last executing test programs: 11.537631886s ago: executing program 1 (id=105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fff, 0x180c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="100015e0"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x6c}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x70, 0x200, 0x38, @local, @private1, 0x760, 0x80, 0x4, 0x3}}) fstat(r1, &(0x7f00000005c0)) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000100000091dc00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 10.786613994s ago: executing program 2 (id=107): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x7ffffffd, @mcast1, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@local, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x4}, @lsrr={0x83, 0x7, 0x0, [@rand_addr]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.569721632s ago: executing program 1 (id=110): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x7fff, 0x180c0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="100015e0"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x6c}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x70, 0x200, 0x38, @local, @private1, 0x760, 0x80, 0x4, 0x3}}) fstat(r1, &(0x7f00000005c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x18, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 8.183719869s ago: executing program 0 (id=116): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121500020000000109021b000100000905820300"/41], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg$can_bcm(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/168, 0xa8}, 0x10040) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={0x0}}, 0x4040) sendmsg$TIPC_NL_NODE_GET(r2, 0x0, 0x24000010) 8.146854131s ago: executing program 1 (id=117): syz_emit_ethernet(0x76, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002c9bbd70080100ff0000000000", @ANYRES32=0x0, @ANYBLOB="0c009900090000003d000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) 6.728213208s ago: executing program 2 (id=120): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x1, 0x7871, 0xe, 0x10, {{0x6, 0x4, 0x2, 0x39, 0x18, 0x67, 0x0, 0x2, 0x4, 0x0, @broadcast, @remote, {[@end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @empty, 0xc, 0x0, 0xdb, 0x80, 0x5, 0x400110, r4}) clock_gettime(0x8, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c6929e178"], 0x8) 5.589735054s ago: executing program 2 (id=122): mkdir(&(0x7f0000000180)='./file1\x00', 0x12f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61"], 0xc8}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080), 0x8) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 5.338022772s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000100)='./file0\x00', 0x880ff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80, 0xc2) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "b9dc05cc9591a0e9", "9d597b8566fb9b1ff9e847ef151545d4", "a483a4b2", "b2e71c7c92421350"}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a9000000000085180000020000008500000005000000950000000000001c00000000000000a9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 5.087740329s ago: executing program 3 (id=124): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000001180)='./file1\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 5.007940904s ago: executing program 2 (id=125): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000300)={r4, r4, r3}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0xc0189436, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.586927238s ago: executing program 3 (id=126): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x3bf, {}, {}, @note={0x4}}], 0x38) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000180)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, 0x400}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4.469971337s ago: executing program 3 (id=127): socket$rxrpc(0x21, 0x2, 0xa) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) 4.428079775s ago: executing program 1 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x454e, 0xffffffffffffffc9) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) chdir(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xffff, 0xfffffffe}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) 4.1059342s ago: executing program 3 (id=129): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x7ffffffd, @mcast1, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@local, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @lsrr={0x83, 0x7, 0x0, [@rand_addr]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.741538158s ago: executing program 0 (id=130): prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) 3.692202171s ago: executing program 0 (id=131): pipe2(0x0, 0x0) io_setup(0x2869b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 3.202167355s ago: executing program 2 (id=132): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r4) r6 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140), 0x0, r4) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r6, r5, r6}, &(0x7f0000000440)=""/242, 0xf2, &(0x7f00000002c0)={&(0x7f0000000400)={'crct10dif-generic\x00'}}) 3.201776005s ago: executing program 0 (id=133): syz_emit_ethernet(0x76, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002c9bbd70080100ff0000000000", @ANYRES32=0x0, @ANYBLOB="0c009900090000003d000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) 3.01666033s ago: executing program 4 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r2 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000540)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x80013, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001800), 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x40566f, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x2000, 0x3a0, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000280)) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, r8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r9, 0x0, 0x0, 0x0, 0x44040}) unshare(0x22020600) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffff8, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0x6}}}, 0x24}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.866475612s ago: executing program 4 (id=135): mkdir(&(0x7f0000000180)='./file1\x00', 0x12f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61"], 0xc8}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080), 0x8) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.724360392s ago: executing program 2 (id=136): syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100001d122610d118af1e79070102030109021b0001000000000904"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket(0x1e, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x4, 0x0, 0x7, 0x1}, {0x3, 0x9, 0x7, 0x4}, {0xe4, 0xfffffffc}}) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r6) r9 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) request_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r11, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 1.651274106s ago: executing program 0 (id=137): r0 = creat(0x0, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2a]}, 0x8) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x101800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000001280)=ANY=[], 0x274}}, 0x48800) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) write$nci(r0, &(0x7f0000000400)=ANY=[], 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.597162639s ago: executing program 4 (id=138): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@enum, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3a, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x20) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0xff, 0x0, @tick=0x3bf, {}, {}, @note={0x4}}], 0x38) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000180)={@hyper}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 1.543115365s ago: executing program 4 (id=139): socket$rxrpc(0x21, 0x2, 0xa) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x9) 1.458086485s ago: executing program 4 (id=140): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd27, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x1) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x10}}, 0x0) 882.952849ms ago: executing program 3 (id=141): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000001180)='./file1\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 336.884967ms ago: executing program 0 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa51ee000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000000c0)=0x33) 335.567693ms ago: executing program 4 (id=143): socket$inet6(0xa, 0x40000080806, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shmget(0xffffffffffffffff, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x15) ioctl$TCFLSH(r5, 0xc0384707, 0x20000000) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000025c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x5) creat(&(0x7f0000000440)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='ocfs2\x00', 0x0, 0x0) 22.131717ms ago: executing program 1 (id=144): pipe2(0x0, 0x0) io_setup(0x2869b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 0s ago: executing program 3 (id=145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000000300)=""/150, 0x96, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 50.438821][ T29] audit: type=1400 audit(1730208693.654:88): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.441892][ T5821] cgroup: Unknown subsys name 'net' [ 50.461599][ T29] audit: type=1400 audit(1730208693.654:89): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.489279][ T29] audit: type=1400 audit(1730208693.684:90): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.626373][ T5821] cgroup: Unknown subsys name 'cpuset' [ 50.633474][ T5821] cgroup: Unknown subsys name 'rlimit' [ 50.837836][ T29] audit: type=1400 audit(1730208694.054:91): avc: denied { setattr } for pid=5821 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.868684][ T29] audit: type=1400 audit(1730208694.054:92): avc: denied { create } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.890213][ T29] audit: type=1400 audit(1730208694.054:93): avc: denied { write } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.909530][ T5823] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.911524][ T29] audit: type=1400 