs" ino=9438 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.658924][ T5738] usb 1-1: string descriptor 0 read error: -71 [ 89.696296][ T5738] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 89.737297][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 89.771378][ T29] audit: type=1400 audit(1780180781.462:267): avc: denied { search } for pid=5278 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.778552][ T5738] usb 1-1: config 0 descriptor?? [ 89.857337][ T29] audit: type=1400 audit(1780180781.462:268): avc: denied { search } for pid=5278 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.859005][ T5738] usb 1-1: can't set config #0, error -71 [ 89.956547][ T5813] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.162062][ T6052] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.61'. [ 90.973777][ T5738] usb 1-1: USB disconnect, device number 3 [ 91.173552][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.205107][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.225724][ T5813] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 91.244540][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.279497][ T5813] usb 4-1: config 0 descriptor?? [ 91.422100][ T5738] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.519610][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.552466][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.612039][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 91.629969][ T5738] usb 1-1: config 3 has an invalid interface number: 45 but max is 0 [ 91.651583][ T5738] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 91.682359][ T5738] usb 1-1: config 3 has no interface number 0 [ 91.702668][ T5738] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.747320][ T5738] usb 1-1: config 3 interface 45 has no altsetting 0 [ 91.779589][ T5738] usb 1-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 91.820413][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.828403][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.837179][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.845167][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.849229][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.853131][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.870708][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.879200][ T5813] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 91.913527][ T5738] usb 1-1: Product: syz [ 91.917771][ T5738] usb 1-1: Manufacturer: syz [ 91.926247][ T5738] usb 1-1: SerialNumber: syz [ 91.938145][ T5813] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 92.002042][ T5813] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 92.039022][ C0] hid-thrustmaster 0003:044F:B65D.0001: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 92.159748][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.196664][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.272365][ T5619] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.355276][ T6035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.393766][ T6035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.424995][ T5738] usb 1-1: USB disconnect, device number 4 [ 92.454069][ T5619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.475743][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.496596][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.517864][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.531435][ T5619] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 92.541040][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.593531][ T5619] usb 3-1: config 0 descriptor?? [ 92.882341][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.021929][ T5813] usb 5-1: device descriptor read/64, error -71 [ 93.027349][ T5619] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0 [ 93.045790][ T5619] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0 [ 93.054840][ T5619] hid-rmi 0003:0461:4E72.0002: unknown main item tag 0x0 [ 93.136963][ T5619] hid-rmi 0003:0461:4E72.0002: hidraw1: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 93.229474][ T5619] usb 3-1: USB disconnect, device number 4 [ 93.293167][ T5813] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 93.451844][ T5813] usb 5-1: device descriptor read/64, error -71 [ 93.479676][ T5619] usb 4-1: USB disconnect, device number 3 [ 93.573882][ T5813] usb usb5-port1: attempt power cycle [ 93.622709][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 93.622723][ T29] audit: type=1400 audit(1780180785.562:289): avc: denied { create } for pid=6108 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 93.664425][ T6110] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 94.022908][ T5813] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.062836][ T5813] usb 5-1: device descriptor read/8, error -71 [ 94.636433][ T6115] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.76'. [ 95.331804][ T5813] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.385245][ T5813] usb 5-1: device descriptor read/8, error -71 [ 95.735950][ T5813] usb usb5-port1: unable to enumerate USB device [ 95.895096][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 98.191879][ T5731] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.493463][ T5731] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.523686][ T5731] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.559441][ T5731] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.582962][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.595626][ T29] audit: type=1400 audit(1780180790.532:290): avc: granted { setsecparam } for pid=6147 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 98.634749][ T6138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.646803][ T5731] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.003148][ T6157] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.88'. [ 99.970614][ T5731] usb 5-1: USB disconnect, device number 6 [ 100.395028][ T5619] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.635122][ T5619] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 100.706012][ T5619] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 100.778879][ T5619] usb 3-1: Product: syz [ 100.809958][ T5619] usb 3-1: Manufacturer: syz [ 100.856875][ T5619] usb 3-1: SerialNumber: syz [ 100.870931][ T5619] usb 3-1: config 0 descriptor?? [ 100.941857][ T5730] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.064000][ T29] audit: type=1400 audit(1780180793.012:291): avc: denied { create } for pid=6174 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.083613][ T29] audit: type=1400 audit(1780180793.012:292): avc: denied { write } for pid=6174 comm="syz.4.92" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.125661][ T29] audit: type=1400 audit(1780180793.012:293): avc: denied { ioctl } for pid=6174 comm="syz.4.92" path="socket:[8110]" dev="sockfs" ino=8110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.159842][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 101.162359][ T5619] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 101.205564][ T5730] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 101.226100][ T29] audit: type=1400 audit(1780180793.172:294): avc: denied { read } for pid=6179 comm="syz.3.94" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.231511][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 101.302469][ T6180] binder_alloc: 6179: pid 6179 spamming oneway? 