last executing test programs: 3m14.656369989s ago: executing program 0 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ptrace$ARCH_MAP_VDSO_64(0x1e, r2, 0x4, 0x2003) unshare(0x6a040000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r5, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e20, 0x2, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="c8170fd41e569e3f", 0x8}, {&(0x7f0000000180)="2857a8e43f863212bbbcaa020c46768d5919d6aa21cd816a1b084f20a3413e8ee2440b78ecf06da1f4032892cdef4c86ed234395ed83a37b8d03ffd4c08137b7598019a549a1128ec176c95cff044e7c5189b738c48d12efa35c17692bc095d8cfe4970135f01a4f861736f8ff860fcdb7e69148d97b8aad28798f98ad672952dacf2326b36759", 0x87}, {&(0x7f0000000480)="df36c418fc976df364384e467fa610391891e67adaa0e074ee", 0x19}], 0x3}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f65d02a3f2ffaa46c88bc00000000000000000000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acf13e730bc5baeb374a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6810000000c00008008000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xe0}], 0x1}, 0x40040) 3m7.478151791s ago: executing program 0 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20080000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000280)=0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 3m0.74047404s ago: executing program 0 (id=154): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000140)="a92e81d0191808e30262aaec148095dc90286b53e4c82a8a2c", 0x19}], 0x1, &(0x7f00000001c0)=ANY=[], 0xb, 0x88c}], 0x1, 0x80081) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m58.573082495s ago: executing program 0 (id=156): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x2) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/bus/usb/devices/usb1/bNumInterfaces\x00', 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) read(r5, &(0x7f0000000500)=""/16, 0x10) 2m54.174494736s ago: executing program 3 (id=164): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x25, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m52.323312696s ago: executing program 3 (id=166): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x316}}, './file0\x00'}) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000300)={@private1}, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f00000000c0)='./file0\x00', 0x3a7) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r6, &(0x7f00000005c0)=""/180, 0xb4) 2m50.545208012s ago: executing program 0 (id=169): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000380)=ANY=[@ANYBLOB="12015002000000201e04003040000102030109028e000301004000080b000201ee20050904000000010120"], 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d07420008000200"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x174) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xa, 0x6, 0xa, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000120000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0xc03e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c056bd35dcbcfbe6c032937ed", 0x2d) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="69fb0100671205003c0012800b00010069703667726500012c00028014000600fc02000000000000000100000000000114000700000000000000ff0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 2m45.627829125s ago: executing program 3 (id=176): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000881) mmap$IORING_OFF_SQ_RING(0x0, 0x20f, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000140)={@local, @remote, 0x0, "80e11b4492d68d44c7d635a5da39afaf4ea0a31bed5134aa1c72d28d3d19631c", 0xed, 0x9, 0x1d, 0x2}, 0x3c) r4 = eventfd2(0x156, 0x0) r5 = dup2(r4, r1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000000c0)="3f000000010001", 0x7) write$eventfd(r4, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0x1, r7, &(0x7f00000001c0)=0x3, 0x9, 0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) 2m37.481007723s ago: executing program 0 (id=183): r0 = userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x66, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x37]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) close(r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) 2m32.28845387s ago: executing program 3 (id=189): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a", 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r3, 0xa) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 2m29.68741246s ago: executing program 3 (id=192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, 0x0) sched_setattr(r1, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) inotify_init() add_key$user(0x0, 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) listen(0xffffffffffffffff, 0x5) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2m28.230612447s ago: executing program 3 (id=194): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000001dc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x90, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x7ff, 0x40, 0x4, 0x1, {0xa, 0x25, 0x25, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0x1, 0x0, {0xa, 0x25, 0x25, 0x0, 0x80, 0x5}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x6e, &(0x7f00000003c0)={0x5, 0xf, 0x6e, 0x1, [@generic={0x69, 0x10, 0xa, "b1d6a5fbd827024f07a5335740d161ceb731cd4d3931e5db08dc10f6811ccaeb01dee3dc74f07aeee1f67ade9bfa807f9f7197c98b1b8d17582c5bf365f8630318003024c9acc769566bd1a3d7c41fe9530b999b952d53afbf1023dd4d95c263bd9e7671587f"}]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) 2m22.049543307s ago: executing program 32 (id=183): r0 = userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x40eb, 0x0, 0x0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x66, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x37]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}, {@favordynmods}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) close(r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) 2m12.888634894s ago: executing program 33 (id=194): syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000001dc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x90, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x7ff, 0x40, 0x4, 0x1, {0xa, 0x25, 0x25, 0x3, 0x4, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xc, 0x1, 0x0, {0xa, 0x25, 0x25, 0x0, 0x80, 0x5}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x6e, &(0x7f00000003c0)={0x5, 0xf, 0x6e, 0x1, [@generic={0x69, 0x10, 0xa, "b1d6a5fbd827024f07a5335740d161ceb731cd4d3931e5db08dc10f6811ccaeb01dee3dc74f07aeee1f67ade9bfa807f9f7197c98b1b8d17582c5bf365f8630318003024c9acc769566bd1a3d7c41fe9530b999b952d53afbf1023dd4d95c263bd9e7671587f"}]}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x238) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48) 23.682993186s ago: executing program 5 (id=404): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a", 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) 18.641352685s ago: executing program 4 (id=400): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x4010850) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x450, 0xffffffff, 0x3b8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1f0, 0x218, 0x0, {0x100000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x7ff, 0x298e, 0x1, 0x9, 0x3, 0x81, 0x0, 0x80, 0x20}, {0x6}}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x4, 0x3, 0x1, 0x4], 0x0, 0x2}, {0x2, [0x6, 0x4, 0x5, 0x2, 0x4, 0x4], 0x3, 0x3}}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x9909cb, 0xfffffffd}) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f0000000200)=0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x0, {0x1c, 0x10, 0x0, 0xff}}, 0x1c}}, 0x0) 17.329437098s ago: executing program 4 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020, 0x28800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000840}, 0x40080) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000016000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x13, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x2, 'j='}, 0x0}) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r8, 0xc018480d, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r1, &(0x7f0000000980)=""/4, 0x4, 0xf2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffcfc, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bda5, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4000080) 16.101979218s ago: executing program 6 (id=408): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendto(0xffffffffffffffff, &(0x7f0000000000)="2c000000370005000100000000000000010100000c0001001111111111111111", 0x20, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7f, 0xfffffffc, 0x2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x4001, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000300)=0x0) io_submit(r4, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 12.735313462s ago: executing program 6 (id=411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x13, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x2, 'j='}, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) recvfrom$inet6(r1, &(0x7f0000000980)=""/4, 0x4, 0xf2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffcfc, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bda5, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4000080) 12.272871208s ago: executing program 5 (id=412): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x400000000000004, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x108843, 0x55) fcntl$setlease(r4, 0x400, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000122e0b000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000d50f08000340dfffff0014000000000000000019000000000a00000000"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x8, 0x2bb5, 0x6, 0x800100000003}) 10.174611178s ago: executing program 5 (id=414): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000200)=[{0x6, 0x1010, 0x0, 0x0}, {0xb8b, 0x0, 0x0, 0x0}], 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @flat=@weak_handle={0x77682a85, 0x46c1326c7a9ee034}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x24}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xffffffff, 0x2, 0x0, 0x0, 0x55, 0x4}}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9.347245884s ago: executing program 2 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280)}, 0x68) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000580)=""/24}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x1, r4, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r7, &(0x7f0000000140), 