audit(1730208694.054:94): avc: denied { read } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.939597][ T29] audit: type=1400 audit(1730208694.054:95): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.964720][ T29] audit: type=1400 audit(1730208694.054:96): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.988235][ T29] audit: type=1400 audit(1730208694.084:97): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.794330][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.249278][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.257632][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.265399][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.273161][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.280764][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.288127][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.414469][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.422692][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.430647][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.442181][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.449910][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.457449][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.485902][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.494906][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.505286][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.506223][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 55.506234][ T29] audit: type=1400 audit(1730208698.724:110): avc: denied { module_request } for pid=5831 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.516757][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.548588][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.554219][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.556066][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.565356][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.570412][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.577820][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.586019][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.591603][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.598252][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.612604][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.612676][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.627662][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.636116][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.643396][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.691902][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 55.777952][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.785292][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.792567][ T5831] bridge_slave_0: entered allmulticast mode [ 55.799701][ T5831] bridge_slave_0: entered promiscuous mode [ 55.808707][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.816232][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.823352][ T5831] bridge_slave_1: entered allmulticast mode [ 55.829905][ T5831] bridge_slave_1: entered promiscuous mode [ 55.891507][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.911082][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.951617][ T5831] team0: Port device team_slave_0 added [ 55.960496][ T5831] team0: Port device team_slave_1 added [ 56.022613][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.029827][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.056102][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.069783][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.076834][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.102796][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.119912][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 56.130062][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 56.159170][ T5831] hsr_slave_0: entered promiscuous mode [ 56.166349][ T5831] hsr_slave_1: entered promiscuous mode [ 56.251563][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 56.299279][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.306531][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.313645][ T5840] bridge_slave_0: entered allmulticast mode [ 56.320399][ T5840] bridge_slave_0: entered promiscuous mode [ 56.346093][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.353213][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.360731][ T5840] bridge_slave_1: entered allmulticast mode [ 56.367362][ T5840] bridge_slave_1: entered promiscuous mode [ 56.386592][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.393657][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.401323][ T5836] bridge_slave_0: entered allmulticast mode [ 56.407866][ T5836] bridge_slave_0: entered promiscuous mode [ 56.415260][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.422328][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.429504][ T5836] bridge_slave_1: entered allmulticast mode [ 56.436226][ T5836] bridge_slave_1: entered promiscuous mode [ 56.468348][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.492385][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.503110][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.517252][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.533141][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.540702][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.548043][ T5839] bridge_slave_0: entered allmulticast mode [ 56.554799][ T5839] bridge_slave_0: entered promiscuous mode [ 56.575934][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.583008][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.591046][ T5839] bridge_slave_1: entered allmulticast mode [ 56.597587][ T5839] bridge_slave_1: entered promiscuous mode [ 56.622998][ T5840] team0: Port device team_slave_0 added [ 56.632621][ T5840] team0: Port device team_slave_1 added [ 56.644155][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.655552][ T5836] team0: Port device team_slave_0 added [ 56.665228][ T5836] team0: Port device team_slave_1 added [ 56.671763][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 56.687251][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.721209][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.728414][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.754823][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.772719][ T5839] team0: Port device team_slave_0 added [ 56.788020][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.798686][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.825188][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.844490][ T5839] team0: Port device team_slave_1 added [ 56.854537][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.861485][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.887540][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.899993][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.907383][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.933659][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.964493][ T5840] hsr_slave_0: entered promiscuous mode [ 56.970857][ T5840] hsr_slave_1: entered promiscuous mode [ 56.977065][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.984889][ T5840] Cannot create hsr debugfs directory [ 57.003263][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.010402][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.036417][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.048421][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.055525][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.081967][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.128950][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.136247][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.143361][ T5846] bridge_slave_0: entered allmulticast mode [ 57.150004][ T5846] bridge_slave_0: entered promiscuous mode [ 57.157322][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.178859][ T5836] hsr_slave_0: entered promiscuous mode [ 57.185172][ T5836] hsr_slave_1: entered promiscuous mode [ 57.191050][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.199215][ T5836] Cannot create hsr debugfs directory [ 57.205638][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.212726][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.220023][ T5846] bridge_slave_1: entered allmulticast mode [ 57.226776][ T5846] bridge_slave_1: entered promiscuous mode [ 57.233136][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.251560][ T5839] hsr_slave_0: entered promiscuous mode [ 57.257802][ T5839] hsr_slave_1: entered promiscuous mode [ 57.263679][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.271426][ T5839] Cannot create hsr debugfs directory [ 57.289234][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.319648][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.342278][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.354588][ T5848] Bluetooth: hci0: command tx timeout [ 57.378340][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.436243][ T5846] team0: Port device team_slave_0 added [ 57.445095][ T5846] team0: Port device team_slave_1 added [ 57.484235][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.491197][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.517346][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.523998][ T5848] Bluetooth: hci1: command tx timeout [ 57.540812][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.548639][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.575005][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.618544][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.641309][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.650602][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.666582][ T5846] hsr_slave_0: entered promiscuous mode [ 57.672588][ T5846] hsr_slave_1: entered promiscuous mode [ 57.675946][ T5835] Bluetooth: hci4: command tx timeout [ 57.680804][ T5848] Bluetooth: hci3: command tx timeout [ 57.689926][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.697611][ T5846] Cannot create hsr debugfs directory [ 57.707308][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.740233][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.750391][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.757249][ T5848] Bluetooth: hci2: command tx timeout [ 