1 buffers allocated for a total size of 4096 [ 101.307193][ T29] audit: type=1400 audit(1780180793.172:295): avc: denied { open } for pid=6179 comm="syz.3.94" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.320773][ T5730] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 101.339197][ T29] audit: type=1400 audit(1780180793.202:296): avc: denied { write } for pid=6176 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.371598][ T5619] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 101.390476][ T5619] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 101.409929][ T5619] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 101.410845][ T5730] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 101.457578][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.461349][ T29] audit: type=1400 audit(1780180793.202:297): avc: denied { nlmsg_write } for pid=6176 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.485202][ T5730] usb 2-1: Product: syz [ 101.516808][ T5730] usb 2-1: Manufacturer: syz [ 101.530948][ T5730] usb 2-1: SerialNumber: syz [ 101.552929][ T29] audit: type=1400 audit(1780180793.212:298): avc: denied { ioctl } for pid=6179 comm="syz.3.94" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.579950][ T5619] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 101.631553][ T29] audit: type=1400 audit(1780180793.222:299): avc: denied { mounton } for pid=6176 comm="syz.4.93" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 101.762985][ T29] audit: type=1400 audit(1780180793.222:300): avc: denied { set_context_mgr } for pid=6179 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.785177][ T5730] usb 2-1: config 0 descriptor?? [ 101.819666][ T5619] usb 3-1: USB disconnect, device number 5 [ 101.841953][ T5730] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 102.702988][ T5730] scsi host1: usb-storage 2-1:0.0 [ 102.743204][ T5730] usb 2-1: USB disconnect, device number 6 [ 102.953478][ T5747] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 104.104464][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 104.460035][ T5747] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.480844][ T5747] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 104.490005][ T5747] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 104.501139][ T5747] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 104.510222][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.572044][ T6220] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 104.580574][ T6220] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 104.635505][ T6222] netlink: 72 bytes leftover after parsing attributes in process `syz.1.105'. [ 104.677463][ T6220] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 105.174051][ T5747] usb 1-1: can't set config #1, error -71 [ 105.209315][ T5747] usb 1-1: USB disconnect, device number 5 [ 105.581884][ T5747] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.191913][ T5747] usb 1-1: Using ep0 maxpacket: 16 [ 106.204432][ T5747] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 106.225763][ T5747] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.242348][ T5747] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.250799][ T5747] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.259336][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 106.259350][ T29] audit: type=1400 audit(1780180798.202:317): avc: denied { write } for pid=6210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.289775][ T5747] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.304050][ T5747] usb 1-1: config 0 has no interface number 0 [ 106.311097][ T5747] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 106.322388][ T5747] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 106.323678][ T29] audit: type=1400 audit(1780180798.272:318): avc: denied { read } for pid=6235 comm="syz.4.109" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.333123][ T5747] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.366089][ T5747] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.379682][ T5747] usb 1-1: config 0 interface 125 has no altsetting 2 [ 106.390848][ T5747] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 106.407001][ T29] audit: type=1400 audit(1780180798.302:319): avc: denied { open } for pid=6235 comm="syz.4.109" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.437407][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.450572][ T5747] usb 1-1: Product: syz [ 106.459223][ T5747] usb 1-1: Manufacturer: syz [ 106.468030][ T5747] usb 1-1: SerialNumber: syz [ 106.468541][ T29] audit: type=1400 audit(1780180798.302:320): avc: denied { ioctl } for pid=6235 comm="syz.4.109" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.561463][ T5627] Bluetooth: hci4: link tx timeout [ 106.567028][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.594589][ T29] audit: type=1400 audit(1780180798.322:321): avc: denied { connect } for pid=6235 comm="syz.4.109" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.617178][ T5747] usb 1-1: config 0 descriptor?? [ 106.629544][ T29] audit: type=1400 audit(1780180798.352:322): avc: denied { read write } for pid=5624 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.631945][ T5747] usb 1-1: selecting invalid altsetting 2 [ 106.664633][ T29] audit: type=1400 audit(1780180798.352:323): avc: denied { open } for pid=5624 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.693835][ T29] audit: type=1400 audit(1780180798.352:324): avc: denied { ioctl } for pid=5624 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.695618][ T5747] uss720 1-1:0.125: probe with driver uss720 failed with error -22 [ 106.764136][ T29] audit: type=1400 audit(1780180798.402:325): avc: denied { write } for pid=6249 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.854607][ T5738] usb 1-1: USB disconnect, device number 6 [ 106.937717][ T29] audit: type=1400 audit(1780180798.882:326): avc: denied { write } for pid=6254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.055623][ T5627] Bluetooth: hci4: link tx timeout [ 107.061572][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.078049][ T5627] Bluetooth: hci4: link tx timeout [ 107.084339][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.597442][ T5627] Bluetooth: hci4: link tx timeout [ 108.603769][ T5627] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.591217][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 114.217827][ T5616] libceph: connect (1)[c::]:6789 error -22 [ 114.218003][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 114.221641][ T5616] libceph: connect (1)[c::]:6789 error -22 [ 114.224389][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 114.430287][ T6322] ceph: No mds server is up or the cluster is laggy [ 114.524102][ T5616] libceph: connect (1)[c::]:6789 error -22 [ 114.553914][ T6325] ceph: No mds server is up or the cluster is laggy [ 114.561682][ T5616] libceph: mon0 (1)[c::]:6789 connect error [ 115.082470][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 115.082486][ T29] audit: type=1400 audit(1780180807.022:329): avc: denied { accept } for pid=6339 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.214668][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 115.505782][ T29] audit: type=1400 audit(1780180807.452:330): avc: denied { create } for pid=6365 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.531641][ T5616] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 115.541640][ T29] audit: type=1400 audit(1780180807.472:331): avc: denied { setopt } for pid=6365 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.849367][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.976420][ T5616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.368627][ T5616] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 116.440945][ T5616] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 116.492261][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.550131][ T6352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.588106][ T29] audit: type=1400 audit(1780180808.532:332): avc: denied { audit_write } for pid=6373 comm="syz.3.142" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.614127][ T5616] hub 3-1:1.0: bad descriptor, ignoring hub [ 116.655623][ T5616] hub 3-1:1.0: probe with driver hub failed with error -5 [ 116.684972][ T5616] cdc_wdm 3-1:1.0: skipping garbage [ 116.694210][ T5616] cdc_wdm 3-1:1.0: skipping garbage [ 116.700267][ T29] audit: type=1400 audit(1780180808.562:333): avc: denied { mount } for pid=6373 comm="syz.3.142" name="/" dev="configfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 116.729404][ T6376] syzkaller0: entered promiscuous mode [ 116.742403][ T5616] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 116.751920][ T6376] syzkaller0: entered allmulticast mode [ 116.758887][ T5616] cdc_wdm 3-1:1.0: Unknown control protocol [ 116.773967][ T29] audit: type=1400 audit(1780180808.642:334): avc: denied { create } for pid=6377 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 116.806514][ T29] audit: type=1400 audit(1780180808.672:335): avc: denied { ioctl } for pid=6377 comm="syz.0.144" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10434 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.867279][ T5619] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 116.893836][ T29] audit: type=1400 audit(1780180808.702:336): avc: denied { ioctl } for pid=6375 comm="syz.4.143" path="socket:[10193]" dev="sockfs" ino=10193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.952252][ T29] audit: type=1400 audit(1780180808.702:337): avc: denied { write } for pid=6375 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.955840][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 116.974464][ T29] audit: type=1400 audit(1780180808.782:338): avc: denied { read } for pid=6377 comm="syz.0.144" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 116.978413][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.011142][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 117.017867][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.024783][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 117.031398][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.037897][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 117.044512][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.051858][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 117.058473][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.065737][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 117.072356][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 117.078485][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 117.088368][ T5619] usb 4-1: device descriptor read/64, error -71 [ 117.150330][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.183764][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.973917][ T5619] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 118.122054][ T5619] usb 4-1: device descriptor read/64, error -71 [ 118.233124][ T5619] usb usb4-port1: attempt power cycle [ 118.581804][ T5619] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 118.611815][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.640570][ T5619] usb 4-1: device descriptor read/8, error -71 [ 118.882112][ T5619] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 118.935158][ T5619] usb 4-1: device descriptor read/8, error -71 [ 119.083823][ T5619] usb usb4-port1: unable to enumerate USB device [ 119.787358][ T5747] usb 3-1: USB disconnect, device number 6 [ 119.858245][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 119.883791][ T10] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 120.538877][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 120.538968][ T29] audit: type=1400 audit(1780180812.482:348): avc: denied { mounton } for pid=6425 comm="syz.3.157" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 120.841683][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.856204][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.867117][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.880714][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 120.889815][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.051584][ T10] usb 5-1: config 0 descriptor?? [ 121.069266][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 121.118058][ T6434] tmpfs: Bad value for 'mpol' [ 121.542215][ T5747] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 121.607248][ T804] usb 5-1: USB disconnect, device number 7 [ 121.747287][ T29] audit: type=1400 audit(1780180813.692:349): avc: denied { write } for pid=6415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.771343][ T5747] usb 2-1: config 127 has an invalid interface number: 95 but max is 0 [ 121.812109][ T5747] usb 2-1: config 127 has no interface number 0 [ 121.831680][ T5747] usb 2-1: config 127 interface 95 altsetting 0 endpoint 0xC has an invalid bInterval 132, changing to 11 [ 121.846795][ T6454] syz.4.163 uses obsolete (PF_INET,SOCK_PACKET) [ 121.860576][ T5747] usb 2-1: config 127 interface 95 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.873685][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 121.897096][ T5747] usb 2-1: config 127 interface 95 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 121.919870][ T5747] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 121.943343][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.985757][ T5747] ti_usb_3410_5052 2-1:127.95: TI USB 3410 1 port adapter converter detected [ 122.324322][ T6461] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.165'. [ 123.008697][ T5747] ti_usb_3410_5052 2-1:127.95: missing endpoints [ 123.022359][ T5747] usb 2-1: USB disconnect, device number 7 [ 123.138494][ T29] audit: type=1400 audit(1780180815.082:350): avc: denied { write } for pid=6458 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.954829][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 124.145858][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 124.180167][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 