0x48) 7.877412441s ago: executing program 1 (id=417): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f00000004c0)=""/69, 0x45, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000400), 0x4, 0x0) read$msr(r3, &(0x7f0000019780)=""/102377, 0x19021) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsmount(r6, 0x0, 0x8c) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000340)='ro\x00H\x96\xf7\v\xcd \xd5\x19\x8ct\x14|\xa9\xd4\xc2\xf0\xf0\xab\xdf\x8f \x00\xc5\xb3\x99\xbf\xed\xa0\xe0\xa9\xc6\xab\xab\x95\xa8\x04O\b\xcc\x9b\x11\xa2`\xce\xffM]\xa1iB,\xae\x16\xf6|\xf5\'W\xd8~\xb7\xf80w+\xb7=f\xb7\xf2+\xe9zG\x9b\xadL\xfa\xbeb\xb1\xe6m\xab$\xd3\x97\xd6~ \xb8y\x13\xaf{\xc9\xa0\x941>\xa4Fgh\xb9r\x9b\xa4\xc1\x90\xf2\x85/A\xb3\x8e\x04~E\x7f\x14W\xcb?k\xa7ZB1\xe0n\x17\xc7U\xf6f\xd5\xdd\'\x05\x90\x10\xa2~\xf3\xe07`\x96\x85r', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r5}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0}) 7.875309866s ago: executing program 2 (id=418): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x181280) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000780)=ANY=[@ANYBLOB="840100001800010000000000000000001d0109004d000f8025b57e35619bf282cfcd8fba0cb7f2934efaf47c316cec12a9f3d643ca2c77adf0cde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b596"], 0x184}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='+-,\x00', &(0x7f00000001c0)='\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc0104d03, &(0x7f0000000140)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x60) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 7.750366537s ago: executing program 6 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x12000, @loopback, 0x7}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x515002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0xa0, 0xc0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/177, 0xb1) r4 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) close_range(r0, 0xffffffffffffffff, 0x2) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) 7.611688718s ago: executing program 1 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r6], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4080) 6.951073701s ago: executing program 4 (id=421): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000591000/0x3000)=nil, 0x3000, 0x16) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x3, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x768, 0x0, 0x7, 0x2, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x7fffffff, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/16) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c001080040006800400448004"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000c80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001c80)={{r4, 0xc44, 0x10, 0x778, 0x3, 0x0, 0x80000, 0x4, 0xfff, 0x400, 0x7fffffff, 0x100000000, 0x2, 0x2, 0xffffffff00000000}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) mmap(&(0x7f00000b7000/0x2000)=nil, 0x2000, 0xf, 0x100010, r5, 0xc246c000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2a, 0x0, &(0x7f0000000040)) write(r0, &(0x7f0000000400), 0x0) 6.011601056s ago: executing program 1 (id=422): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x408a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = mq_open(&(0x7f00000006c0)='!sel\x00ZKs\xc6\a\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\"$\x1f#\xf5f\x93\xab\x97\xd4\xb1>\a\x1bMpGr\xeaz\x86\'\xcd\x9f\'o\xe9\xe2\x9a\x12?#G}]\x9b\xefy\xc5(\x95v\xbc\x8e\xc9a\xad\xc4\xd4\t\xa63x\x861\xc4\x1a\xe8\xbc\x12\xd5.\x98\xfd\xdc\xee\xe7\xb1\x83\x91\xa7\xc8hsL\x1c\xaa\xc1\xdf|\x0ex\xa9fC\xf4\xd9T\xbcf\xa8\xc6\xb2\x15\x85\x17w\xa9\xf5\x9c\x1d\x8ae\n\x80\xb1\xa1K\xcf\x9d\x17\xe9\x93\xcf\xce\x84U\fvw\xec\xb5o\\^@\x11@\x1eH\xc8\xda\xf1\xad\xd3\xe6_\xea\xbe \x01E\xbdPt\x82\xdb\xb8\xa7IO)X+\x9f@+\f\x14\x0f\x90\x7fC6\xc7\xdc\xeb/\xde\xea\xaf\xc9>\t\'\xf0\xd8\xde*\x958\xfe\xa2\xa4\xd3A^\xf5\xfe%~w\xf2\xe4.k\x89\xc7\x92\xb2J\xe8\xdc\xb3*\x17L\xc21e\x8e\x19i\xceV\xdd\xc0\xab\xf8\xf26\x14F\t\xc02\x00\xe7\xb4\n', 0x6e93ebbbcc088cf2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) unshare(0x22020600) readv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1002}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) preadv(r4, &(0x7f0000001c40)=[{&(0x7f0000000600)=""/247, 0xf7}], 0x1, 0xffff, 0x7a1) 5.733736309s ago: executing program 6 (id=423): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a", 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r3, 0xa) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 5.427933387s ago: executing program 5 (id=424): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000001c0)={0x1ff, [0xffff, 0x0, 0xca, 0x200, 0x0, 0x40, 0x3, 0x8, 0x8, 0xfffc, 0x64, 0x18, 0x5, 0x3, 0x8, 0x5, 0x3, 0xb, 0x1, 0xfffb, 0x8000, 0x74, 0x8, 0x8001, 0x0, 0x7, 0x2, 0x7, 0xc21, 0xfffe, 0x3, 0x6, 0x5, 0x7fff, 0x1, 0x8, 0x7, 0x1, 0x1, 0x7811, 0x62e0, 0x7ff, 0x5, 0xfffd, 0xb, 0x800, 0x7, 0x9], 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() lsm_get_self_attr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(0x0, 0xecf86c37d53049cc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) close(r5) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x9, 0x2022}) writev(r0, &(0x7f0000000280), 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=@raw={0xfc, 0x0, {"1e0f6a70bbac1fc6f5141ee900d5a81c2665f6e4be8cf25df25238d4b9b0759d7140613f5550d7c5b952545df59fa2b5db4c62ca9061f18143881fd1ad41e7b25a90d46164779c08c6eba4137009e43472f47d07df90adde8c442c952a60502164be28dafe30ac66d066880c38109ed2475854e229ae16c08d0eeeb20bfc6cff8e45631f0bdea114433d330e9466ae2a1ed3555acd7839409afb0e20dd83af5b9fd36a438850d7f7c081323c7a571acd472cbab24966a5ad7a658a1b366a08400da2db56453fc3172265b3b2e06a3f22947e75bcf7bf0cadc4c00942c1c994a133bc285d36cab8948e768bcb0a04dff3991618a3a6db6a1bc1"}}, 0x101000) 4.488100867s ago: executing program 5 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, 0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(0x0, r0, r1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 4.484879357s ago: executing program 2 (id=426): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a0480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000880)=""/192, 0xc0}], 0x1, 0x180, 0x0) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 4.471703118s ago: executing program 4 (id=427): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 3.440346064s ago: executing program 4 (id=428): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000200)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.389032119s ago: executing program 6 (id=429): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x109400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000010c0)={0xfffffffe, 0x2, 'client1\x00', 0x6, "422e9d6523856127", "07c9e8028cd1f0394efed58c2c8fd304183134b004670d4b3355b33600bfb6c0", 0x4, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xc7}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/221, 0xdd}, {0x0}], 0x4}, 0x10001) 2.247517975s ago: executing program 2 (id=430): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000180)={0x0, 0x0, 0x0, @raw}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', 0x0, 0x10080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 2.145026727s ago: executing program 5 (id=431): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043eea0d0313000100000000000040067c98acca17d1aa8d000000005b14"], 0xed) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], &(0x7f0000000580)=ANY=[], 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x78, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x10c}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4f69}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x3}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0x2}}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xa99c}]}}]}, 0x78}}, 0x24040084) gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setuid(0xee01) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f00000003c0)={&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', &(0x7f0000000200)='hfsc\x00', 0x2c}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) 1.255347487s ago: executing program 2 (id=432): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_open_dev$ptys(0xc, 0x3, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x402) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) keyctl$setperm(0x5, r5, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) sendmmsg(r1, &(0x7f0000003c00)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000bc0)=@generic={0x29, "85d9afa45ee5d4d22fd1d0d60bc56c628a20327c6ad9934dbff5d6bb18cc7dd19db966ffc98d41a203c99f4572202dfccd2976a9e29de5567bd0966803222ed64c98a9f9b9c96aedc988e9892a5c96e58f41b39e6c0c005ed06cc3096168be7c433c0616f262058fa394ac0097ff966be14f0f659b8da0e3564180e42830"}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000c40)="3fa67e03ae3bd1921d68859710f98732c1b01c0d52d3599644bed52fc058f7855cf2f38197df8106d945b92e6e112b9f7f4f5d0df053168b2c344edb44e2aa3e700999aeca8b80a16da9e593938fd1f2e4fde5073fa9dc6dff3eae31ef9640d310862f02fdb6355c463dd800231215bc9c954a20a461398fd7981a11087f31c5849fa719e515f516308058ac5d95", 0x8e}, {&(0x7f0000000d00)="8327544c00509b93ccef096c5b1af011dd419be60c1066a39cebbfd5269d043e8947a8e81812fb41446a9ab4a0d93f951f45f702d8b5f441c0011e45d9ba094b1ccbf132c3eea161bdde89a8481dcd60b69e502cf905382e13853a5efe81113d33c53818d47e22a89dd4e7920f1527279979c574db52e436a24891b0b0d0c57df252228fe71ddd8b7d94a6b57072d29337c943eb5e93aa72ec70494c77d8642b11f8700a2aeed65b1addb054436c5409fdd3a47c6811fd2e58ea57ca", 0xbc}, {&(0x7f0000000dc0)="acf4b66ffdec1fc86a34d3a4820322019cc86b9906e8754cbf68340e5b14a0530ce6d09f5e3dff5b993eadd23790fcfa7dbd7064e711e659752ef1a2b8ea1169fdc7d4741a88ffb7114e00568a376b70fd220538d83f872c0e29c21b06d33986be60e0e2c0538411cad5637b263af81a25696819e7c507edf43d5f62459dd94b918988e33d971c4a3daada99a41e885e6830f09d210493c5ad262a4114c97b9a373a49eb1022cfc151fb9156d8186481dbca74673be173c395c8cbd1b4bc86bf09c57fd0404472bae858d01edd495ac97f465c3feb17d1a708e7147a36f6", 0xde}, {&(0x7f0000000ec0)="0cdbabec8c887eee578d1788149fd7ef6e5bb04892a353d2ef979db6fabde8f6265f41ea04ddf3cd8c2af764abcf7e3c30f0cce49d0936e3b1b9d5bd6d607fb90b9598f5675299fc460068687ee043d8a0536d1ce463307c4adbcb60b8fe9d138dc30a35856329827397769eff9a296c61f6e293e55b29506de32945e2b5ac876bbc5ab1b147a64a0ced63dd99f5afcb4ea3d5868d3cf794b06f8a0d7a", 