57.787202][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.811589][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.823043][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.851258][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.861903][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.894633][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.916272][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.925963][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.954908][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.962100][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.971061][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.978178][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.028537][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.039976][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.049711][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.058778][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.092231][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.140626][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.165222][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.192948][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.203067][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.210202][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.219765][ T29] audit: type=1400 audit(1730208701.434:111): avc: denied { sys_module } for pid=5831 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.240982][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.241023][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.277954][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.285082][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.312843][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.348245][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.365673][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.372740][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.385200][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.392303][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.437544][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.444617][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.466379][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.473449][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.502589][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.517456][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.531202][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.592113][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.616612][ T5831] veth0_vlan: entered promiscuous mode [ 58.631116][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.638232][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.672157][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.679300][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.730893][ T5831] veth1_vlan: entered promiscuous mode [ 58.830191][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.873465][ T5831] veth0_macvtap: entered promiscuous mode [ 58.897386][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.916418][ T5831] veth1_macvtap: entered promiscuous mode [ 58.930287][ T5840] veth0_vlan: entered promiscuous mode [ 58.953317][ T5840] veth1_vlan: entered promiscuous mode [ 58.968913][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.001918][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.019268][ T5840] veth0_macvtap: entered promiscuous mode [ 59.028052][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.038304][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.048486][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.058027][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.067356][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.098238][ T5840] veth1_macvtap: entered promiscuous mode [ 59.107506][ T5836] veth0_vlan: entered promiscuous mode [ 59.113430][ T5846] veth0_vlan: entered promiscuous mode [ 59.138523][ T5839] veth0_vlan: entered promiscuous mode [ 59.150973][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.162505][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.174845][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.183321][ T5836] veth1_vlan: entered promiscuous mode [ 59.200101][ T5839] veth1_vlan: entered promiscuous mode [ 59.217327][ T5846] veth1_vlan: entered promiscuous mode [ 59.240616][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.251866][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.263436][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.292416][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.301827][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.311495][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.320513][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.338458][ T5839] veth0_macvtap: entered promiscuous mode [ 59.347322][ T5839] veth1_macvtap: entered promiscuous mode [ 59.365696][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.373666][ T5846] veth0_macvtap: entered promiscuous mode [ 59.373668][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.406301][ T5836] veth0_macvtap: entered promiscuous mode [ 59.429402][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.440182][ T5848] Bluetooth: hci0: command tx timeout [ 59.440900][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.457581][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.468048][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.478816][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.488193][ T5846] veth1_macvtap: entered promiscuous mode [ 59.509717][ T5836] veth1_macvtap: entered promiscuous mode [ 59.516522][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.527692][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.537978][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.548636][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.559516][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.569654][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.569655][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.569672][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.569682][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.608882][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.618819][ T5848] Bluetooth: hci1: command tx timeout [ 59.624360][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.631718][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.642390][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.654304][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.682756][ T29] audit: type=1400 audit(1730208702.884:112): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.bjLgDa/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 59.712985][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.725216][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.725367][ T29] audit: type=1400 audit(1730208702.884:113): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.736973][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.768125][ T5848] Bluetooth: hci3: command tx timeout [ 59.768160][ T5848] Bluetooth: hci4: command tx timeout [ 59.780273][ T29] audit: type=1400 audit(1730208702.884:114): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.bjLgDa/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.783353][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.806457][ T29] audit: type=1400 audit(1730208702.894:115): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.819157][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.837506][ T29] audit: type=1400 audit(1730208702.894:116): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.bjLgDa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 59.837541][ T29] audit: type=1400 audit(1730208702.894:117): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/root/syzkaller.bjLgDa/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.837572][ T29] audit: type=1400 audit(1730208702.894:118): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.837601][ T29] audit: type=1400 audit(1730208702.924:119): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.845066][ T5835] Bluetooth: hci2: command tx timeout [ 59.849422][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.961161][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.971996][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.983477][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.996470][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.005551][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.016693][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.026570][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.036431][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.047032][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.057323][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.068250][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.082978][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.087505][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.099524][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.115265][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.125125][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.136536][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.187178][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205110][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.214833][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.224678][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.239111][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.249895][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.260064][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.270769][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.281364][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.292427][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.302494][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.344850][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.360207][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.431674][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.458839][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.468703][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.521705][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.788204][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.885213][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.136159][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.147805][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.167924][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 