124.217989][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.254830][ T29] audit: type=1400 audit(1780180816.192:351): avc: denied { append } for pid=6478 comm="syz.1.171" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.258302][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.350610][ T29] audit: type=1400 audit(1780180816.202:352): avc: denied { map } for pid=6478 comm="syz.1.171" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=11485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.385524][ T6464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.441926][ T6464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.493023][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.891701][ T5616] usb 5-1: USB disconnect, device number 8 [ 125.901169][ T29] audit: type=1400 audit(1780180817.832:353): avc: denied { write } for pid=6474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.121560][ T29] audit: type=1400 audit(1780180818.062:354): avc: denied { write } for pid=6499 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.202101][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.361818][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 126.373423][ T10] usb 2-1: config 0 has no interfaces? [ 126.381196][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.413720][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.467361][ T10] usb 2-1: config 0 descriptor?? [ 126.592115][ T29] audit: type=1400 audit(1780180818.522:355): avc: denied { connect } for pid=6501 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.766009][ T29] audit: type=1400 audit(1780180818.572:356): avc: denied { bind } for pid=6501 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.912698][ T29] audit: type=1400 audit(1780180818.852:357): avc: denied { connect } for pid=6504 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.530326][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.536763][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.047736][ T989] usb 2-1: USB disconnect, device number 8 [ 129.128104][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 129.230767][ T6533] loop7: detected capacity change from 0 to 7 [ 129.244992][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.254286][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.263333][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.272554][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.284267][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.293454][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.310791][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.319990][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.329102][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.338306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.352949][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.362160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.371747][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.380885][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.388767][ T6533] ldm_validate_partition_table(): Disk read failed. [ 129.396973][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.406160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.415270][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.424488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.432634][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.441879][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 129.450943][ T6533] Dev loop7: unable to read RDB block 0 [ 129.458483][ T6533] loop7: unable to read partition table [ 129.464450][ T6533] loop7: partition table beyond EOD, truncated [ 129.472684][ T6533] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 129.546805][ T6539] netlink: 'syz.1.183': attribute type 3 has an invalid length. [ 129.597697][ T6540] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 129.641016][ T6539] netlink: 'syz.1.183': attribute type 3 has an invalid length. [ 129.659061][ T29] audit: type=1400 audit(1780180821.602:358): avc: denied { append } for pid=6541 comm="syz.0.185" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 129.669664][ T6542] usb usb8: usbfs: process 6542 (syz.0.185) did not claim interface 0 before use [ 129.699667][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.719492][ T6540] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.548380][ T29] audit: type=1400 audit(1780180823.492:359): avc: denied { name_connect } for pid=6545 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 131.671839][ T5738] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 131.730099][ T6557] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 131.761341][ T29] audit: type=1400 audit(1780180823.702:360): avc: denied { accept } for pid=6545 comm="syz.2.187" lport=47559 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.835175][ T5738] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.858303][ T29] audit: type=1400 audit(1780180823.722:361): avc: denied { read } for pid=6545 comm="syz.2.187" lport=47559 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 131.909160][ T5738] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.946379][ T29] audit: type=1400 audit(1780180823.772:362): avc: denied { setopt } for pid=6545 comm="syz.2.187" lport=47559 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 131.994462][ T5738] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 132.034119][ T5738] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.062255][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.098103][ T6554] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.117404][ T5738] hub 2-1:1.0: bad descriptor, ignoring hub [ 132.159985][ T5738] hub 2-1:1.0: probe with driver hub failed with error -5 [ 132.198419][ T5738] cdc_wdm 2-1:1.0: skipping garbage [ 132.214430][ T5738] cdc_wdm 2-1:1.0: skipping garbage [ 132.249956][ T5738] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 132.266997][ T5738] cdc_wdm 2-1:1.0: Unknown control protocol [ 132.325102][ T29] audit: type=1400 audit(1780180824.262:363): avc: denied { map } for pid=6566 comm="syz.4.192" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.416016][ T29] audit: type=1400 audit(1780180824.262:364): avc: denied { execute } for pid=6566 comm="syz.4.192" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.440430][ T5747] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 132.512960][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 132.519582][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 132.525672][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 132.564448][ T29] audit: type=1400 audit(1780180824.302:365): avc: denied { create } for pid=6564 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.599892][ T29] audit: type=1400 audit(1780180824.302:366): avc: denied { setopt } for pid=6564 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.640323][ T29] audit: type=1400 audit(1780180824.502:367): avc: denied { read write } for pid=6572 comm="syz.4.193" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.683260][ T5747] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.696140][ T29] audit: type=1400 audit(1780180824.502:368): avc: denied { open } for pid=6572 comm="syz.4.193" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.701555][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.731626][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.761245][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 132.783682][ T5747] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 132.793426][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.801800][ T989] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.822382][ T5747] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.841800][ T5747] usb 1-1: Product: syz [ 132.851504][ T5747] usb 1-1: Manufacturer: syz [ 132.867085][ T5747] usb 1-1: SerialNumber: syz [ 132.890126][ T5747] usb 1-1: config 0 descriptor?? [ 132.910560][ T6542] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.981783][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 132.995112][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 133.007470][ T989] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 133.029134][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.058038][ T989] usb 5-1: Product: syz [ 133.068875][ T989] usb 5-1: Manufacturer: syz [ 133.078060][ T989] usb 5-1: SerialNumber: syz [ 133.084502][ T5747] rc_core: IR keymap rc-streamzap not found [ 133.091032][ T5747] Registered IR keymap rc-empty [ 133.099620][ T989] usb 5-1: config 0 descriptor?? [ 133.111174][ T989] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 133.125606][ T5747] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 133.137963][ T989] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 133.156999][ T5747] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 133.191226][ T5747] usb 1-1: USB disconnect, device number 7 [ 133.339852][ T6573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6573 comm=syz.4.193 [ 133.354341][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 133.366338][ T6573] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 133.474204][ T989] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 133.560938][ T989] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 133.572853][ T989] em28xx 5-1:0.0: board has no eeprom [ 133.644697][ T989] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 133.655045][ T989] em28xx 5-1:0.0: dvb set to bulk mode. [ 133.663798][ T5747] em28xx 5-1:0.0: Binding DVB extension [ 133.698735][ T989] usb 5-1: USB disconnect, device number 9 [ 133.724805][ T989] em28xx 5-1:0.0: Disconnecting em28xx [ 133.791242][ T5747] em28xx 5-1:0.0: Registering input extension [ 133.811216][ T989] em28xx 5-1:0.0: Closing input extension [ 134.382892][ T5616] usb 2-1: USB disconnect, device number 9 [ 135.363872][ T6598] overlayfs: failed to resolve './file2': -2 [ 135.452647][ T989] em28xx 5-1:0.0: Freeing device [ 136.507295][ T5616] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.618565][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 136.618582][ T29] audit: type=1400 audit(1780180828.522:375): avc: denied { getopt } for pid=6606 comm="syz.2.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.693337][ T5616] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 136.718076][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.753517][ T5616] usb 4-1: config 0 descriptor?? [ 136.781479][ T5616] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 136.961808][ T989] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 136.977839][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.987465][ T5616] gp8psk: usb in 128 operation failed. [ 137.002479][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.165136][ T989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.175704][ T989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 137.190601][ T989] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 137.238922][ T989] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 137.257016][ T5616] gp8psk: usb in 146 operation failed. [ 137.275991][ T5616] gp8psk: failed to get FW version [ 137.276345][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.309116][ T5616] gp8psk: usb in 149 operation failed. [ 137.322685][ T5616] gp8psk: failed to get FPGA version [ 137.336142][ T5616] gp8psk: usb in 138 operation failed. [ 137.350285][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.370259][ T5616] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 137.382167][ T6614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.390336][ T5616] usb 4-1: media controller created [ 137.392898][ T989] hub 2-1:1.0: bad descriptor, ignoring hub [ 137.428193][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.454289][ T989] hub 2-1:1.0: probe with driver hub failed with error -5 [ 137.463165][ T5747] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.485097][ T989] cdc_wdm 2-1:1.0: skipping garbage [ 137.504088][ T989] cdc_wdm 2-1:1.0: skipping garbage [ 137.523530][ T5616] gp8psk_fe: Frontend attached [ 137.551493][ T989] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 137.551493][ T5616] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 137.587451][ T989] cdc_wdm 2-1:1.0: Unknown control protocol [ 137.591226][ T5616] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 137.622030][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 137.635528][ T5747] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.651099][ T5747] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 137.680161][ T5747] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 137.696554][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.721767][ T5747] usb 5-1: Product: syz [ 137.736302][ T5747] usb 5-1: Manufacturer: syz [ 137.749129][ T5747] usb 5-1: SerialNumber: syz [ 137.764278][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.797272][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.914804][ T5616] gp8psk: usb in 138 operation failed. [ 138.038896][ T5616] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 138.063576][ T5616] gp8psk: found Genpix USB device pID = 203 (hex) [ 138.064139][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.080865][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.298848][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 138.313058][ T29] audit: type=1400 audit(1780180830.242:376): avc: denied { setopt } for pid=6628 comm="syz.3.212" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.607985][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 138.820450][ T29] audit: type=1400 audit(1780180830.762:377): avc: denied { read write } for pid=6624 comm="syz.4.211" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.893625][ T29] audit: type=1400 audit(1780180830.762:378): avc: denied { open } for pid=6624 comm="syz.4.211" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.917516][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 139.098576][ T29] audit: type=1400 audit(1780180830.792:379): avc: denied { ioctl } for pid=6624 comm="syz.4.211" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.415452][ T5616] usb 4-1: USB disconnect, device number 8 [ 139.427037][ T29] audit: type=1400 audit(1780180831.342:380): avc: denied { mount } for pid=6624 