0x9d}, {&(0x7f0000000f80)="860f4e67e177635eeb39a26df932ad4cca9657372f3fbf45e190853d9e719f26929c30969c2fb98c7879d62ff82088735d3dbb677d751ca20a23735c804edcb507ff637f718efb1cdf4fbc81a9f638b47be97616f89852a5e64a388f03dab93365e671bdc254c484c6ddf065211a8f50b191160aeb0e99bc211cc52f5c92c17f8d43424258a8ca7a6b695c11924da21e986ef0f19ad4a370bfde4c864bc8ad0ab9c59781540fdcca1b7bfcc01c010bf1a67cdfe46d3fb7c50e3e7172936db69ef27d04c15f50b73a791d7f48c8cafccb6b781ad59a1249d5762906738a1e63", 0xdf}, {&(0x7f0000001080)="9b6497075dc618d87c302e57016cf0a0cbb5c6519ab230dd8dc11a98514909fc750d178a36745220d4721f607ac90e77b20752f3", 0x34}], 0x6}}, {{&(0x7f0000001140)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000001500)=[{0xd8, 0x112, 0xffffffff, "509ff212508ddd7b517c6c2b5ed0550d5d618609a017f841763a9349213500e1d0857404cb231686aed6f997fc4e09b22ebf15b991ad6ae10d86bbc18f9b6bb7b8bfd02cc13e5364acf9d7ea4bdcf581ff0cd456158c8bbd78c3b654f5d15f87a0af56f685a8d40517d9f808b4075c48715b55493eb8b1bfaa64c4e911411138bbf6c15d41b40688db9291d17ea4097b2ee5af1966f46d2832427c33e5fda6036e7949cb7e6ccf3346c11ee9d8f29178b5bcd28493f7eba605e399e867e46965035b2d"}, {0xf0, 0x10f, 0x8, "ef9fcf7783e6a91d43d67df70736379d2bcdce5396734a6cfb178fb28ce2c79fd52b8b525a0bb153f2284d3572988b4fc3c4abdef18a075307132298263f68692c09f976e9e5feb4affecf18c895c69ca5d6d65e7be2137a5c8b00ce8ee7cbb49dab53da6be2225bea88623d2b34cad595392552c0ecc0ccba5a734cb88c253fa0bb2d1d09f5c5b8f486d35bca401d08e4e73533968d8ad38cf44d9eba92f974767b254ee88482234cbadf11cc66ab62a8ce3594cd70dc157276e3c3348a899f510c78ad5035837e52183fa7e33bf836bd97a31429d8b36852"}], 0x1c8}}, {{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvlan0\x00'}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)="40a54f658d15e6a568f495ec48c042696e9c0aa3e0505d5f15f1b76e80d95d4e6447c7e097effa8fd809c1ef2ec0e533ee5576cc", 0x34}, {&(0x7f00000017c0)="81bfdb1115cb6f20cd2ae0baf5d3cc3f9f4fe52c44063da6506105d4995ccb355aa03cf2efa6cbab799242db2a5066189af5be780cac6340b9010e71c32756752ee12c6ae7e36b80767b2f1669ef97d1d97bcbef159c8de28f0e2aa370f53d1a708247c3e050f81d821959df58630ccc0f1c4653966fd850c8f69eed5ef24496ba9f2da2cbce6a883203b32f74584baac2ed50a53ad269b50a6463f96c5afdf5aa86018a7f53836a7ff61a240a09c4387e7cf7c2d2b6c5387ece87d42b3f97afe87fee40f410f28e353111d31967999d7c616ad433123c2ca03cf4acacae", 0xde}], 0x2, &(0x7f0000001900)=[{0xb0, 0x102, 0xeef0, "471fbc56a5bdf75c6bef20e2ecd05bc6d5a9a83efe2e1860036267d3521dcfc7d5284c3e47e14912313fb602d34c6e89891223e3dc17ea0c214038c8e93efe602763e6672d7ca412d39ec66c327bf9c8e9fe4312014e8aa36a76f09e3a3f927bede9784e27817796f8633e1b0441f442f2dc8acfbe1763d1ff7b1a5eee671cd32fa478d54fd602e81e5ceb8385e951d9f5b10ed0f5526688a1e58f"}, {0x108, 0x107, 0x7e4, "6ffeb851dac832b78de5483a2e9c0f95ead539f93292adbde26a52bbe5f39f3cf6a435bbe03826ce2d4435eb48a51290799cd76bbc60732d3d73537b3442afad202ea6874e3eb68121fe85b68f132409934b9f9d7be143cce1190418222a6f27b090f2d2ea9389ec7ca33ba8befc9e3fa7e856a084736fefae5c119178f8963e1e6421b34b0bf632ba54ac4b6c35f14671e405676161542ff107b8d024d72d7590dd426bca8f5cbf3c549dd5ad56016038e68d4cc96af357c20804012f0f70d758cb676a939b71fdacc48a63f3f197632244f810d80e34e142c1b613c5540a216180eff84a33512dcfe16bc5f6a1ae62b19fc6add5506a73"}, {0x68, 0x10f, 0x0, "6c1aaa7ea1a539026d994d13749f14214072990b3358d45ed6bb7f9fa31478aaee70ac1e40292d330cdd1022554f848e1eec0536ea7497cb5b21f6da861889355d00f72ecd6b151f499fcae2b0d35e1adf9ae9786e72"}, {0x90, 0x1, 0x8, "d6ed52e2a3846ca695ef1dcab4fddbafcc076973650d5f83351d0e2ebc81e01b23586f9c9c05a26a87cb702f373b1be4a873942529df5ea96292836691b21560d2901f98b3007c17fd33c810bb5d4765d67c7c92fa5acc09c1f1801bd25ea88f3f9cff0106331a9012d23f2c1e843a5b71994aea0c6cac0523"}], 0x2b0}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001bc0)="62974604269ecdfed1754b5a296a2ef7ab5ab414360fe76908754d281dd241a69d3968b7fd72d56744201c32402e40e8e80794f7efcdbb790391b1518fa45616826575960217ecc2a8bbfab90102e0c6c29f519615790435f5fc6d0dd8d46ee0f8e2b744ba6aea31e3c2db6a185d4d6aaebf71fce7f543ebe6983ae0682439e21251765eb7acd35c998db304a7f0789da637b958a59e88770ce38b9353859535027dfa4b9e5fadb37213aeb9e59979e2544861cbc218d1485217a7fa16b68679d166ca7219dcb8f382b3f6de23040d93582cb4aa24b0d62beb3eadc3bae2a5f1d152521fb73bb8576b4969d9d7bc56d1187feef911937e2cb1ce303760df6990318d2bedf63678a19e4c94bb1f8c78a6d491884ebdf6c3a52b4705289c9534bd536a9609b10cbc3e6b69ae33b56a9cac99f5fc71bcfea2e5d81c79e899abc1dc59e5b4598152c0ac1167b4f54aa07c644a64a8374c15dc41ccca1c7aa8f94d1418f06e3301da6fa6e457ae0dd486aabe4a6ccd27cb980ba0d72564cf6a6fc968152d601635e962dd38f90cd9f48a65ab7b1e84cf3216838edb3830c87d52dfe84ac477e286d8ab65882e39db18e1a4813a38686ee36abbcea94d9ac6431bf779da8216cce1e161701235c87b59309620624ad53c17d966b1bcb121ed232efc866a467f964da81d7dc0da5c7778b7be55bdd9bbc684c49b3c8c89589796589c71f570ee8a951736e9b37d3e5f6f9bfa4d38a4225016d594220431cffb4cd1a1d87965b02001bd72daa25e0f16e3f9dd9993cfe729030cd8c6005deac90614122bec36f5fe77ef1932f7ab5ba5061ee61d4df32f9f65eeffc5cfe780d80d8f20defb9168ced51a14aeb7182445e4d6f0f96ecd04a542e944781c3280ccdf152c48f8b323ca99a10050c1f457a5feab58b270a92450e4f063666fea4b9b7d4ba0e811f0b486e61fd82b4ad6f232cb5e19a1879c5b8c5c8a0ea162f53c12b086c19d63f17d23d8ce9b9f9185b7b3239085a5394b7ffec125cd47084d1531a09212a972d9a88ce9ea35ff3f6fb5c9de9bcca3bd239e2434d51f29614b6eaffd0dedc0d2b7255a2632770d503a423d300f3af1ba563bb1a2675f89005a785416f615ccb403163b2dcfc816d5fa0ff2ff5965fa052d0fd4d1d8e85e194f22caf989eaaeece6ef9e64bb6444106936c1865ce62aabda2f0692f61bca0028e2bb8570ae17aa78e025d6de8f9e1164a3a0648536f47083df25c598c03ff5bc40c0db1894446305d6b5b1fe27afe1ca6636367bc2c63df424dfc93b86d86c3adcf050bf87b2972503a6a3a49d74cd23df953cfaafea4cb927009cc360a5f667519b2b18723191f6cf5c67cb31f2f8100310985b440c09311849bbe46f73c4f5552222edf99ad39a62b5e82402054114270abb063e8ec7f6a8dba36c7911387037331bbd841767340624fcdf3ba8589a278791a28f27f83b2608c4e101215beb01865828881573d1231d9204d772bec9d6d185ad16781689402e15938184c8f7e73321fce0d04085c45c7dee56a83976c79b82b7dea887a8ad736300f8f0cd6800cd1a23cedb9b9a64c51dc9dfce483f8852577fbee7bbcdc9f7fb6a0093cfe160f072065eb05a21a3e1e33873629e05d324bab8b227144a2ed9c28ac5270dcc946c4a49a7aefd32f39ccfe26d7e84c8dfe30f37ddd4a5c7c46894a26a6d5c4efcec245cd9aa7cb588fd1bb07117bd1bac35721c11e0fe969b1146ac444d2579dce326c5a33cbf2cfbb1eabb3530671c9b53cd7b9f6944f8ea46a64b8b72f08cb0a5555bee4f7f7b7d8ffa7c98c3e72ba20291345f0bb3c2c162af0b809e9e94acd80d533ff319765effd7608092a6129e2416decec260f3cfe5425f4ce0bfd3fa766397568851be1629184b93c0f47ec0c5cfee9f9ef4dfaaf8329d18b7f4a725c5a86f77b15fad02d3a6db0d492b10a631dc55148932d74b072c7d52e029c0949f486c4c72ead208f6c7c481d68ddfd4604ad80164dd69f575bacc968db2c0d0ccada5679f0e03e9939526ced590438d1ac9307353882c398692eaad6ea667836453bd4e874d85ec9a4624407cd2ffef61725b504a2e5bdb4e95dbf067d4fedc884e066075e6d54b4d106e5c26188baf135fe88be131e30cc4ec7194a26a440deb13542d378e479e8deb44bf5996cf21ec9f04463b09a77c1a525a228e2a39c6ce1b0366f101821f292ee0fd79aea1a54533525f482432bf19e346d34588fb34c1121079a15cc3a8b70945658ef4e6deb57ca1261e7ffa99b995925ccc312cb1dc83530507d3fb03a7d86d4570521c2eb767389770ec85b5c7b5a7fc69342c96ff59656a875a56f4de0c03ef10a9ff91194c5fe562fb2b011e8a484949ce7513f65c2aa842e9a2c673631075cf03795c52838c4def47bb774c938e169c3e9110a73d980b0fededf2574f71b9f6ad2fb9dbe411a40a54177de80547b8105e32ef6167d10baa6bd23dbe86093d8e6da7229640012e74c014ae0ed7d69569f2acf8f95c07978814257fdca75aef186a4a271c23f029d2fe53b0333056b11ca792bc464879afc2f192a498cbc371e0aad76f39ea2de465879d9465d5722e23f38b84cc0ad78f1e751fe3aad419763a61234e023cb179bd99470a4e0294b7551aa58b34116bf1a599fd8994362d5644f7d32e4210e25fb9c9945db2b2590ce305fef43c0aa72bb0e64b848d27363aa27bd251addd2827cb7b293b363d59e4afe4a475f5b1a3e83620115419691d093dc88e3be2e5fcc89d21949af8107bc86977283f05c2fb3eac9c4a8e1d27a1d742ace4c2edfd51213ee638f51ed4a152e2b641ce014830848fdd5d0e44ac871e46ef339239396935e9146047f78b1d96f04e3d74d03ca8a13c77aaa74434a6ab26ac80c7c22ad05a1fb54eab12c755c8967feeaf7bd971787658ebeef75770d3831b96f42fa199c3de1ecce03a73bb2a45de8660be3f4aa3ca3ad3eaa4d3319946afa29ee4b496b8c10182e4d01b68bce17f6f0f615769e9080538d4f592c2ed4e253c922b3857a7fa4c1617dbee58bc807dbea14a4677d3613be9bd8c93b0d3ba85aa44278f69f04fe2a66468d3fb7bc29db09363bd56c9848e23e1457ca3e7d896c359f296d7c16731bacbe9abc5e93b6a796abe36ea039b98243b736655ec1a86a6e0a73d5a6b2b32521243c4240a0b6e43e41c5367d97c94da160122c4b2fbe2485b1a612d937fbade7c988df5d1edbb0229ef64e2ab1f8bdbd4ab0800ed9969ab90f85c8997e8f7eef63ad24b42eab8bd28055a36df470ca8a5fa83804b76c538ca948d7e7ccd8ed6d3f43f0f8031b60bf85b00ad442eb05c8b6743b14998ed011da1bf6ebe63dfe9e1c17a699a8bf3a79cfbeb4b1fcde7815e8b2a0b81272ba68b3251803ce75cb56b044c44de95e1e283dba5e81a988cf0aee39e60396758ecf78c772bdc5bfed04e93ffc2d3c6460a764eff1f87656fc65039824a36dde5ecb2d015371463cb9872e4d934f9017e22f76b5e877c5b65ba4f0117020ae00e98bc7ba096a4cd30f6d7edcc7239f1197ae3ea4e680b5276b7df3a79ffc685dec0f0c1447b3255a6d011545b0673969f573d0cbe4964b4910ff8e5b59733997bf6e50eeb2d80ccb326d3e427d06965c2a9b053f39b363433860b1edcaa8defcf7bab25577c74c68002c7799cd56301b8933a12c4110d592b9c1a807b5e557064494532c43596598ff8531684daa198d561d1594961aa360e872d15682690470cba6ac6cb456bd51b929326e0f3a20015da2265a3caf795d24bacc3751fc8fa2cd511257468c639656c2a229ec9a517edb9aa36d61bf6162ee97422c498088269e4ee2be4b7e089e853976ca23e2bb54cf54e0939fe40199ba08e05a6c7821f3e104e30c30582c9727d953d5ad482889eb0e303f374f7e0b6ee826b9da02dbe9c5da273533eb7eef9db1fb335f5c164367224ae180effc17887158df842df0a59f94ad3e37fb1956e5df8a4ab9ed29d13e6b41cf9efc818f1ee993a3913ebf00ba250edad5fc6688645cad043e6b6fc33b397ff8c31f809a19704ea3e4ed1454a13ae9b405891c838a734a8764c4b11738e38a9147054213463a35b1772730b4366592de2e14aa22404c20060ab11480534c0c4fcab8d787dc18d17a62c6a6739df6eafe32097856ba63febd3f6517e06243112d2b9977795f1d46ed3e86193180b5a6aa5957fd5ff0fabef8c5f23fc2a05e0d9770385c80b47dfc2782365575bd7279f8976e59dce07a4da49855d6301c1ebf318dd9e0fb92060349d933bdb74963d5b2ecfcff5b00581812d716673c812aba192dba427b44a14a2fd6bd2a751e84239e62c72cb59ea6befc1f1445e2c5064a85b60db164fbe5e10a6b57fe136cf6255b29dbcf90ec8db66ad7304046aef8c9e55b8b23d20657f44cf096c94bd2475dc7abf869fd9b2eb5ff0b2e5719d87206ce4a40c23d7308ce940a9e6c707589c24d7943c07480847ca2c81d736b4f3b94cc919157d2930239eaaee9ae0c4b15a174171710e7a443a2aed0a2e22fb73f233c1f179c2218526ba492967b6c84b56f6476912266fe9085848758037f4e965a3cb4fcb8d5c2d2413161da72fb794cbab1fe2d8a15a9e6dc0b51a237b317e3ccb6a810bb8e87bcb1afa1180893813e6605bdf17047be443fffe43ab29941fcd137624e5fdde2528461936f4cf58b63e905973648d7a4bb7b7e029201f9d9ff27c3727460e6be8f012b74410826e7a8027aede294d93e5fbb9e4293d1e921ad355caa97d72e791347906db31a0610c62e0dd0da6ab183f19b53a916ea207e1d28deb7a80fe26ee40e4a1d0bc3e6be75b03ec963a7b80d0d537881347f9aebc749613a0ad2df6e14281dd1771e3d905e067ac8f829bc3f301668460ebcd945bb0e748397a12a57e2e7978be4f7835a90f328b53b9b169552e9c07943ada4400f56b669c8a478a12441fcbbc81c49d4d17488416f2f0921e2d85be2766ad647759c857ad5b5662e8b614ec20825c5ba02e20eb0106765f27669e104b9086ae6925b81af356adf5505316e760d6c335ee8a72a9f5fae50d8914b4a63d321ed53890b594de3b6fd5590e2fda46807cf6c43f7cf21dc4151610c2399714a712435a6e99054dede36ef419994c2005b2b4cf750125999f2e78691361ea6d4ef9b30dadf4bb82345bf62de216200c39bf8b491ab9ba5e45dae991de02d5e52ee98fd090b664c8ac8a39dfe17bec08f57dc910122734cf99bcf6d247f0f4e21bdbd266a3361f5ecda2014238d170f0f5a8f109382aa6ced954c591de1f2b5d30edff5616f4d7987691e2f53f6e46ed5b4233e125cc00a2a4d34fd2dd71a0a2f235b7579ae1619a931c20b6bdd87459082a5ebe8e9a39c8bbd59a9d12a31f1a427dd04dd4ef1165c327fc85e2b0c7780158d2055f6d212d1ac696fda89c8b6897cbad9a9255c274835713329d2bd24d6de9b3a0e4af986d7f960e4219c449fec2b1fb3390a9fdfed6ac90e12abc4b189ee02629baca791d5169c8b1f317ddf74a9ad182e3ec260b977e53a0af2d98df3ca7b0f29e07671f10afa7ade4c23f412bd65e7dc652e0006cb0c2d9a39547e6679d6410f73f948e15406f3498c6a42a2787979c66dcd0b142804e2b4c4ecb26837de834468144c60ae5e21bf77262df93fc89c49724a426cdff43067580f0e79c9bd55a59038a1113f761b72dc8828de60affa878396caed09ab49254ba881185cc3a98be4671e3355610211c41385f269c860ea5d6d4b4db60", 