61.167939][ T29] audit: type=1400 audit(1730208704.384:129): avc: denied { create } for pid=5919 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.204880][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.212728][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.219076][ T29] audit: type=1400 audit(1730208704.414:130): avc: denied { create } for pid=5920 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.269266][ T29] audit: type=1400 audit(1730208704.414:131): avc: denied { write } for pid=5920 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.270634][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.336479][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.339143][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.370128][ T29] audit: type=1400 audit(1730208704.584:132): avc: denied { mounton } for pid=5839 comm="syz-executor" path="/root/syzkaller.bVPeLL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.384307][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.477554][ T29] audit: type=1400 audit(1730208704.684:133): avc: denied { read write } for pid=5930 comm="syz.1.7" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.513311][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.533051][ T5835] Bluetooth: hci0: command tx timeout [ 61.542365][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.544050][ T29] audit: type=1400 audit(1730208704.684:134): avc: denied { open } for pid=5930 comm="syz.1.7" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.611083][ T5935] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 61.616872][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.629631][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.637312][ T29] audit: type=1400 audit(1730208704.684:135): avc: denied { ioctl } for pid=5930 comm="syz.1.7" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.668138][ T5935] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 61.675411][ T5835] Bluetooth: hci1: command tx timeout [ 61.678289][ T29] audit: type=1400 audit(1730208704.774:136): avc: denied { ioctl } for pid=5934 comm="syz.3.4" path="socket:[8306]" dev="sockfs" ino=8306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.706517][ T29] audit: type=1400 audit(1730208704.784:137): avc: denied { create } for pid=5934 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.789496][ T29] audit: type=1400 audit(1730208705.004:138): avc: denied { read } for pid=5939 comm="syz.2.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 61.813225][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.839549][ T5835] Bluetooth: hci4: command tx timeout [ 61.840060][ T5848] Bluetooth: hci3: command tx timeout [ 61.916439][ T5848] Bluetooth: hci2: command tx timeout [ 61.920368][ T5948] fuse: Unknown parameter 'grou00000000000000000000' [ 61.974505][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 61.974608][ T5918] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.983999][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.004439][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.046543][ T5881] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 62.252586][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.263046][ T5940] Zero length message leads to an empty skb [ 62.263987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.297944][ T5940] overlayfs: missing 'lowerdir' [ 62.315581][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 62.331939][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.343491][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.363454][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 62.407534][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 62.412236][ T5881] usb 2-1: config 0 descriptor?? [ 62.433182][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.472979][ T5918] usb 4-1: config 0 descriptor?? [ 62.479838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.558457][ T5964] overlayfs: missing 'lowerdir' [ 62.647829][ T25] IPVS: starting estimator thread 0... [ 62.657817][ T5931] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 62.718191][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 62.728563][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 62.742058][ T5966] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.745305][ T5918] usb 4-1: USB disconnect, device number 2 [ 62.759819][ T5968] IPVS: using max 28 ests per chain, 67200 per kthread [ 62.764187][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.813931][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.923953][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 62.955642][ T5881] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 62.997692][ T5883] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 63.010754][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 63.042444][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.061097][ T5883] usb 1-1: config 0 has no interface number 0 [ 63.081792][ T5880] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 63.096288][ T5881] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 63.116390][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.127660][ T5883] usb 1-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=d1.34 [ 63.128329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.137568][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.155211][ T5881] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 63.162560][ T5881] bigben 0003:146B:0902.0001: no output report found [ 63.230791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.268928][ T5880] usb 5-1: config 0 descriptor?? [ 63.313326][ T5883] usb 1-1: Product: syz [ 63.324557][ T1214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.360053][ T5880] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 63.376784][ T5883] usb 1-1: Manufacturer: syz [ 63.395146][ T5883] usb 1-1: SerialNumber: syz [ 63.399946][ T5880] usb 5-1: No valid video chain found. [ 63.407464][ T5883] usb 1-1: config 0 descriptor?? [ 63.421453][ T5883] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 63.428622][ T5883] usb 1-1: setting power ON [ 63.433363][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 63.538828][ T5961] netlink: 'syz.4.10': attribute type 11 has an invalid length. [ 63.540798][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.546980][ T5961] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.10'. [ 63.570364][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.574786][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 63.586418][ T1214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 63.599433][ T5848] Bluetooth: hci0: command tx timeout [ 63.605777][ T1214] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 63.614892][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.616500][ T5880] usb 5-1: USB disconnect, device number 2 [ 63.636160][ T1214] usb 4-1: config 0 descriptor?? [ 63.657094][ T1214] yurex 4-1:0.0: Could not submitting URB [ 63.663741][ T1214] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 63.699005][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 63.724811][ T5883] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 63.733145][ T5883] usb 1-1: media controller created [ 63.755216][ T5848] Bluetooth: hci1: command tx timeout [ 63.766783][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.784687][ T5883] cxusb: set interface failed [ 63.791356][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 63.797428][ T5883] cxusb: clear tuner gpio failed [ 63.802515][ T5883] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 63.854143][ T5883] rc_core: IR keymap rc-d680-dmb not found [ 63.859998][ T5883] Registered IR keymap rc-empty [ 63.867117][ T5883] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 63.875272][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.879171][ T5883] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 63.895984][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.905801][ T5883] dvb-usb: schedule remote query interval to 100 msecs. [ 63.910892][ T5886] usb 4-1: USB disconnect, device number 3 [ 63.912756][ T5883] usb 1-1: setting power OFF [ 63.912776][ T5883] dvb-usb: bulk message failed: -22 (2/0) [ 63.924390][ T5848] Bluetooth: hci4: command tx timeout [ 63.924426][ T5848] Bluetooth: hci3: command tx timeout [ 63.941694][ T5883] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 63.993897][ T5835] Bluetooth: hci2: command tx timeout [ 64.015013][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.124753][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.233973][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.344208][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.408502][ T5994] random: crng reseeded on system resumption [ 64.442690][ T1214] usb 2-1: USB disconnect, device number 2 [ 64.466666][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.585077][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.596631][ T6000] fuse: Bad value for 'fd' [ 64.694268][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 64.803900][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 64.913964][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 64.962215][ T5985] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 64.969869][ T5985] ALSA: mixer_oss: invalid OSS volume 'ԩ6~f`{XSԒj?)]0\' [ 64.980518][ T5985] ALSA: mixer_oss: invalid OSS volume ']qM3T=\S12$*' [ 64.990337][ T5985] ALSA: mixer_oss: invalid OSS volume ' ;*7 c+PqgU' [ 65.000787][ T5985] ALSA: mixer_oss: invalid OSS volume 'hv9gO= RpрH[t77' [ 65.023990][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 65.133954][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 65.264476][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 65.316062][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 65.404108][ T5880] dvb-usb: bulk message failed: -22 (1/0) [ 65.515006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.563895][ T5883] dvb-usb: bulk message failed: -22 (1/0) [ 65.585843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.663337][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 65.821414][ T5886] usb 1-1: USB disconnect, device number 2 [ 65.834233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.059923][ T5886] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 66.607639][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 66.607657][ T29] audit: type=1400 audit(1730208709.814:194): avc: denied { bind } for pid=6020 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.912060][ T6031] overlayfs: failed to resolve './file1': -2 [ 66.935036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.943624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.983849][ T6033] syz.3.29 uses obsolete (PF_INET,SOCK_PACKET) [ 67.135696][ T6037] fuse: Unknown parameter 'group_i00000000000000000000' [ 67.147731][ T29] audit: type=1400 audit(1730208710.314:195): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.175157][ T29] audit: type=1400 audit(1730208710.384:196): avc: denied { create } for pid=6035 comm="syz.4.