comm="syz.4.211" name="/" dev="ramfs" ino=11946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.419277][ T29] audit: type=1400 audit(1780180833.242:381): avc: denied { write } for pid=6635 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 141.802040][ T989] usb 2-1: USB disconnect, device number 10 [ 142.078537][ T29] audit: type=1400 audit(1780180833.932:382): avc: denied { create } for pid=6646 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.480619][ T29] audit: type=1400 audit(1780180833.942:383): avc: denied { ioctl } for pid=6646 comm="syz.2.216" path="socket:[10898]" dev="sockfs" ino=10898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.609035][ T29] audit: type=1400 audit(1780180833.942:384): avc: denied { connect } for pid=6646 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.629375][ T29] audit: type=1400 audit(1780180833.942:385): avc: denied { write } for pid=6646 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.658264][ T29] audit: type=1400 audit(1780180834.022:386): avc: denied { name_bind 0x1000000 } for pid=6646 comm="syz.2.216" path="socket:[11974]" dev="sockfs" ino=11974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 142.714712][ T5616] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 143.441075][ T6661] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 144.089059][ T5616] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.313363][ T29] audit: type=1400 audit(1780180836.262:387): avc: denied { name_bind } for pid=6666 comm="syz.0.220" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 144.484342][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.515887][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.558351][ T5616] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 144.572266][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.591488][ T5616] usb 4-1: config 0 descriptor?? [ 144.606362][ T29] audit: type=1400 audit(1780180836.552:388): avc: denied { create } for pid=6673 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.652773][ T29] audit: type=1400 audit(1780180836.552:389): avc: denied { accept } for pid=6673 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.813829][ T5616] usbhid 4-1:0.0: can't add hid device: -71 [ 144.820454][ T5616] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 144.841225][ T5616] usb 4-1: USB disconnect, device number 9 [ 144.957192][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.225'. [ 144.993398][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.225'. [ 145.025650][ T6680] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 145.044499][ T29] audit: type=1400 audit(1780180836.992:390): avc: denied { listen } for pid=6679 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.066318][ T6680] bond1 (unregistering): Released all slaves [ 145.067753][ T29] audit: type=1400 audit(1780180837.012:391): avc: denied { shutdown } for pid=6679 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.171621][ T6679] mmap: syz.3.225 (6679): VmData 37650432 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 145.487119][ T6689] overlayfs: failed to resolve './file1/file0': -2 [ 145.598754][ T5616] usb 5-1: USB disconnect, device number 10 [ 145.854086][ T5813] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.013965][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.060218][ T5813] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.111413][ T5813] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 146.123875][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.146842][ T5813] usb 3-1: config 0 descriptor?? [ 149.118022][ T6717] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 149.120141][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.234'. [ 149.180684][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 149.180699][ T29] audit: type=1400 audit(1780180841.122:399): avc: denied { name_bind } for pid=6723 comm="syz.0.235" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 149.210646][ T29] audit: type=1400 audit(1780180841.132:400): avc: denied { write } for pid=6726 comm="syz.4.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.085634][ T804] usb 3-1: USB disconnect, device number 7 [ 150.411819][ T5730] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 150.431809][ T5813] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.575131][ T5730] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.591815][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 150.597905][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.621820][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 150.631800][ T5730] usb 4-1: Product: syz [ 150.639789][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 7 [ 150.655084][ T5730] usb 4-1: Manufacturer: syz [ 150.678285][ T5730] usb 4-1: SerialNumber: syz [ 150.691820][ T5813] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1544, setting to 1024 [ 150.708427][ T5730] usb 4-1: config 0 descriptor?? [ 150.729700][ T5813] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.746596][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.757903][ T5813] usb 2-1: Product: syz [ 150.762457][ T5813] usb 2-1: Manufacturer: syz [ 150.767294][ T5813] usb 2-1: SerialNumber: syz [ 151.754017][ T5730] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 151.764388][ T5730] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 154.449830][ T5813] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 154.464446][ T5813] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 154.558670][ T5813] usb 2-1: USB disconnect, device number 11 [ 154.628402][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.791980][ T5619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.277973][ T29] audit: type=1400 audit(1780180847.222:401): avc: denied { read write } for pid=6776 comm="syz.2.249" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.301546][ T29] audit: type=1400 audit(1780180847.222:402): avc: denied { open } for pid=6776 comm="syz.2.249" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.313557][ T6777] loop5: detected capacity change from 0 to 4095 [ 155.325235][ T5619] usb 1-1: device descriptor read/64, error -71 [ 155.338042][ T29] audit: type=1400 audit(1780180847.232:403): avc: denied { append } for pid=6776 comm="syz.2.249" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.693221][ T5619] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.122355][ T29] audit: type=1400 audit(1780180848.062:404): avc: denied { read } for pid=6786 comm="syz.4.251" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.149699][ T29] audit: type=1400 audit(1780180848.092:405): avc: denied { open } for pid=6786 comm="syz.4.251" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.038855][ T5619] usb 1-1: device descriptor read/64, error -71 [ 157.151975][ T5619] usb usb1-port1: attempt power cycle [ 157.336379][ T804] usb 4-1: USB disconnect, device number 10 [ 157.350044][ T29] audit: type=1400 audit(1780180849.292:406): avc: denied { setopt } for pid=6793 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.553018][ T5619] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.782250][ T5619] usb 1-1: device not accepting address 10, error -71 [ 159.342315][ T6817] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 159.351337][ T6817] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 159.360377][ T6817] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 159.457440][ T6820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.258'. [ 160.378876][ T6826] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.259'. [ 161.233387][ T29] audit: type=1400 audit(1780180853.182:407): avc: denied { ioctl } for pid=6829 comm="syz.0.262" path="socket:[12418]" dev="sockfs" ino=12418 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 161.252546][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 161.283575][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 162.543734][ T5619] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 162.826964][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.875823][ T5619] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.930075][ T5619] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 162.978157][ T5619] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 163.003254][ T5619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.045664][ T6835] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.526617][ T5619] hub 1-1:1.0: bad descriptor, ignoring hub [ 163.558460][ T5619] hub 1-1:1.0: probe with driver hub failed with error -5 [ 163.571225][ T5619] cdc_wdm 1-1:1.0: skipping garbage [ 163.577001][ T5619] cdc_wdm 1-1:1.0: skipping garbage [ 163.624484][ T5619] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 163.641893][ T5619] cdc_wdm 1-1:1.0: Unknown control protocol [ 163.769685][ T29] audit: type=1400 audit(1780180855.712:408): avc: denied { connect } for pid=6847 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.934758][ T6859] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 163.943438][ T6859] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 163.952075][ T6859] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 164.151355][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.158010][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.164851][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.171456][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.178229][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.184821][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.191214][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.197803][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.204193][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.210778][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.217338][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.223926][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.230269][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.236855][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.243247][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.249832][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.256167][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.262751][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.269642][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 164.276245][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 164.516727][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.563432][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.664642][ T29] audit: type=1400 audit(1780180856.602:409): avc: denied { mounton } for pid=6834 comm="syz.0.265" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 166.254112][ T5619] usb 1-1: USB disconnect, device number 12 [ 167.665836][ T6873] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.271'. [ 168.897520][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 168.919725][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 168.957456][ T5813] libceph: connect (1)[c::]:6789 error -22 [ 168.957636][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 169.201575][ T6884] ceph: No mds server is up or the cluster is laggy [ 169.214120][ T5747] libceph: connect (1)[c::]:6789 error -22 [ 169.236730][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 169.433823][ T6893] ================================================================== [ 169.441929][ T6893] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 169.449666][ T6893] Read of size 8 at addr ffff88802e2a2818 by task syz.0.277/6893 [ 169.457388][ T6893] [ 169.459719][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.459748][ T6893] Tainted: [L]=SOFTLOCKUP [ 169.459756][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.459768][ T6893] Call Trace: [ 169.459775][ T6893] [ 169.459783][ T6893] dump_stack_lvl+0x100/0x190 [ 169.459808][ T6893] print_report+0x13d/0x4b0 [ 169.459833][ T6893] ? __virt_addr_valid+0x239/0x430 [ 169.459852][ T6893] ? dvb_device_open+0x33f/0x3b0 [ 169.459876][ T6893] kasan_report+0xdf/0x1d0 [ 169.459898][ T6893] ? dvb_device_open+0x33f/0x3b0 [ 169.459926][ T6893] ? __pfx_dvb_device_open+0x10/0x10 [ 169.459950][ T6893] dvb_device_open+0x33f/0x3b0 [ 169.459976][ T6893] ? __pfx_dvb_device_open+0x10/0x10 [ 169.460000][ T6893] chrdev_open+0x234/0x6a0 [ 169.460023][ T6893] ? __pfx_chrdev_open+0x10/0x10 [ 169.460045][ T6893] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 169.460074][ T6893] do_dentry_open+0x6ab/0x14d0 [ 169.460094][ T6893] ? __pfx_chrdev_open+0x10/0x10 [ 169.460119][ T6893] vfs_open+0x82/0x3f0 [ 169.460144][ T6893] path_openat+0x208c/0x31a0 [ 169.460172][ T6893] ? __pfx_path_openat+0x10/0x10 [ 169.460198][ T6893] do_file_open+0x20e/0x430 [ 169.460217][ T6893] ? __pfx_do_file_open+0x10/0x10 [ 169.460248][ T6893] ? alloc_fd+0x476/0x790 [ 169.460272][ T6893] ? do_getname+0x191/0x390 [ 169.460300][ T6893] do_sys_openat2+0x10d/0x1e0 [ 169.460325][ T6893] ? __pfx_do_sys_openat2+0x10/0x10 [ 169.460354][ T6893] __x64_sys_openat+0x12d/0x210 [ 169.460380][ T6893] ? __pfx___x64_sys_openat+0x10/0x10 [ 169.460405][ T6893] ? rcu_is_watching+0x12/0xc0 [ 169.460432][ T6893] do_syscall_64+0x115/0x870 [ 169.460454][ T6893] ? clear_bhb_loop+0x40/0x90 [ 169.460474][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.460492][ T6893] RIP: 0033:0x7fe11d35d68e [ 169.460505][ T6893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.460529][ T6893] RSP: 002b:00007fe11e1e6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.460546][ T6893] RAX: ffffffffffffffda RBX: 00007fe11e1e76c0 RCX: 00007fe11d35d68e [ 169.460557][ T6893] RDX: 0000000000040002 RSI: 00007fe11e1e6c00 RDI: ffffffffffffff9c [ 169.460569][ T6893] RBP: 00007fe11e1e6c00 R08: 0000000000000000 R09: 0000000000000000 [ 169.460580][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 169.460590][ T6893] R13: 00007fe11d616038 R14: 00007fe11d615fa0 R15: 00007ffe0db1cab8 [ 169.460607][ T6893] [ 169.460612][ T6893] [ 169.709352][ T6893] Allocated by task 1: [ 169.713398][ T6893] kasan_save_stack+0x30/0x50 [ 169.718056][ T6893] kasan_save_track+0x14/0x30 [ 169.722707][ T6893] __kasan_kmalloc+0xaa/0xb0 [ 169.727271][ T6893] dvb_register_device+0x1d6/0x1e20 [ 169.732455][ T6893] dvb_register_frontend+0x552/0x820 [ 169.737723][ T6893] vidtv_bridge_probe+0x44b/0xa30 [ 169.742738][ T6893] platform_probe+0x106/0x1d0 [ 169.747394][ T6893] really_probe+0x241/0xa60 [ 169.751877][ T6893] __driver_probe_device+0x22e/0x480 [ 169.757142][ T6893] driver_probe_device+0x4c/0x1b0 [ 169.762148][ T6893] __driver_attach+0x21f/0x5d0 [ 169.766893][ T6893] bus_for_each_dev+0x13e/0x1d0 [ 169.771720][ T6893] bus_add_driver+0x305/0x5b0 [ 169.776377][ T6893] driver_register+0x1e2/0x360 [ 169.781122][ T6893] vidtv_bridge_init+0x38/0x70 [ 169.785866][ T6893] do_one_initcall+0x121/0x750 [ 169.790609][ T6893] kernel_init_freeable+0x6ea/0x7b0 [ 169.795796][ T6893] kernel_init+0x1f/0x1e0 [ 169.800102][ T6893] ret_from_fork+0x72b/0xd50 [ 169.804685][ T6893] ret_from_fork_asm+0x1a/0x30 [ 169.809432][ T6893] [ 169.811732][ T6893] Freed by task 6865: [ 169.815685][ T6893] kasan_save_stack+0x30/0x50 [ 169.820341][ T6893] kasan_save_track+0x14/0x30 [ 169.824993][ T6893] kasan_save_free_info+0x3b/0x70 [ 169.830010][ T6893] __kasan_slab_free+0x5f/0x80 [ 169.834752][ T6893] kfree+0x223/0x6c0 [ 169.838631][ T6893] dvb_device_put.part.0+0x57/0x90 [ 169.843730][ T6893] dvb_device_open+0x2ba/0x3b0 [ 169.848480][ T6893] chrdev_open+0x234/0x6a0 [ 169.852895][ T6893] do_dentry_open+0x6ab/0x14d0 [ 169.857635][ T6893] vfs_open+0x82/0x3f0 [ 169.861685][ T6893] path_openat+0x208c/0x31a0 [ 169.866260][ T6893] do_file_open+0x20e/0x430 [ 169.870743][ T6893] do_sys_openat2+0x10d/0x1e0 [ 169.875403][ T6893] __x64_sys_openat+0x12d/0x210 [ 169.880235][ T6893] do_syscall_64+0x115/0x870 [ 169.884805][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.890689][ T6893] [ 169.892989][ T6893] The buggy address belongs to the object at ffff88802e2a2800 [ 169.892989][ T6893] which belongs to the cache kmalloc-256 of size 256 [ 169.907279][ T6893] The buggy address is located 24 bytes inside of [ 169.907279][ T6893] freed 256-byte region [ffff88802e2a2800, ffff88802e2a2900) [ 169.920970][ T6893] [ 169.923277][ T6893] The buggy address belongs to the physical page: [ 169.929750][ T6893] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e2a2 [ 169.938485][ T6893] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.946962][ T6893] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 169.954484][ T6893] page_type: f5(slab) [ 169.958444][ T6893] raw: 00fff00000000040 ffff88813fe2eb40 dead000000000100 dead000000000122 [ 169.967003][ T6893] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 169.975565][ T6893] head: 00fff00000000040 ffff88813fe2eb40 dead000000000100 dead000000000122 [ 169.984210][ T6893] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 169.993030][ T6893] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 170.001679][ T6893] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 170.010338][ T6893] page dumped because: kasan: bad access detected [ 170.016740][ T6893] page_owner tracks the page as allocated [ 170.022434][ T6893] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8668871795, free_ts 0 [ 170.042035][ T6893] post_alloc_hook+0xfd/0x120 [ 170.046706][ T6893] get_page_from_freelist+0x11a6/0x3410 [ 170.052234][ T6893] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 170.058120][ T6893] new_slab+0xa6/0x6c0 [ 170.062222][ T6893] refill_objects+0x277/0x420 [ 170.066906][ T6893] __pcs_replace_empty_main+0x375/0x650 [ 170.072446][ T6893] __kmalloc_cache_noprof+0x493/0x6f0 [ 170.077800][ T6893] bus_add_driver+0x92/0x5b0 [ 170.082368][ T6893] driver_register+0x1e2/0x360 [ 170.087113][ T6893] usb_register_driver+0x21c/0x3e0 [ 170.092200][ T6893] do_one_initcall+0x121/0x750 [ 170.096947][ T6893] kernel_init_freeable+0x6ea/0x7b0 [ 170.102119][ T6893] kernel_init+0x1f/0x1e0 [ 170.106427][ T6893] ret_from_fork+0x72b/0xd50 [ 170.110996][ T6893] ret_from_fork_asm+0x1a/0x30 [ 170.115741][ T6893] page_owner free stack trace missing [ 170.121103][ T6893] [ 170.123403][ T6893] Memory state around the buggy address: [ 170.129010][ T6893] ffff88802e2a2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.137045][ T6893] ffff88802e2a2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.145086][ T6893] >ffff88802e2a2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.153118][ T6893] ^ [ 170.157939][ T6893] ffff88802e2a2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.165976][ T6893] ffff88802e2a2900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.174010][ T6893] ================================================================== [ 170.243388][ T6893] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.250622][ T6893] CPU: 1 UID: 0 PID: 6893 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.261380][ T6893] Tainted: [L]=SOFTLOCKUP [ 170.265687][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.275732][ T6893] Call Trace: [ 170.278997][ T6893] [ 170.281906][ T6893] dump_stack_lvl+0x100/0x190 [ 170.286569][ T6893] vpanic+0x552/0x970 [ 170.290527][ T6893] ? __pfx_vpanic+0x10/0x10 [ 170.295015][ T6893] ? dvb_device_open+0x33f/0x3b0 [ 170.299936][ T6893] panic+0xd1/0xe0 [ 170.303637][ T6893] ? __pfx_panic+0x10/0x10 [ 170.308035][ T6893] ? dvb_device_open+0x33f/0x3b0 [ 170.312961][ T6893] ? preempt_schedule_common+0x42/0xc0 [ 170.318408][ T6893] check_panic_on_warn.cold+0x19/0x34 [ 170.323776][ T6893] end_report.part.0+0x3a/0x90 [ 170.328523][ T6893] kasan_report.cold+0xe/0x18 [ 170.333185][ T6893] ? dvb_device_open+0x33f/0x3b0 [ 170.338115][ T6893] ? __pfx_dvb_device_open+0x10/0x10 [ 170.343384][ T6893] dvb_device_open+0x33f/0x3b0 [ 170.348134][ T6893] ? __pfx_dvb_device_open+0x10/0x10 [ 170.353403][ T6893] chrdev_open+0x234/0x6a0 [ 170.357802][ T6893] ? __pfx_chrdev_open+0x10/0x10 [ 170.362743][ T6893] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 170.369068][ T6893] do_dentry_open+0x6ab/0x14d0 [ 170.373811][ T6893] ? __pfx_chrdev_open+0x10/0x10 [ 170.378732][ T6893] vfs_open+0x82/0x3f0 [ 170.382783][ T6893] path_openat+0x208c/0x31a0 [ 170.387358][ T6893] ? __pfx_path_openat+0x10/0x10 [ 170.392295][ T6893] do_file_open+0x20e/0x430 [ 170.396781][ T6893] ? __pfx_do_file_open+0x10/0x10 [ 170.401792][ T6893] ? alloc_fd+0x476/0x790 [ 170.406121][ T6893] ? do_getname+0x191/0x390 [ 170.410613][ T6893] do_sys_openat2+0x10d/0x1e0 [ 170.415276][ T6893] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.420467][ T6893] __x64_sys_openat+0x12d/0x210 [ 170.425391][ T6893] ? __pfx___x64_sys_openat+0x10/0x10 [ 170.430748][ T6893] ? rcu_is_watching+0x12/0xc0 [ 170.435514][ T6893] do_syscall_64+0x115/0x870 [ 170.440099][ T6893] ? clear_bhb_loop+0x40/0x90 [ 170.444757][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.450631][ T6893] RIP: 0033:0x7fe11d35d68e [ 170.455032][ T6893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.474792][ T6893] RSP: 002b:00007fe11e1e6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.483184][ T6893] RAX: ffffffffffffffda RBX: 00007fe11e1e76c0 RCX: 00007fe11d35d68e [ 170.491139][ T6893] RDX: 0000000000040002 RSI: 00007fe11e1e6c00 RDI: ffffffffffffff9c [ 170.499095][ T6893] RBP: 00007fe11e1e6c00 R08: 0000000000000000 R09: 0000000000000000 [ 170.507046][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 170.514995][ T6893] R13: 00007fe11d616038 R14: 00007fe11d615fa0 R15: 00007ffe0db1cab8 [ 170.522966][ T6893] [ 170.526194][ T6893] Kernel Offset: disabled [ 170.530492][ T6893] Rebooting in 86400 seconds..