0x1000}, {&(0x7f0000002bc0)="8b626e927827e0805f43cb172c7d2a22e94502524659", 0x16}], 0x2}}, {{&(0x7f0000002c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002cc0)="ca46b91bc8da78b4bb7f885bf48ce121f0a4086855556bcbfe11e040a733e5a28fe509b5dcbe09bfbe229b9df9b970a41582c084133ba9eef8abf7d2aafd8c8271843488cee5e6aadcdc570d9d8b7670dfbbea618d37bb1a1f378b9629010479210012c431", 0x65}, {0x0}, {&(0x7f0000002f00)="1e27961ccbe5b29f710beb865b30f99aa99cdd9fed4a05518c3ac36fc3b1767b6f3c61d510616f45992ffb321d6b657aee458e00e55f9eab15bf1b014c336347b7627f295df218e8c3e2aaa8f1fa2c7c259de3264a39f294186bb88759f3e524a455fe02186099afcd0a52c7dbe587b2f69bb1eff9f01409", 0x78}, {&(0x7f0000002f80)}], 0x4, &(0x7f0000003100)=[{0x68, 0x111, 0x8, "eafb108a5e269d37dc452bda546d64e6c224bd8931894668060d524528e102c8e8bc09c8405e8b899b2ed892d2a5c6bc67ff11fde86c4e2155f8b1725ba2d1253ae18b7cad550ed5468902c4a70d494e67a30a7c"}, {0xc8, 0x67d7cbad1099707e, 0x8, "6e7a32c41bda742eba4dd1189c1438317dbb85d8684b44613024b1a07e56a38a4466b3cfe2d285a8297bacb96dd43cb73c26b407eefdfd6233b74d99d54d5dcbcf93da865986942b24f50b14faa2941b09cc6e52348b7b4c72e60de8e344271ab473a3134192bd4bc4be805ee3833e0e606936d35f6fccf152b8a3284bf93ecf26e856a355a6ade827015c7061838e128747fd383c21eb9500b142f6291fe1561a064a1694f616067fb3d7997aa3ed501a592d6aee"}], 0x130}}, {{&(0x7f0000003340)=@pppoe={0x18, 0x0, {0x2, @multicast, 'erspan0\x00'}}, 0x80, &(0x7f0000003880)}}, {{&(0x7f0000003940)=@llc={0x1a, 0x30c, 0xaf, 0x9, 0x24, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)="8b67ad338e3f4c14a19cf081fbada9cd8fbff0fe07ff0515cc0ec97c8ae9cf4ec4921db1f4c7985297001a107e02f176c3935f059ac37f665d834c0252fe0729a8fa214140ea2cb250c71e4ae090bd36bb8f1e245f7152d24869d8a000cc38a73e8f21c4f20276a98c29f12b9a1362f1da30c042c717168a376f562006fc496bd5331d68", 0x84}], 0x3}}], 0x8, 0x0) 813.170641ms ago: executing program 1 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000840)) 257.063168ms ago: executing program 4 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40080) ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000016000000850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x13, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x2, 'j='}, 0x0}) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r8, 0xc018480d, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r1, &(0x7f0000000980)=""/4, 0x4, 0xf2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffcfc, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x78bda5, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x4000080) 242.855823ms ago: executing program 1 (id=435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'xfrm0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)}], 0x1}, 0x4048043) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socket(0x10, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r8, 0x0, 0x0, 0x804, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000000)=0x44010, 0x4) 180.496793ms ago: executing program 6 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x38}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x3008804, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 118.052509ms ago: executing program 1 (id=437): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000880)={0x3, 0xf, {0xfffffffffffffff8, @usage=0x9, 0x0, 0xf04, 0x81, 0x7f, 0x0, 0x3, 0x20, @struct={0x3, 0x80000000}, 0x4, 0x10000, [0x4, 0x9, 0xffffffffffffffff, 0x8, 0x9, 0x3]}, {0x7fffffff, @struct={0xb}, 0x0, 0x3, 0x56f, 0x2, 0x22, 0x7, 0x20, @usage=0x3, 0x2, 0x1, [0x8, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x7, 0x7]}, {0x100, @usage=0x9, 0x0, 0x9, 0x9, 0x9, 0x0, 0x4, 0x44, @struct={0x2, 0xc40}, 0xb04, 0x101, [0x10, 0xa, 0x401, 0x2, 0x2, 0x6]}, {0x7, 0xd234, 0x5}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c80)={r3, 0x10, 0x0, [0xfffffffffffffffc, 0x4, 0x7, 0x6, 0xffff], [0x0, 0x100, 0x5, 0x2040, 0x4, 0x101, 0x4, 0x8, 0x401, 0x7, 0x9, 0x2, 0x3, 0x4, 0x6, 0xb, 0xc15e, 0x4, 0x8, 0x2000000000000, 0x2, 0x1, 0x84, 0x1000, 0x1, 0x981, 0x9, 0x2, 0x82, 0x6, 0x3fff80000000, 0x7, 0x7f, 0x1, 0x2, 0x5, 0x187f, 0x100000000, 0x93, 0x9, 0x8bf, 0x4, 0x2, 0x4, 0x1f6, 0x7, 0x37, 0xc, 0x3, 0x5, 0x1, 0x4, 0x7, 0x3, 0xffffffffffffaa86, 0x0, 0x7, 0x8b85, 0x5, 0x0, 0x0, 0x67a, 0x9, 0xc, 0x72d, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x4b4, 0x2, 0x4, 0x5, 0x0, 0x8, 0x2, 0x6, 0x9, 0xffffffffffffffff, 0x3, 0x10001, 0x5, 0xe870, 0x9106, 0x0, 0x0, 0x8, 0x8, 0x2, 0x8, 0x9, 0x0, 0x22, 0xffffffffffffff31, 0x134, 0xffffffffffffffff, 0x9, 0x2, 0x1, 0xfff, 0x10, 0xb, 0x9, 0x7, 0x80000000, 0xfffffffffffffff9, 0xffac, 0x6, 0x5a1, 0x3, 0x6c0, 0x6, 0x55, 0x100000000, 0x8e0c, 0x5324, 0x4, 0x100, 0x3, 0x9, 0x5, 0x2, 0x100000001]}) r4 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r4, 0x4) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x1a0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x9}, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000008080), 0x0, 0x40008004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) 0s ago: executing program 2 (id=438): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): ] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.834491][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.834511][ T44] usb 2-1: config 1 has no interface number 0 [ 147.834546][ T44] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x62, changing to 0x2 [ 147.839641][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.839666][ T44] usb 2-1: Product: syz [ 147.839680][ T44] usb 2-1: Manufacturer: syz [ 147.839696][ T44] usb 2-1: SerialNumber: syz [ 147.980757][ T5814] usbhid 3-1:0.0: can't add hid device: -71 [ 147.980873][ T5814] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.998888][ T5814] usb 3-1: USB disconnect, device number 3 [ 148.264358][ T44] snd-usb-us122l 2-1:1.1: usb_set_interface error [ 148.270906][ T44] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 148.296116][ T44] usb 2-1: USB disconnect, device number 3 [ 150.525689][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 150.525707][ T30] audit: type=1400 audit(1791075045.924:518): avc: denied { create } for pid=6294 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.530953][ T30] audit: type=1400 audit(1791075045.924:519): avc: denied { connect } for pid=6294 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 152.247585][ T6300] input: syz1 as /devices/virtual/input/input9 [ 152.274165][ T30] audit: type=1400 audit(1791075047.604:520): avc: denied { read } for pid=6297 comm="syz.0.112" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 152.277806][ T30] audit: type=1400 audit(1791075047.674:521): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 152.281339][ T30] audit: type=1400 audit(1791075047.674:522): avc: denied { read } for pid=4959 comm="acpid" name="event4" dev="devtmpfs" ino=2816 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.281384][ T30] audit: type=1400 audit(1791075047.674:523): avc: denied { open } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2816 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.281424][ T30] audit: type=1400 audit(1791075047.674:524): avc: denied { ioctl } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2816 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.933755][ T6326] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 153.959807][ T6326] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 153.980412][ T6326] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 153.983291][ T6326] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 154.043841][ T6326] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 154.043866][ T6326] pci 0000:00:05.0: vgaarb: bridge control possible [ 154.043879][ T6326] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 154.049261][ T6326] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 154.157957][ T30] audit: type=1400 audit(1791075049.314:525): avc: denied { write } for pid=6320 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.699365][ T30] audit: type=1400 audit(1791075050.094:526): avc: denied { ioctl } for pid=6330 comm="syz.3.119" path="socket:[10072]" dev="sockfs" ino=10072 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 155.237140][ T30] audit: type=1400 audit(1791075050.634:527): avc: denied { write } for pid=6334 comm="syz.0.120" name="video5" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 157.068168][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 157.068187][ T30] audit: type=1400 audit(1791075052.464:530): avc: denied { create } for pid=6344 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.070189][ T30] audit: type=1400 audit(1791075052.464:531): avc: denied { connect } for pid=6344 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.627255][ T6358] : renamed from bond_slave_0 [ 159.311945][ T30] audit: type=1400 audit(1791075054.574:532): avc: denied { checkpoint_restore } for pid=6365 comm="syz.0.123" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.593509][ T30] audit: type=1400 audit(1791075054.994:533): avc: denied { read } for pid=6365 comm="syz.0.123" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.593558][ T30] audit: type=1400 audit(1791075054.994:534): avc: denied { open } for