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.301738][ T29] audit: type=1400 audit(1730208710.484:197): avc: denied { watch watch_reads } for pid=6041 comm="syz.2.32" path="/proc/31" dev="proc" ino=8638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.302469][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 67.525362][ T29] audit: type=1400 audit(1730208710.744:198): avc: denied { getopt } for pid=6050 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.633874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.716232][ T29] audit: type=1400 audit(1730208710.744:199): avc: denied { shutdown } for pid=6050 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.810698][ T29] audit: type=1400 audit(1730208710.744:200): avc: denied { getopt } for pid=6050 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.931328][ T29] audit: type=1400 audit(1730208710.744:201): avc: denied { ioctl } for pid=6050 comm="syz.1.35" path="socket:[8158]" dev="sockfs" ino=8158 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.109508][ T6047] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.118439][ T6047] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.127190][ T6047] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.135940][ T6047] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.150259][ T6047] vxlan0: entered promiscuous mode [ 68.502980][ T6049] tc_dump_action: action bad kind [ 68.917878][ T6071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37'. [ 69.623967][ T6087] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 69.671329][ T29] audit: type=1400 audit(1730208712.884:202): avc: denied { create } for pid=6088 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.702116][ T29] audit: type=1400 audit(1730208712.914:203): avc: denied { setopt } for pid=6086 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.789351][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.863849][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.921769][ T6096] fuse: Unknown parameter 'group_i00000000000000000000' [ 69.955549][ T5886] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 69.967323][ T5886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.976729][ T5886] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 69.991358][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.004896][ T5886] usb 2-1: config 0 descriptor?? [ 70.113892][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 70.122579][ T5881] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 70.131804][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.139864][ T5881] usb 1-1: Product: syz [ 70.144148][ T5881] usb 1-1: Manufacturer: syz [ 70.148721][ T5881] usb 1-1: SerialNumber: syz [ 70.155434][ T5881] usb 1-1: config 0 descriptor?? [ 70.164199][ T5881] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 70.174324][ T5881] usb 1-1: Detected FT-X [ 70.399267][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 70.419101][ T5881] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 70.439364][ T5881] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 70.477617][ T5881] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.510527][ T5881] usb 1-1: USB disconnect, device number 3 [ 70.518345][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.581172][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 70.591210][ T5881] ftdi_sio 1-1:0.0: device disconnected [ 71.128843][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.141253][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.620921][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 71.620937][ T29] audit: type=1400 audit(1730208714.834:241): avc: denied { read } for pid=6112 comm="syz.0.51" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.724841][ T6116] SELinux: truncated policydb string identifier [ 71.732446][ T6116] SELinux: failed to load policy [ 72.201643][ T29] audit: type=1400 audit(1730208714.924:242): avc: denied { read } for pid=6109 comm="syz.4.50" dev="nsfs" ino=4026533140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.231783][ T29] audit: type=1400 audit(1730208714.924:243): avc: denied { open } for pid=6109 comm="syz.4.50" path="net:[4026533140]" dev="nsfs" ino=4026533140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.330409][ T29] audit: type=1400 audit(1730208714.924:244): avc: denied { create } for pid=6109 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.377319][ T29] audit: type=1400 audit(1730208714.934:245): avc: denied { bind } for pid=6109 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.405620][ T29] audit: type=1400 audit(1730208714.934:246): avc: denied { connect } for pid=6109 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.436632][ T29] audit: type=1400 audit(1730208714.944:247): avc: denied { load_policy } for pid=6109 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 72.462624][ T29] audit: type=1400 audit(1730208715.414:248): avc: denied { open } for pid=6112 comm="syz.0.51" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.543673][ T29] audit: type=1400 audit(1730208715.464:249): avc: denied { create } for pid=6118 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 72.615157][ T5956] usb 2-1: USB disconnect, device number 3 [ 72.647765][ T29] audit: type=1400 audit(1730208715.504:250): avc: denied { create } for pid=6112 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.114139][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.163887][ T5956] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.279669][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 73.288976][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.300521][ T5881] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 73.316079][ T5881] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 73.334539][ T5956] usb 2-1: too many configurations: 18, using maximum allowed: 8 [ 73.358669][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.365960][ T5956] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 73.381291][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.391112][ T5881] usb 3-1: config 0 descriptor?? [ 73.407641][ T5956] usb 2-1: config 0 descriptor?? [ 73.421415][ T5956] gspca_main: 0c45:8001 too many config [ 74.098590][ T25] usb 2-1: USB disconnect, device number 4 [ 74.126707][ T6144] overlayfs: missing 'lowerdir' [ 74.156163][ T6145] block device autoloading is deprecated and will be removed. [ 74.180547][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.206893][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.311561][ T6150] mmap: syz.4.63 (6150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.312607][ T6148] evm: overlay not supported [ 74.336493][ T6150] 9pnet_fd: Insufficient options for proto=fd [ 74.761583][ T6153] tc_dump_action: action bad kind [ 75.194035][ T6159] tc_dump_action: action bad kind [ 75.763899][ T5956] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.944010][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.944111][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 76.094097][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 76.113218][ T25] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 76.114505][ T5956] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 76.125359][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 76.221387][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.233096][ T5918] usb 3-1: USB disconnect, device number 2 [ 76.241851][ T5956] usb 4-1: Product: syz [ 76.246323][ T5956] usb 4-1: Manufacturer: syz [ 76.249828][ T967] cfg80211: failed to load regulatory.db [ 76.251672][ T5956] usb 4-1: SerialNumber: syz [ 76.271533][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice= 2.00 [ 76.292704][ T5956] usb 4-1: config 0 descriptor?? [ 76.301802][ T6168] syz.1.66 (6168) used greatest stack depth: 19680 bytes left [ 76.310318][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.338620][ T25] usb 1-1: config 0 descriptor?? [ 76.349097][ T5956] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 76.368093][ T5956] usb 4-1: Detected FT-X [ 76.452471][ T6185] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.469834][ T6185] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 76.528745][ T5956] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 76.537649][ T5956] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 76.549808][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 76.552953][ T5956] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 76.568115][ T6187] netlink: 'syz.4.75': attribute type 10 has an invalid length. [ 76.579097][ T5956] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 76.604092][ T6187] team0: Port device wlan1 added [ 76.623064][ T5956] usb 4-1: USB disconnect, device number 4 [ 76.642725][ T5956] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 76.661646][ T5956] ftdi_sio 4-1:0.0: device disconnected [ 76.976065][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 76.976097][ T29] audit: type=1400 audit(1730208720.194:290): avc: denied { create } for pid=6174 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.214691][ T29] audit: type=1400 audit(1730208720.224:291): avc: denied { bind } for pid=6174 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.354696][ T29] audit: type=1400 audit(1730208720.224:292): avc: denied { module_request } for pid=6174 comm="syz.0.70" kmod="crypto-cryptd(crct10dif-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.378320][ T29] audit: type=1400 audit(1730208720.274:293): avc: denied { accept } for pid=6174 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.835406][ T6206] SELinux: Context :yz1 is not valid (left unmapped). [ 77.845770][ T6201] tc_dump_action: action bad kind [ 77.867198][ T29] audit: type=1400 audit(1730208721.084:294): avc: denied { relabelto } for pid=6202 comm="syz.3.79" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 77.890843][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.898676][ T29] audit: type=1400 audit(1730208721.114:295): avc: denied { associate } for pid=6202 comm="syz.3.79" name="file0" dev="tmpfs" ino=109 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":yz1" [ 77.923111][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.929916][ T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.048510][ T29] audit: type=1400 audit(1730208721.264:296): avc: denied { unlink } for pid=5839 comm="syz-executor" name="file0" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 78.072269][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.101351][ T967] usb 2-1: too many configurations: 18, using maximum allowed: 8 [ 78.197257][ T967] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 78.316040][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.336020][ T29] audit: type=1400 audit(1730208721.554:297): avc: denied { create } for pid=6212 comm="syz.3.81" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.369839][ T967] usb 2-1: config 0 descriptor?? [ 78.401145][ T967] gspca_main: 0c45:8001 too many config [ 78.501957][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 79.564135][ T29] audit: type=1400 audit(1730208721.694:298): avc: denied { read } for pid=6212 comm="syz.3.81" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.618633][ T5956] usb 1-1: USB disconnect, device number 4 [ 79.676056][ T29] audit: type=1400 audit(1730208721.704:299): avc: denied { open } for pid=6212 comm="syz.3.81" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.095781][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 80.110488][ T5886] usb 2-1: USB disconnect, device number 5 [ 80.139935][ T5956] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.337104][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 80.519153][ T5956] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 80.569344][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.583695][ T5956] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 80.599933][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.615824][ T5956] usb 1-1: config 0 descriptor?? [ 80.626258][ T5956] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 82.824410][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 82.948587][ T6266] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 82.957679][ T6266] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 82.966935][ T6266] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.984185][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 83.203854][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.222002][ T5880] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 83.232477][ T5880] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.276925][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 83.276942][ T29] audit: type=1400 audit(1730208726.494:315): avc: denied { create } for pid=6267 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.290206][ T967] usb 1-1: USB disconnect, device number 5 [ 83.309330][ T5880] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice= 2.00 [ 83.325012][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.345756][ T5880] usb 2-1: config 0 descriptor?? [ 83.413950][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 83.430500][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.441918][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.455332][ T5886] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 83.598323][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.938148][ T5886] usb 3-1: config 0 descriptor?? [ 84.177361][ T29] audit: type=1400 audit(1730208727.384:316): avc: denied { read } for pid=6261 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.220341][ T29] audit: type=1400 audit(1730208727.434:317): avc: denied { write } for pid=6261 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.312737][ T6268] kvm: emulating exchange as write [ 84.445285][ T6282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.478541][ T6282] netlink: 'syz.4.99': attribute type 12 has an invalid length. [ 84.496905][ T6282] netlink: 'syz.4.99': attribute type 29 has an invalid length. [ 84.505084][ T6282] netlink: 148 bytes leftover after parsing attributes in process `syz.4.99'. [ 84.514320][ T6282] netlink: 39 bytes leftover after parsing attributes in process `syz.4.99'. [ 84.707015][ T6289] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 84.732339][ T6289] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.751326][ T6289] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.847179][ T29] audit: type=1400 audit(1730208728.014:318): avc: denied { read } for pid=6281 comm="syz.4.99" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.870359][ T29] audit: type=1400 audit(1730208728.014:319): avc: denied { open } for pid=6281 comm="syz.4.99" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.894636][ T29] audit: type=1400 audit(1730208728.014:320): avc: denied { ioctl } for pid=6281 comm="syz.4.99" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.920382][ T29] audit: type=1400 audit(1730208728.014:321): avc: denied { name_bind } for pid=6281 comm="syz.4.99" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.942471][ T29] audit: type=1400 audit(1730208728.014:322): avc: denied { node_bind } for pid=6281 comm="syz.4.99" saddr=2001::2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.171622][ T5886] usbhid 3-1:0.0: can't add hid device: -71 [ 85.178338][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 85.203817][ T5886] usb 3-1: USB disconnect, device number 3 [ 85.594545][ T967] usb 2-1: USB disconnect, device number 6 [ 86.028216][ T6297] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.043821][ T6297] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 86.141711][ T6297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.556528][ T29] audit: type=1400 audit(1730208729.774:323): avc: denied { append } for pid=6293 comm="syz.3.103" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.595578][ T29] audit: type=1400 audit(1730208729.804:324): avc: denied { map } for pid=6293 comm="syz.3.103" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.028620][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.840658][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 87.913970][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 87.972139][ T5886] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 88.231492][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.257232][ T5886] usb 3-1: Product: syz [ 88.304301][ T5886] usb 3-1: Manufacturer: syz [ 88.308965][ T5886] usb 3-1: SerialNumber: syz [ 88.389351][ T6333] tc_dump_action: action bad kind [ 88.408493][ T5886] usb 3-1: config 0 descriptor?? [ 88.606503][ T5886] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 88.776246][ T5886] usb 3-1: Detected FT-X [ 88.961387][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 88.982342][ T5886] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 89.046813][ T5886] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 89.061384][ T5886] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 89.114747][ T5886] usb 3-1: USB disconnect, device number 4 [ 89.128995][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.139062][ T5886] ftdi_sio 3-1:0.0: device disconnected [ 90.134140][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.425740][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 90.521416][ T5886] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 90.542942][ T5886] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.555754][ T5886] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice= 2.00 [ 90.594947][ T6358] syz.1.117[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.595028][ T6358] syz.1.117[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.606497][ T6358] syz.1.117[6358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.636469][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 90.636486][ T29] audit: type=1400 audit(1730208733.844:329): avc: denied { create } for pid=6339 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.784121][ T5918] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.807903][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.978676][ T5886] usb 1-1: config 0 descriptor?? [ 91.103397][ T6368] SELinux: truncated policydb string identifier [ 91.110013][ T6368] SELinux: failed to load policy [ 91.119269][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 91.739846][ T5918] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 91.753946][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.987461][ T5918] usb 5-1: config 0 descriptor?? [ 92.014713][ T5918] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 92.143280][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 92.655043][ T29] audit: type=1400 audit(1730208735.874:330): avc: denied { create } for pid=6382 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.698785][ T5918] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 92.705927][ T5918] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 92.947384][ T29] audit: type=1400 audit(1730208736.144:331): avc: denied { create } for pid=6390 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 92.974097][ T29] audit: type=1400 audit(1730208736.154:332): avc: denied { create } for pid=6390 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.324951][ T5918] usb 5-1: USB disconnect, device number 3 [ 93.506389][ T52] usb 1-1: USB disconnect, device number 6 [ 93.522116][ T6384] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 93.747807][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 93.923991][ T967] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.104787][ T5886] usb 2-1: device descriptor read/64, error -71 [ 94.173916][ T967] usb 4-1: Using ep0 maxpacket: 16 [ 94.185050][ T967] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 