pid=6365 comm="syz.0.123" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.601045][ T30] audit: type=1400 audit(1791075054.994:535): avc: denied { ioctl } for pid=6365 comm="syz.0.123" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 159.867751][ T6374] xt_cgroup: invalid path, errno=-2 [ 159.952884][ T30] audit: type=1400 audit(1791075055.254:536): avc: denied { getopt } for pid=6369 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.336344][ T30] audit: type=1400 audit(1791075055.734:537): avc: denied { bind } for pid=6377 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.337221][ T30] audit: type=1400 audit(1791075055.734:538): avc: denied { map } for pid=6377 comm="syz.2.116" path="socket:[10126]" dev="sockfs" ino=10126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 160.337400][ T30] audit: type=1400 audit(1791075055.734:539): avc: denied { read } for pid=6377 comm="syz.2.116" path="socket:[10126]" dev="sockfs" ino=10126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.085792][ T6383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 161.085813][ T6383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.088462][ T6383] vhci_hcd vhci_hcd.0: Device attached [ 161.153148][ T6384] vhci_hcd: connection closed [ 161.169835][ T62] vhci_hcd vhci_hcd.1: stop threads [ 161.170181][ T62] vhci_hcd vhci_hcd.1: release socket [ 161.170201][ T62] vhci_hcd vhci_hcd.1: disconnect device [ 161.281665][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 162.277858][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 162.277876][ T30] audit: type=1400 audit(1791075057.674:545): avc: denied { create } for pid=6391 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.336262][ T6392] jffs2: notice: (6392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.369640][ T30] audit: type=1400 audit(1791075057.764:546): avc: denied { write } for pid=6391 comm="syz.3.129" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.394519][ T30] audit: type=1400 audit(1791075057.774:547): avc: denied { add_name } for pid=6391 comm="syz.3.129" name="test" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.412850][ T30] audit: type=1400 audit(1791075057.804:548): avc: denied { create } for pid=6391 comm="syz.3.129" name="test" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.424625][ T30] audit: type=1400 audit(1791075057.814:549): avc: denied { read } for pid=6395 comm="syz.1.130" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.429840][ T30] audit: type=1400 audit(1791075057.824:550): avc: denied { open } for pid=6395 comm="syz.1.130" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.438966][ T30] audit: type=1400 audit(1791075057.834:551): avc: denied { write } for pid=6391 comm="syz.3.129" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.076339][ T30] audit: type=1400 audit(1791075058.474:552): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 163.130107][ T30] audit: type=1400 audit(1791075058.524:553): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 163.145720][ T30] audit: type=1400 audit(1791075058.544:554): avc: denied { read write open } for pid=6391 comm="syz.3.129" path="/30/mnt/test" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 163.200238][ T6396] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.200394][ T6396] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 163.470457][ T6403] netlink: 'syz.4.131': attribute type 15 has an invalid length. [ 163.470567][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 164.101615][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.134'. [ 166.870077][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 168.036283][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 168.036320][ T30] audit: type=1400 audit(1791075063.394:568): avc: denied { name_bind } for pid=6432 comm="syz.3.139" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 168.446111][ T30] audit: type=1400 audit(1791075063.844:569): avc: denied { create } for pid=6432 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.448182][ T30] audit: type=1400 audit(1791075063.844:570): avc: denied { ioctl } for pid=6432 comm="syz.3.139" path="socket:[10197]" dev="sockfs" ino=10197 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 172.372836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 172.574450][ T30] audit: type=1400 audit(1791075067.974:571): avc: denied { setopt } for pid=6463 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.258698][ T30] audit: type=1400 audit(1791075068.654:572): avc: denied { create } for pid=6469 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 173.261571][ T30] audit: type=1400 audit(1791075068.654:573): avc: denied { ioctl } for pid=6469 comm="syz.1.147" path="socket:[10864]" dev="sockfs" ino=10864 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 173.289971][ T30] audit: type=1400 audit(1791075068.684:574): avc: denied { bind } for pid=6469 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 174.999475][ T30] audit: type=1400 audit(1791075070.394:575): avc: denied { append } for pid=6477 comm="syz.1.150" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.293814][ T984] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.347380][ T6485] xt_hashlimit: size too large, truncated to 1048576 [ 175.347467][ T6485] xt_hashlimit: max too large, truncated to 1048576 [ 176.459771][ T5607] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 176.513217][ T984] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 176.514203][ T984] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.514233][ T984] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.514263][ T984] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.514300][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.516896][ T984] usb 5-1: config 0 descriptor?? [ 176.604639][ T6495] ======================================================= [ 176.604639][ T6495] WARNING: The mand mount option has been deprecated and [ 176.604639][ T6495] and is ignored by this kernel. Remove the mand [ 176.604639][ T6495] option from the mount to silence this warning. [ 176.604639][ T6495] ======================================================= [ 176.624208][ T6495] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 176.792072][ T30] audit: type=1400 audit(1791075072.004:576): avc: denied { mounton } for pid=6487 comm="syz.0.144" path="/27/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 176.792200][ T30] audit: type=1400 audit(1791075072.144:577): avc: denied { write } for pid=6487 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.792236][ T30] audit: type=1400 audit(1791075072.144:578): avc: denied { nlmsg_write } for pid=6487 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.673520][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 177.673617][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 177.708858][ T984] usb 5-1: USB disconnect, device number 3 [ 177.750923][ T6501] FAULT_INJECTION: forcing a failure. [ 177.750923][ T6501] name failslab, interval 1, probability 0, space 0, times 1 [ 177.750983][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full) [ 177.751008][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.751026][ T6501] Call Trace: [ 177.751034][ T6501] [ 177.751043][ T6501] dump_stack_lvl+0x100/0x190 [ 177.751102][ T6501] should_fail_ex.cold+0x5/0xa [ 177.751132][ T6501] should_failslab+0xc2/0x120 [ 177.751165][ T6501] kmem_cache_alloc_noprof+0x92/0x6a0 [ 177.751190][ T6501] ? __pfx_map_id_range_down+0x10/0x10 [ 177.751214][ T6501] ? security_inode_alloc+0x3b/0x2c0 [ 177.751244][ T6501] security_inode_alloc+0x3b/0x2c0 [ 177.751268][ T6501] inode_init_always_gfp+0xc6f/0xfb0 [ 177.751303][ T6501] alloc_inode+0x8e/0x250 [ 177.751326][ T6501] new_inode+0x22/0x1c0 [ 177.751350][ T6501] proc_pid_make_inode+0x22/0x160 [ 177.751382][ T6501] proc_pident_instantiate+0x85/0x310 [ 177.751415][ T6501] proc_pident_lookup+0x1e3/0x270 [ 177.751447][ T6501] ? __pfx_down_read+0x10/0x10 [ 177.751484][ T6501] __lookup_slow+0x155/0x320 [ 177.751511][ T6501] lookup_slow+0x50/0x70 [ 177.751534][ T6501] link_path_walk+0x1377/0x1cc0 [ 177.751572][ T6501] path_openat+0x1ac/0x2440 [ 177.751605][ T6501] ? __pfx_path_openat+0x10/0x10 [ 177.751642][ T6501] do_file_open+0x20e/0x430 [ 177.751672][ T6501] ? __pfx_do_file_open+0x10/0x10 [ 177.751711][ T6501] ? __pfx_kfree_link+0x10/0x10 [ 177.751743][ T6501] ? _raw_spin_unlock+0x28/0x50 [ 177.751772][ T6501] ? alloc_fd+0x471/0x7a0 [ 177.751808][ T6501] do_sys_openat2+0x10f/0x1e0 [ 177.751838][ T6501] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.751875][ T6501] __x64_sys_openat+0x12d/0x210 [ 177.751904][ T6501] ? __pfx___x64_sys_openat+0x10/0x10 [ 177.751943][ T6501] do_syscall_64+0x123/0x790 [ 177.751968][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.751991][ T6501] RIP: 0033:0x7fcb8d75e98e [ 177.752018][ T6501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.752042][ T6501] RSP: 002b:00007fcb8e72aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.752066][ T6501] RAX: ffffffffffffffda RBX: 00007fcb8e72b6c0 RCX: 00007fcb8d75e98e [ 177.752080][ T6501] RDX: 0000000000000002 RSI: 00007fcb8e72af90 RDI: ffffffffffffff9c [ 177.752093][ T6501] RBP: 00007fcb8d83506b R08: 0000000000000000 R09: 0000000000000000 [ 177.752106][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.752117][ T6501] R13: 00007fcb8da26038 R14: 00007fcb8da25fa0 R15: 00007ffddfb7f458 [ 177.752147][ T6501] [ 177.867975][ T30] audit: type=1400 audit(1791075073.264:579): avc: denied { ioctl } for pid=6498 comm="syz.2.152" path="socket:[11354]" dev="sockfs" ino=11354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.987772][ T30] audit: type=1400 audit(1791075073.374:580): avc: denied { bind } for pid=6498 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 178.183505][ T30] audit: type=1400 audit(1791075073.574:581): avc: denied { ioctl } for pid=6498 comm="syz.2.152" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11369 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 179.248597][ T30] audit: type=1400 audit(1791075074.094:582): avc: denied { create } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.248648][ T30] audit: type=1400 audit(1791075074.114:583): avc: denied { bind } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.248684][ T30] audit: type=1400 audit(1791075074.124:584): avc: denied { setopt } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.248719][ T30] audit: type=1400 audit(1791075074.144:585): avc: denied { accept } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.248753][ T30] audit: type=1400 audit(1791075074.154:586): avc: denied { write } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.248784][ T30] audit: type=1400 audit(1791075074.164:587): avc: denied { read } for pid=6509 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.428856][ T5621] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 179.593734][ T5621] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 179.594681][ T5621] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.594713][ T5621] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.594741][ T5621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 179.594772][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.600343][ T5621] usb 4-1: config 0 descriptor?? [ 180.525515][ T30] audit: type=1400 audit(1791075075.254:588): avc: denied { create } for pid=6517 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.525802][ T30] audit: type=1400 audit(1791075075.264:589): avc: denied { setopt } for pid=6517 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.525968][ T30] audit: type=1400 audit(1791075075.284:590): avc: denied { write } for pid=6517 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.601821][ T6532] MINIX-fs: unable to read superblock [ 181.623658][ T30] audit: type=1400 audit(1791075076.994:591): avc: denied { mounton } for pid=6526 comm="syz.4.159" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 181.664641][ T5621] usbhid 4-1:0.0: can't add hid device: -71 [ 181.668099][ T5621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 182.152099][ T5621] usb 4-1: USB disconnect, device number 4 [ 182.444727][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'. [ 185.328880][ T6551] ima: policy update failed [ 185.526686][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 185.526703][ T30] audit: type=1802 audit(1791075080.724:593): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.164" res=0 errno=0 [ 187.936445][ T30] audit: type=1400 audit(1791075083.334:594): avc: denied { create } for pid=6569 comm="syz.1.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 189.043517][ T30] audit: type=1400 audit(1791075084.444:595): avc: denied { mounton } for pid=6582 comm="syz.2.172" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 189.616581][ T30] audit: type=1400 audit(1791075085.014:596): avc: denied { write } for pid=6585 comm="syz.2.173" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.768166][ T30] audit: type=1400 audit(1791075085.704:597): avc: denied { write } for pid=6587 comm="syz.1.174" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.967949][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 190.968012][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 191.022750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.526972][ T30] audit: type=1400 audit(1791075087.904:598): avc: denied { sqpoll } for pid=6599 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 193.440962][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 193.825027][ T6611] hsr_slave_0 (unregistering): left promiscuous mode [ 193.972616][ T6608] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 194.021680][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.021737][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.166322][ T30] audit: type=1400 audit(1791075089.564:599): avc: denied { ioctl } for pid=6613 comm="syz.1.178" path="socket:[11097]" dev="sockfs" ino=11097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.202585][ T30] audit: type=1400 audit(1791075089.594:600): avc: denied { bind } for pid=6613 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.247709][ T6617] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 194.247791][ T6617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.178'. [ 196.089422][ T6614] Bluetooth: hci3: command 0x0406 tx timeout [ 196.091935][ T6614] Bluetooth: hci0: command 0x0c24 tx timeout [ 196.100483][ T6614] Bluetooth: hci4: command 0x0406 tx timeout [ 196.857064][ T6620] input: syz1 as /devices/virtual/input/input10 [ 196.893261][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 197.063493][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 197.336999][ T30] audit: type=1400 audit(1791075092.734:601): avc: denied { create } for pid=6616 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.344510][ T30] audit: type=1400 audit(1791075092.734:602): avc: denied { write } for pid=6616 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.531413][ T30] audit: type=1400 audit(1791075092.894:603): avc: denied { search } for pid=6616 comm="syz.0.169" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 197.531619][ T30] audit: type=1400 audit(1791075092.894:604): avc: denied { write } for pid=6616 comm="syz.0.169" name="dynamic_events" dev="tracefs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 197.531737][ T30] audit: type=1400 audit(1791075092.904:605): avc: denied { open } for pid=6616 comm="syz.0.169" path="/30/tracing/dynamic_events" dev="tracefs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 197.684238][ T6635] ip6gre1: entered allmulticast mode [ 197.694578][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.910063][ T30] audit: type=1400 audit(1791075093.304:606): avc: denied { create } for pid=6634 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 198.808698][ T30] audit: type=1400 audit(1791075094.204:607): avc: denied { read } for pid=6634 comm="syz.1.181" dev="nsfs" ino=4026533349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.808744][ T30] audit: type=1400 audit(1791075094.204:608): avc: denied { open } for pid=6634 comm="syz.1.181" path="net:[4026533349]" dev="nsfs" ino=4026533349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 198.808766][ T30] audit: type=1400 audit(1791075094.204:609): avc: denied { create } for pid=6634 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.890474][ T30] audit: type=1400 audit(1791075094.284:610): avc: denied { read } for pid=5610 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.201663][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.201708][ T44] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 200.202390][ T44] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 200.202422][ T44] usb 1-1: can't read configurations, error -71 [ 202.003089][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.433415][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 202.433444][ T30] audit: type=1400 audit(1791075097.824:627): avc: denied { write } for pid=6639 comm="syz.3.176" path="socket:[11145]" dev="sockfs" ino=11145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.590879][ T30] audit: type=1400 audit(1791075097.984:628): avc: denied { ioctl } for pid=6639 comm="syz.3.176" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 202.740391][ T30] audit: type=1400 audit(1791075098.044:629): avc: denied { execmem } for pid=6647 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 202.805831][ T30] audit: type=1400 audit(1791075098.204:630): avc: denied { prog_load } for pid=6639 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 202.805882][ T30] audit: type=1400 audit(1791075098.204:631): avc: denied { bpf } for pid=6639 comm="syz.3.176" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.805927][ T30] audit: type=1400 audit(1791075098.204:632): avc: denied { perfmon } for pid=6639 comm="syz.3.176" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.967590][ T30] audit: type=1400 audit(1791075098.334:633): avc: denied { execute } for pid=6647 comm="syz.4.184" name="file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 202.967804][ T30] audit: type=1400 audit(1791075098.344:634): avc: denied { write } for pid=6647 comm="syz.4.184" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.967970][ T30] audit: type=1400 audit(1791075098.354:635): avc: denied { mount } for pid=6647 comm="syz.4.184" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 203.665304][ T30] audit: type=1400 audit(1791075099.064:636): avc: denied { create } for pid=6650 comm="syz.0.183" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 204.043252][ T6653] syz.1.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.070279][ T6666] fuse: Unknown parameter '017777777777777777777770x0000000000000000' [ 205.752509][ T6666] ip_tables: iptables: counters copy to user failed while replacing table [ 206.002856][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 206.173489][ T6675] hub 1-0:1.0: USB hub found [ 206.175614][ T6675] hub 1-0:1.0: 1 port detected [ 206.817929][ T9] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 207.328603][ T6682] xt_hashlimit: size too large, truncated to 1048576 [ 207.328656][ T6682] xt_hashlimit: max too large, truncated to 1048576 [ 207.840615][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.840691][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.840749][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.840900][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.145159][ T9] usb 3-1: config 0 descriptor?? [ 208.204784][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 208.204797][ T30] audit: type=1400 audit(1791075103.604:671): avc: denied { read append } for pid=6683 comm="syz.4.191" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.206638][ T30] audit: type=1400 audit(1791075103.604:672): avc: denied { open } for pid=6683 comm="syz.4.191" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 208.307342][ T30] audit: type=1400 audit(1791075103.704:673): avc: denied { create } for pid=6683 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.349652][ T30] audit: type=1400 audit(1791075103.744:674): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 209.742634][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 209.751242][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.781348][ T9] usb 3-1: USB disconnect, device number 4 [ 209.910227][ T30] audit: type=1400 audit(1791075105.304:675): avc: denied { name_bind } for pid=6691 comm="syz.1.193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 209.970871][ T6696] CIFS: Attempting to mount //127.0.0.1/share [ 210.017514][ T3654] rpcbind: server 127.0.0.1 not responding, timed out [ 210.074562][ T6697] CIFS: VFS: \\127.0.0.1 RFC 1002 unknown response type 0x70 [ 210.142291][ T6696] CIFS: VFS: cifs_mount failed w/return code = -112 [ 211.223001][ T30] audit: type=1400 audit(1791075106.554:676): avc: denied { write } for pid=6699 comm="syz.2.195" path="socket:[12299]" dev="sockfs" ino=12299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.283011][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.932365][ T30] audit: type=1400 audit(1791075107.324:677): avc: denied { setopt } for pid=6704 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.553057][ T30] audit: type=1400 audit(1791075107.944:678): avc: denied { read } for pid=6708 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.739147][ T30] audit: type=1400 audit(1791075108.124:679): avc: denied { write } for pid=6708 comm="syz.4.197" name="wireless" dev="proc" ino=4026532816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 213.567183][ T6716] loop9: detected capacity change from 0 to 2640 [ 213.571941][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.572166][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.572319][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.572475][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.572624][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.572993][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.573232][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.573355][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.573431][ T6716] ldm_validate_partition_table(): Disk read failed. [ 213.573583][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.573639][ T6716] Buffer I/O error on dev loop9, logical block 0, async page read [ 213.573836][ T6716] Dev loop9: unable to read RDB block 0 [ 213.574788][ T6716] loop9: unable to read partition table [ 213.575967][ T6716] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 214.206821][ T30] audit: type=1400 audit(1791075108.914:680): avc: denied { read write } for pid=6712 comm="syz.1.199" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.206873][ T30] audit: type=1400 audit(1791075108.914:681): avc: denied { open } for pid=6712 comm="syz.1.199" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.206908][ T30] audit: type=1400 audit(1791075108.924:682): avc: denied { read } for pid=6712 comm="syz.1.199" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.207056][ T30] audit: type=1400 audit(1791075108.934:683): avc: denied { open } for pid=6712 comm="syz.1.199" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.207156][ T30] audit: type=1400 audit(1791075108.944:684): avc: denied { ioctl } for pid=6712 comm="syz.1.199" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 214.207259][ T30] audit: type=1400 audit(1791075108.954:685): avc: denied { write } for pid=6712 comm="syz.1.199" name="loop9" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.639429][ T30] audit: type=1400 audit(1791075110.004:686): avc: denied { create } for pid=6714 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.775559][ T30] audit: type=1400 audit(1791075110.174:687): avc: denied { watch } for pid=6714 comm="syz.2.198" path="/36" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 215.216425][ T30] audit: type=1400 audit(1791075110.614:688): avc: denied { mount } for pid=6721 comm="syz.4.201" name="/" dev="configfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 215.254363][ T30] audit: type=1400 audit(1791075110.654:689): avc: denied { search } for pid=6721 comm="syz.4.201" name="/" dev="configfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.617523][ T6723] db_root: cannot open: /dev/sequencer2 [ 215.617534][ T6723] db_root: not a directory: /dev/sequencer2 [ 215.882837][ T5724] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 216.052277][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 216.066769][ T5724] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 216.068053][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 216.068072][ T5724] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 216.115095][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.115122][ T5724] usb 4-1: Product: syz [ 216.115137][ T5724] usb 4-1: Manufacturer: syz [ 216.115150][ T5724] usb 4-1: SerialNumber: syz [ 218.844372][ T4924] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.864073][ T4924] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.872477][ T4924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.874642][ T4924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.875195][ T4924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.883545][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 219.883562][ T30] audit: type=1400 audit(1791075115.284:700): avc: denied { sys_module } for pid=6735 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 219.947423][ T30] audit: type=1400 audit(1791075115.344:701): avc: denied { create } for pid=6745 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.976995][ T30] audit: type=1400 audit(1791075115.374:702): avc: denied { connect } for pid=6745 comm="syz.1.205" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.980862][ T30] audit: type=1400 audit(1791075115.374:703): avc: denied { write } for pid=6745 comm="syz.1.205" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.345791][ T5815] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.498892][ T5815] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 220.519287][ T5815] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.519375][ T5815] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.519406][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.519534][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.624394][ T5815] usb 5-1: config 0 descriptor?? [ 220.964288][ T4924] Bluetooth: hci5: command tx timeout [ 222.040005][ T5815] usbhid 5-1:0.0: can't add hid device: -71 [ 222.040534][ T5815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 222.468397][ T5815] usb 5-1: USB disconnect, device number 4 [ 223.053114][ T4924] Bluetooth: hci5: command tx timeout [ 223.156900][ T30] audit: type=1400 audit(1791075118.554:704): avc: denied { map } for pid=6761 comm="syz.2.207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 223.156952][ T30] audit: type=1400 audit(1791075118.554:705): avc: denied { read write } for pid=6761 comm="syz.2.207" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 223.842766][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 224.470257][ T30] audit: type=1400 audit(1791075119.864:706): avc: denied { create } for pid=6771 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.497419][ T30] audit: type=1400 audit(1791075119.894:707): avc: denied { setopt } for pid=6771 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.790101][ T30] audit: type=1400 audit(1791075120.184:708): avc: denied { write } for pid=6771 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.979719][ T6458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.027081][ T30] audit: type=1400 audit(1791075120.424:709): avc: denied { append } for pid=6773 comm="syz.4.219" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 225.123663][ T4924] Bluetooth: hci5: command tx timeout [ 225.428755][ T6458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.664867][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.689989][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.702601][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.712354][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.713895][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.765875][ T6458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.762174][ T30] audit: type=1400 audit(1791075121.794:710): avc: denied { map } for pid=6790 comm="syz.1.222" path="socket:[11832]" dev="sockfs" ino=11832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 226.994655][ T6800] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 226.994761][ T6800] netlink: 224 bytes leftover after parsing attributes in process `syz.4.214'. [ 227.172825][ T30] audit: type=1400 audit(1791075122.374:711): avc: denied { bind } for pid=6793 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.204070][ T5607] Bluetooth: hci5: command tx timeout [ 227.322212][ T6458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.420057][ T6805] db_root: cannot open: /dev/sequencer2 [ 227.420068][ T6805] db_root: not a directory: /dev/sequencer2 [ 227.763287][ T5607] Bluetooth: hci4: command tx timeout [ 229.203018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.301314][ T5815] usb 4-1: USB disconnect, device number 5 [ 229.845898][ T5607] Bluetooth: hci4: command tx timeout [ 230.138479][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.190328][ T30] audit: type=1400 audit(1791075125.584:712): avc: denied { read } for pid=5269 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 230.294324][ T30] audit: type=1400 audit(1791075125.674:713): avc: denied { search } for pid=5269 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.294377][ T30] audit: type=1400 audit(1791075125.694:714): avc: denied { search } for pid=5269 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.294414][ T30] audit: type=1400 audit(1791075125.694:715): avc: denied { search } for pid=5269 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.294454][ T30] audit: type=1400 audit(1791075125.694:716): avc: denied { read } for pid=5269 comm="dhcpcd" name="n31" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.294491][ T30] audit: type=1400 audit(1791075125.694:717): avc: denied { open } for pid=5269 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.294529][ T30] audit: type=1400 audit(1791075125.694:718): avc: denied { getattr } for pid=5269 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 230.416524][ T5814] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 230.459776][ T5814] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.459846][ T5814] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.459887][ T5814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.460037][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.792637][ T5814] usb 3-1: config 0 descriptor?? [ 231.472749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 232.136598][ T6835] orangefs_mount: mount request failed with -4 [ 232.577179][ T5607] Bluetooth: hci4: command tx timeout [ 232.593551][ T30] audit: type=1400 audit(1791075127.184:719): avc: denied { read write } for pid=6832 comm="syz.1.220" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 232.593604][ T30] audit: type=1400 audit(1791075127.184:720): avc: denied { open } for pid=6832 comm="syz.1.220" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 232.674286][ T5814] usbhid 3-1:0.0: can't