94.194208][ T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.202385][ T967] usb 4-1: Product: syz [ 94.206921][ T967] usb 4-1: Manufacturer: syz [ 94.211674][ T967] usb 4-1: SerialNumber: syz [ 94.219510][ T967] usb 4-1: config 0 descriptor?? [ 94.234580][ T967] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 94.242797][ T967] usb 4-1: Detected FT-X [ 94.475528][ T6419] syz.0.133[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.475607][ T6419] syz.0.133[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.486988][ T6419] syz.0.133[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.559867][ T967] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 95.270949][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.333291][ T29] audit: type=1400 audit(1730208737.964:333): avc: denied { write } for pid=6416 comm="syz.4.134" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.393905][ T967] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 95.409867][ T29] audit: type=1400 audit(1730208738.284:334): avc: denied { create } for pid=6416 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.429429][ T967] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 95.460156][ T967] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 95.463981][ T5886] usb 2-1: device descriptor read/64, error -71 [ 95.493897][ T967] usb 4-1: USB disconnect, device number 5 [ 95.522787][ T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 95.548325][ T967] ftdi_sio 4-1:0.0: device disconnected [ 95.647587][ T5886] usb usb2-port1: attempt power cycle [ 95.656244][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 95.975825][ T29] audit: type=1400 audit(1730208739.194:335): avc: denied { create } for pid=6436 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.104296][ T5918] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.112216][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.537773][ T29] audit: type=1400 audit(1730208739.744:336): avc: denied { write } for pid=6436 comm="syz.4.140" name="mcfilter6" dev="proc" ino=4026533234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 96.972889][ T29] audit: type=1400 audit(1730208739.754:337): avc: denied { write } for pid=6436 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.010732][ T5886] usb 2-1: device descriptor read/8, error -71 [ 97.023843][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 97.035052][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.194989][ T5918] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 97.223152][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.237154][ T6448] syz.0.142[6448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.237231][ T6448] syz.0.142[6448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.248580][ T6448] syz.0.142[6448] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.266378][ T5918] usb 3-1: Product: syz [ 97.282828][ T5918] usb 3-1: Manufacturer: syz [ 97.287764][ T5918] usb 3-1: SerialNumber: syz [ 97.339847][ T5918] usb 3-1: config 0 descriptor?? [ 97.651298][ T6454] FAULT_INJECTION: forcing a failure. [ 97.651298][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.651556][ T6454] [ 97.651560][ T6454] ====================================================== [ 97.651565][ T6454] WARNING: possible circular locking dependency detected [ 97.651570][ T6454] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 97.651577][ T6454] ------------------------------------------------------ [ 97.651581][ T6454] syz.3.145/6454 is trying to acquire lock: [ 97.651587][ T6454] ffffffff8e0c5600 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 97.651625][ T6454] [ 97.651625][ T6454] but task is already holding lock: [ 97.651628][ T6454] ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 97.651655][ T6454] [ 97.651655][ T6454] which lock already depends on the new lock. [ 97.651655][ T6454] [ 97.651658][ T6454] [ 97.651658][ T6454] the existing dependency chain (in reverse order) is: [ 97.651662][ T6454] [ 97.651662][ T6454] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 97.651677][ T6454] _raw_spin_lock_nested+0x31/0x40 [ 97.651695][ T6454] raw_spin_rq_lock_nested+0x29/0x130 [ 97.651706][ T6454] task_rq_lock+0xcf/0x3b0 [ 97.651718][ T6454] cgroup_move_task+0x82/0x250 [ 97.651736][ T6454] css_set_move_task+0x288/0x5f0 [ 97.651755][ T6454] cgroup_post_fork+0x1c6/0x910 [ 97.651770][ T6454] copy_process+0x51a5/0x8cb0 [ 97.651788][ T6454] kernel_clone+0xfd/0x960 [ 97.651800][ T6454] user_mode_thread+0xb4/0xf0 [ 97.651811][ T6454] rest_init+0x23/0x2b0 [ 97.651820][ T6454] start_kernel+0x3e4/0x4d0 [ 97.651840][ T6454] x86_64_start_reservations+0x18/0x30 [ 97.651855][ T6454] x86_64_start_kernel+0xb2/0xc0 [ 97.651868][ T6454] common_startup_64+0x13e/0x148 [ 97.651879][ T6454] [ 97.651879][ T6454] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 97.651891][ T6454] _raw_spin_lock_irqsave+0x3a/0x60 [ 97.651902][ T6454] try_to_wake_up+0xa1/0x14f0 [ 97.651911][ T6454] __wake_up_common+0x131/0x1e0 [ 97.651921][ T6454] __wake_up+0x31/0x60 [ 97.651934][ T6454] tty_port_default_wakeup+0x2a/0x40 [ 97.651944][ T6454] serial8250_tx_chars+0x68e/0x860 [ 97.651954][ T6454] serial8250_handle_irq+0x74d/0xc80 [ 97.651965][ T6454] serial8250_default_handle_irq+0x9a/0x210 [ 97.651976][ T6454] serial8250_interrupt+0x103/0x210 [ 97.651987][ T6454] __handle_irq_event_percpu+0x229/0x7c0 [ 97.651998][ T6454] handle_irq_event+0xab/0x1e0 [ 97.652009][ T6454] handle_edge_irq+0x263/0xd10 [ 97.652018][ T6454] __common_interrupt+0xdf/0x250 [ 97.652031][ T6454] common_interrupt+0x61/0xe0 [ 97.652041][ T6454] asm_common_interrupt+0x26/0x40 [ 97.652054][ T6454] handle_softirqs+0x1da/0x8f0 [ 97.652065][ T6454] irq_exit_rcu+0xbb/0x120 [ 97.652074][ T6454] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 97.652088][ T6454] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.652101][ T6454] console_flush_all+0x9a4/0xc60 [ 97.652112][ T6454] console_unlock+0xd9/0x210 [ 97.652122][ T6454] vprintk_emit+0x424/0x6f0 [ 97.652132][ T6454] vprintk+0x7f/0xa0 [ 97.652143][ T6454] _printk+0xc8/0x100 [ 97.652151][ T6454] kauditd_hold_skb+0x205/0x250 [ 97.652163][ T6454] kauditd_send_queue+0x236/0x290 [ 97.652173][ T6454] kauditd_thread+0x611/0xa60 [ 97.652185][ T6454] kthread+0x2c1/0x3a0 [ 97.652196][ T6454] ret_from_fork+0x45/0x80 [ 97.652204][ T6454] ret_from_fork_asm+0x1a/0x30 [ 97.652217][ T6454] [ 97.652217][ T6454] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 97.652229][ T6454] _raw_spin_lock_irqsave+0x3a/0x60 [ 97.652240][ T6454] __wake_up+0x1c/0x60 [ 97.652253][ T6454] tty_port_default_wakeup+0x2a/0x40 [ 97.652262][ T6454] serial8250_tx_chars+0x68e/0x860 [ 97.652271][ T6454] serial8250_handle_irq+0x74d/0xc80 [ 97.652281][ T6454] serial8250_default_handle_irq+0x9a/0x210 [ 97.652292][ T6454] serial8250_interrupt+0x103/0x210 [ 97.652303][ T6454] __handle_irq_event_percpu+0x229/0x7c0 [ 97.652314][ T6454] handle_irq_event+0xab/0x1e0 [ 97.652324][ T6454] handle_edge_irq+0x263/0xd10 [ 97.652333][ T6454] __common_interrupt+0xdf/0x250 [ 97.652346][ T6454] common_interrupt+0xba/0xe0 [ 97.652355][ T6454] asm_common_interrupt+0x26/0x40 [ 97.652367][ T6454] _raw_spin_unlock_irqrestore+0x31/0x80 [ 97.652378][ T6454] uart_write+0x2a4/0xb30 [ 97.652387][ T6454] n_tty_write+0x419/0x1140 [ 97.652397][ T6454] file_tty_write.constprop.0+0x506/0x9a0 [ 97.652406][ T6454] redirected_tty_write+0xcc/0x140 [ 97.652414][ T6454] vfs_write+0x5ae/0x1150 [ 97.652427][ T6454] ksys_write+0x12f/0x260 [ 97.652440][ T6454] do_syscall_64+0xcd/0x250 [ 97.652454][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652466][ T6454] [ 97.652466][ T6454] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 97.652478][ T6454] _raw_spin_lock_irqsave+0x3a/0x60 [ 97.652489][ T6454] serial8250_console_write+0xb56/0x17c0 [ 97.652500][ T6454] console_flush_all+0x803/0xc60 [ 97.652510][ T6454] console_unlock+0xd9/0x210 [ 97.652520][ T6454] vprintk_emit+0x424/0x6f0 [ 97.652530][ T6454] vprintk+0x7f/0xa0 [ 97.652541][ T6454] _printk+0xc8/0x100 [ 97.652548][ T6454] register_console+0xbfd/0x1170 [ 97.652559][ T6454] univ8250_console_init+0x5f/0x90 [ 97.652570][ T6454] console_init+0xcc/0x680 [ 97.652583][ T6454] start_kernel+0x29a/0x4d0 [ 97.652596][ T6454] x86_64_start_reservations+0x18/0x30 [ 97.652609][ T6454] x86_64_start_kernel+0xb2/0xc0 [ 97.652622][ T6454] common_startup_64+0x13e/0x148 [ 97.652632][ T6454] [ 97.652632][ T6454] -> #0 (console_owner){-.-.}-{0:0}: [ 97.652643][ T6454] __lock_acquire+0x250b/0x3ce0 [ 97.652652][ T6454] lock_acquire.part.0+0x11b/0x380 [ 97.652660][ T6454] console_lock_spinning_enable+0xb0/0xd0 [ 97.652671][ T6454] console_flush_all+0x7ac/0xc60 [ 97.652681][ T6454] console_unlock+0xd9/0x210 [ 97.652691][ T6454] vprintk_emit+0x424/0x6f0 [ 97.652701][ T6454] vprintk+0x7f/0xa0 [ 97.652712][ T6454] _printk+0xc8/0x100 [ 97.652719][ T6454] should_fail_ex+0x46c/0x5b0 [ 97.652729][ T6454] copy_to_user_nofault+0xac/0x180 [ 97.652741][ T6454] bpf_probe_write_user+0xaf/0xf0 [ 97.652752][ T6454] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 97.652759][ T6454] bpf_trace_run4+0x245/0x5a0 [ 97.652771][ T6454] __bpf_trace_sched_switch+0x13e/0x190 [ 97.652781][ T6454] __traceiter_sched_switch+0x6c/0xc0 [ 97.652795][ T6454] __schedule+0x19b0/0x5730 [ 97.652806][ T6454] preempt_schedule_irq+0x51/0x90 [ 97.652818][ T6454] irqentry_exit+0x36/0x90 [ 97.652834][ T6454] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.652846][ T6454] vfs_write+0x847/0x1150 [ 97.652859][ T6454] ksys_write+0x12f/0x260 [ 97.652872][ T6454] do_syscall_64+0xcd/0x250 [ 97.652885][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.652897][ T6454] [ 97.652897][ T6454] other info that might help us debug this: [ 97.652897][ T6454] [ 97.652899][ T6454] Chain exists of: [ 97.652899][ T6454] console_owner --> &p->pi_lock --> &rq->__lock [ 97.652899][ T6454] [ 97.652912][ T6454] Possible unsafe locking scenario: [ 97.652912][ T6454] [ 97.652914][ T6454] CPU0 CPU1 [ 97.652917][ T6454] ---- ---- [ 97.652919][ T6454] lock(&rq->__lock); [ 97.652924][ T6454] lock(&p->pi_lock); [ 97.652930][ T6454] lock(&rq->__lock); [ 97.652936][ T6454] lock(console_owner); [ 97.652941][ T6454] [ 97.652941][ T6454] *** DEADLOCK *** [ 97.652941][ T6454] [ 97.652943][ T6454] 6 locks held by syz.3.145/6454: [ 97.652949][ T6454] #0: ffff888066c64478 (&f->f_pos_lock){+.+.}-{3:3}, at: fdget_pos+0x24c/0x360 [ 97.652975][ T6454] #1: ffff888024fdc420 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 97.653002][ T6454] #2: ffff8880b863ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 97.653023][ T6454] #3: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 97.653047][ T6454] #4: ffffffff8e1a5a40 (console_lock){+.+.}-{0:0}, at: vprintk+0x7f/0xa0 [ 97.653070][ T6454] #5: ffffffff8e1a5ab0 (console_srcu){....}-{0:0}, at: console_flush_all+0x159/0xc60 [ 97.653094][ T6454] [ 97.653094][ T6454] stack backtrace: [ 97.653098][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.3.145 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 97.653109][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.653115][ T6454] Call Trace: [ 97.653118][ T6454] [ 97.653122][ T6454] dump_stack_lvl+0x116/0x1f0 [ 97.653138][ T6454] print_circular_bug+0x41c/0x610 [ 97.653154][ T6454] check_noncircular+0x31a/0x400 [ 97.653168][ T6454] ? __pfx_check_noncircular+0x10/0x10 [ 97.653184][ T6454] ? lockdep_lock+0xc6/0x200 [ 97.653196][ T6454] ? __pfx_lockdep_lock+0x10/0x10 [ 97.653209][ T6454] __lock_acquire+0x250b/0x3ce0 [ 97.653220][ T6454] ? __pfx___lock_acquire+0x10/0x10 [ 97.653231][ T6454] lock_acquire.part.0+0x11b/0x380 [ 97.653240][ T6454] ? console_lock_spinning_enable+0x9f/0xd0 [ 97.653252][ T6454] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 97.653261][ T6454] ? rcu_is_watching+0x12/0xc0 [ 97.653273][ T6454] ? trace_lock_acquire+0x14a/0x1d0 [ 97.653285][ T6454] ? console_lock_spinning_enable+0x9f/0xd0 [ 97.653297][ T6454] ? lock_acquire+0x2f/0xb0 [ 97.653305][ T6454] ? console_lock_spinning_enable+0x9f/0xd0 [ 97.653317][ T6454] console_lock_spinning_enable+0xb0/0xd0 [ 97.653328][ T6454] ? console_lock_spinning_enable+0x9f/0xd0 [ 97.653340][ T6454] console_flush_all+0x7ac/0xc60 [ 97.653353][ T6454] ? __pfx_console_flush_all+0x10/0x10 [ 97.653365][ T6454] ? printk_percpu_data_ready+0x9/0x20 [ 97.653376][ T6454] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 97.653387][ T6454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.653403][ T6454] console_unlock+0xd9/0x210 [ 97.653414][ T6454] ? __pfx_console_unlock+0x10/0x10 [ 97.653426][ T6454] ? lock_acquire+0x2f/0xb0 [ 97.653435][ T6454] ? vprintk+0x7f/0xa0 [ 97.653447][ T6454] ? __down_trylock_console_sem+0xb0/0x140 [ 97.653457][ T6454] vprintk_emit+0x424/0x6f0 [ 97.653469][ T6454] ? __pfx_vprintk_emit+0x10/0x10 [ 97.653482][ T6454] vprintk+0x7f/0xa0 [ 97.653494][ T6454] _printk+0xc8/0x100 [ 97.653502][ T6454] ? __pfx__printk+0x10/0x10 [ 97.653511][ T6454] ? ___ratelimit+0x24c/0x570 [ 97.653525][ T6454] ? __pfx____ratelimit+0x10/0x10 [ 97.653540][ T6454] should_fail_ex+0x46c/0x5b0 [ 97.653549][ T6454] ? rcu_is_watching+0x12/0xc0 [ 97.653561][ T6454] copy_to_user_nofault+0xac/0x180 [ 97.653574][ T6454] bpf_probe_write_user+0xaf/0xf0 [ 97.653585][ T6454] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 97.653592][ T6454] bpf_trace_run4+0x245/0x5a0 [ 97.653605][ T6454] ? __pfx_bpf_trace_run4+0x10/0x10 [ 97.653619][ T6454] ? __pfx_lock_release+0x10/0x10 [ 97.653628][ T6454] ? trace_lock_acquire+0x14a/0x1d0 [ 97.653641][ T6454] __bpf_trace_sched_switch+0x13e/0x190 [ 97.653651][ T6454] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 97.653661][ T6454] ? psi_group_change+0x6dc/0xd20 [ 97.653673][ T6454] __traceiter_sched_switch+0x6c/0xc0 [ 97.653689][ T6454] __schedule+0x19b0/0x5730 [ 97.653703][ T6454] ? __pfx___schedule+0x10/0x10 [ 97.653717][ T6454] ? mark_held_locks+0x9f/0xe0 [ 97.653727][ T6454] preempt_schedule_irq+0x51/0x90 [ 97.653740][ T6454] irqentry_exit+0x36/0x90 [ 97.653762][ T6454] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 97.653778][ T6454] RIP: 0010:vfs_write+0x847/0x1150 [ 97.653793][ T6454] Code: df 65 4c 8b 25 3a 74 03 7e 49 8d bc 24 b0 12 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 db 07 00 00 49 01 ac 24 b0 12 00 00 19 fa ff ff e8 8f 14 8d ff 49 8d 7e 28 48 b8 00 00 00 00 00 fc [ 97.653803][ T6454] RSP: 0018:ffffc90018a6fd28 EFLAGS: 00000202 [ 97.653810][ T6454] RAX: dffffc0000000000 RBX: ffff888066c64380 RCX: ffffffff820065c6 [ 97.653817][ T6454] RDX: 1ffff110055426de RSI: ffffffff82006774 RDI: ffff88802aa136f0 [ 97.653823][ T6454] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 97.653832][ T6454] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802aa12440 [ 97.653838][ T6454] R13: ffff88807dcac048 R14: 0000000000000000 R15: 1ffff9200314dfaf [ 97.653845][ T6454] ? vfs_write+0x666/0x1150 [ 97.653859][ T6454] ? vfs_write+0x814/0x1150 [ 97.653873][ T6454] ? vfs_write+0x814/0x1150 [ 97.653888][ T6454] ? __fget_files+0x23a/0x3f0 [ 97.653901][ T6454] ? fdget_pos+0x24c/0x360 [ 97.653914][ T6454] ? __pfx_lock_release+0x10/0x10 [ 97.653922][ T6454] ? trace_lock_acquire+0x14a/0x1d0 [ 97.653934][ T6454] ? __pfx_vfs_write+0x10/0x10 [ 97.653948][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 97.653963][ T6454] ? __fget_files+0x244/0x3f0 [ 97.653978][ T6454] ksys_write+0x12f/0x260 [ 97.653992][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 97.654005][ T6454] ? syscall_user_dispatch+0x7a/0x130 [ 97.654017][ T6454] do_syscall_64+0xcd/0x250 [ 97.654032][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.654045][ T6454] RIP: 0033:0x7f0656b7d1ff [ 97.654052][ T6454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 97.654061][ T6454] RSP: 002b:00007f065790a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 97.654070][ T6454] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f0656b7d1ff [ 97.654075][ T6454] RDX: 0000000000000001 RSI: 00007f065790a090 RDI: 0000000000000006 [ 97.654081][ T6454] RBP: 00007f065790a090 R08: 0000000000000000 R09: 00007f0657909df7 [ 97.654087][ T6454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 97.654093][ T6454] R13: 0000000000000000 R14: 00007f0656d35f80 R15: 00007ffd2c4d4b88 [ 97.654101][ T6454] [ 98.990954][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.3.145 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 99.001508][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.011532][ T6454] Call Trace: [ 99.014803][ T6454] [ 99.017720][ T6454] dump_stack_lvl+0x116/0x1f0 [ 99.022391][ T6454] should_fail_ex+0x497/0x5b0 [ 99.027066][ T6454] ? rcu_is_watching+0x12/0xc0 [ 99.031814][ T6454] copy_to_user_nofault+0xac/0x180 [ 99.036912][ T6454] bpf_probe_write_user+0xaf/0xf0 [ 99.041923][ T6454] bpf_prog_6303d92f98284ad8+0x44/0x48 [ 99.047352][ T6454] bpf_trace_run4+0x245/0x5a0 [ 99.052005][ T6454] ? __pfx_bpf_trace_run4+0x10/0x10 [ 99.057182][ T6454] ? __pfx_lock_release+0x10/0x10 [ 99.062176][ T6454] ? trace_lock_acquire+0x14a/0x1d0 [ 99.067348][ T6454] __bpf_trace_sched_switch+0x13e/0x190 [ 99.072951][ T6454] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 99.078987][ T6454] ? psi_group_change+0x6dc/0xd20 [ 99.083984][ T6454] __traceiter_sched_switch+0x6c/0xc0 [ 99.089333][ T6454] __schedule+0x19b0/0x5730 [ 99.093813][ T6454] ? __pfx___schedule+0x10/0x10 [ 99.098727][ T6454] ? mark_held_locks+0x9f/0xe0 [ 99.103460][ T6454] preempt_schedule_irq+0x51/0x90 [ 99.108458][ T6454] irqentry_exit+0x36/0x90 [ 99.112855][ T6454] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 99.118307][ T6454] RIP: 0010:vfs_write+0x847/0x1150 [ 99.123417][ T6454] Code: df 65 4c 8b 25 3a 74 03 7e 49 8d bc 24 b0 12 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 db 07 00 00 49 01 ac 24 b0 12 00 00 19 fa ff ff e8 8f 14 8d ff 49 8d 7e 28 48 b8 00 00 00 00 00 fc [ 99.142995][ T6454] RSP: 0018:ffffc90018a6fd28 EFLAGS: 00000202 [ 99.149041][ T6454] RAX: dffffc0000000000 RBX: ffff888066c64380 RCX: ffffffff820065c6 [ 99.156983][ T6454] RDX: 1ffff110055426de RSI: ffffffff82006774 RDI: ffff88802aa136f0 [ 99.164944][ T6454] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 99.172905][ T6454] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802aa12440 [ 99.180862][ T6454] R13: ffff88807dcac048 R14: 0000000000000000 R15: 1ffff9200314dfaf [ 99.188823][ T6454] ? vfs_write+0x666/0x1150 [ 99.193319][ T6454] ? vfs_write+0x814/0x1150 [ 99.197821][ T6454] ? vfs_write+0x814/0x1150 [ 99.202322][ T6454] ? __fget_files+0x23a/0x3f0 [ 99.206976][ T6454] ? fdget_pos+0x24c/0x360 [ 99.211370][ T6454] ? __pfx_lock_release+0x10/0x10 [ 99.216363][ T6454] ? trace_lock_acquire+0x14a/0x1d0 [ 99.221533][ T6454] ? __pfx_vfs_write+0x10/0x10 [ 99.226269][ T6454] ? __pfx___mutex_lock+0x10/0x10 [ 99.231268][ T6454] ? __fget_files+0x244/0x3f0 [ 99.235931][ T6454] ksys_write+0x12f/0x260 [ 99.240250][ T6454] ? __pfx_ksys_write+0x10/0x10 [ 99.245092][ T6454] ? syscall_user_dispatch+0x7a/0x130 [ 99.250437][ T6454] do_syscall_64+0xcd/0x250 [ 99.254916][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.260794][ T6454] RIP: 0033:0x7f0656b7d1ff [ 99.265178][ T6454] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 99.284755][ T6454] RSP: 002b:00007f065790a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 99.293137][ T6454] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f0656b7d1ff [ 99.301078][ T6454] RDX: 0000000000000001 RSI: 00007f065790a090 RDI: 0000000000000006 [ 99.309017][ T6454] RBP: 00007f065790a090 R08: 0000000000000000 R09: 00007f0657909df7 [ 99.316959][ T6454] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 99.324899][ T6454] R13: 0000000000000000 R14: 00007f0656d35f80 R15: 00007ffd2c4d4b88 [ 99.332848][ T6454] [ 99.640846][ T5918] usb 3-1: Cannot retrieve CPort count: -110 [ 99.646874][ T5918] usb 3-1: Cannot retrieve CPort count: -110 [ 99.652833][ T5918] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 99.799671][ T29] audit: type=1400 audit(1730208743.014:338): avc: denied { write } for pid=5185 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.821309][ T29] audit: type=1400 audit(1730208743.014:339): avc: denied { remove_name } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.853873][ T29] audit: type=1400 audit(1730208743.014:340): avc: denied { rename } for pid=5185 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.877844][ T29] audit: type=1400 audit(1730208743.014:341): avc: denied { add_name } for pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.900668][ T29] audit: type=1400 audit(1730208743.014:342): avc: denied { unlink } for pid=5185 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.923041][ T29] audit: type=1400 audit(1730208743.014:343): avc: denied { create } for pid=5185 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.959319][ T5918] usb 3-1: USB disconnect, device number 5