add hid device: -71 [ 232.674384][ T5814] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.704697][ T5814] usb 3-1: USB disconnect, device number 5 [ 232.856212][ T6458] bridge_slave_1: left allmulticast mode [ 232.856281][ T6458] bridge_slave_1: left promiscuous mode [ 232.857488][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.403808][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 233.907530][ T30] audit: type=1400 audit(1791075128.774:721): avc: denied { getopt } for pid=6840 comm="syz.4.223" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.908230][ T6458] bridge_slave_0: left allmulticast mode [ 233.908253][ T6458] bridge_slave_0: left promiscuous mode [ 233.909383][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.725924][ T4924] Bluetooth: hci4: command tx timeout [ 235.208485][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 235.208509][ T30] audit: type=1400 audit(1791075130.584:731): avc: denied { write } for pid=6856 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.208557][ T30] audit: type=1400 audit(1791075130.584:732): avc: denied { remove_name } for pid=6856 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.208597][ T30] audit: type=1400 audit(1791075130.584:733): avc: denied { unlink } for pid=6856 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2114 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 235.460628][ T6458] bond0 (unregistering): Released all slaves [ 235.501279][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.515054][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.580223][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 235.827582][ T6339] syz.0.120 (6339) used greatest stack depth: 16488 bytes left [ 236.003721][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.003810][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.003921][ T6735] bridge_slave_0: entered allmulticast mode [ 236.005477][ T6735] bridge_slave_0: entered promiscuous mode [ 236.051702][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.051795][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.051923][ T6735] bridge_slave_1: entered allmulticast mode [ 236.081629][ T6735] bridge_slave_1: entered promiscuous mode [ 236.556721][ T30] audit: type=1400 audit(1791075131.684:734): avc: denied { create } for pid=6874 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.556772][ T30] audit: type=1400 audit(1791075131.684:735): avc: denied { write } for pid=6874 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.556810][ T30] audit: type=1400 audit(1791075131.684:736): avc: denied { nlmsg_write } for pid=6874 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.556845][ T30] audit: type=1400 audit(1791075131.694:737): avc: denied { ioctl } for pid=6874 comm="syz.1.221" path="socket:[12027]" dev="sockfs" ino=12027 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.405618][ T6458] hsr_slave_0: left promiscuous mode [ 237.407841][ T6458] hsr_slave_1: left promiscuous mode [ 237.408613][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.408643][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.425336][ T30] audit: type=1400 audit(1791075132.824:738): avc: denied { write } for pid=6881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.467583][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.467604][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.520817][ T6458] veth1_macvtap: left promiscuous mode [ 237.520871][ T6458] veth0_macvtap: left promiscuous mode [ 237.521003][ T6458] veth1_vlan: left promiscuous mode [ 237.521055][ T6458] veth0_vlan: left promiscuous mode [ 237.649808][ T30] audit: type=1400 audit(1791075133.044:739): avc: denied { write } for pid=6894 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.952873][ T30] audit: type=1400 audit(1791075133.304:740): avc: denied { mount } for pid=6897 comm="syz.4.226" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 238.685185][ T5724] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.494249][ T5724] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 239.495200][ T5724] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.495231][ T5724] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.495257][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 239.495287][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.592442][ T5724] usb 3-1: config 0 descriptor?? [ 239.678606][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 239.697766][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 240.137447][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 240.137509][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 240.168099][ T5724] usb 3-1: USB disconnect, device number 6 [ 240.240705][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.251348][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 240.363496][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.529981][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 240.530003][ T30] audit: type=1400 audit(1791075135.924:745): avc: denied { create } for pid=6912 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.651659][ T30] audit: type=1400 audit(1791075136.044:746): avc: denied { setopt } for pid=6912 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.689708][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 240.758127][ T30] audit: type=1400 audit(1791075136.154:747): avc: denied { read } for pid=6912 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 240.852425][ T30] audit: type=1400 audit(1791075136.244:748): avc: denied { write } for pid=6912 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 241.105818][ T6735] team0: Port device team_slave_0 added [ 241.352960][ T6735] team0: Port device team_slave_1 added [ 241.766608][ T6927] qnx4: no qnx4 filesystem (no root dir). [ 241.798744][ T30] audit: type=1400 audit(1791075136.874:749): avc: denied { bind } for pid=6924 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.798917][ T30] audit: type=1400 audit(1791075136.874:750): avc: denied { name_bind } for pid=6924 comm="syz.2.231" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 241.799052][ T30] audit: type=1400 audit(1791075136.874:751): avc: denied { node_bind } for pid=6924 comm="syz.2.231" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 241.800297][ T30] audit: type=1400 audit(1791075136.874:752): avc: denied { write } for pid=6924 comm="syz.2.231" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 241.800476][ T30] audit: type=1400 audit(1791075137.154:753): avc: denied { mounton } for pid=6924 comm="syz.2.231" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 242.030384][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.030402][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.030425][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.053079][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.053095][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.053117][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.257122][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 243.272794][ T5702] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 243.355338][ T6735] hsr_slave_0: entered promiscuous mode [ 243.357895][ T6735] hsr_slave_1: entered promiscuous mode [ 243.360136][ T6735] debugfs: 'hsr0' already exists in 'hsr' [ 243.360163][ T6735] Cannot create hsr debugfs directory [ 243.402792][ T5702] usb 2-1: device descriptor read/64, error -71 [ 243.413660][ T5814] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 243.414573][ T5814] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.414601][ T5814] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.414627][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.414657][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.417819][ T5814] usb 5-1: config 0 descriptor?? [ 243.647020][ T5702] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 243.771063][ T6458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.773154][ T5702] usb 2-1: device descriptor read/64, error -71 [ 243.800749][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.800890][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.801026][ T6785] bridge_slave_0: entered allmulticast mode [ 243.824261][ T6785] bridge_slave_0: entered promiscuous mode [ 243.841143][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.841233][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.841389][ T6785] bridge_slave_1: entered allmulticast mode [ 243.866460][ T6785] bridge_slave_1: entered promiscuous mode [ 243.893852][ T5702] usb usb2-port1: attempt power cycle [ 243.901478][ T5814] usbhid 5-1:0.0: can't add hid device: -71 [ 243.901569][ T5814] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.913468][ T5814] usb 5-1: USB disconnect, device number 5 [ 243.978433][ T30] audit: type=1400 audit(1791075139.364:754): avc: denied { write } for pid=6939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.987567][ T6458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.045828][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.071874][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.177871][ T6458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.226025][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 244.233434][ T6785] team0: Port device team_slave_0 added [ 244.239462][ T6785] team0: Port device team_slave_1 added [ 244.239680][ T5702] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 244.275605][ T5702] usb 2-1: device descriptor read/8, error -71 [ 244.297721][ T6458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.318235][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.318246][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.318260][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.326637][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.326651][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.326673][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.402342][ T6785] hsr_slave_0: entered promiscuous mode [ 244.403623][ T6785] hsr_slave_1: entered promiscuous mode [ 244.404309][ T6785] debugfs: 'hsr0' already exists in 'hsr' [ 244.404326][ T6785] Cannot create hsr debugfs directory [ 244.576378][ T5702] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.653535][ T5702] usb 2-1: device descriptor read/8, error -71 [ 244.683414][ T6735] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.696679][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.918605][ T5702] usb usb2-port1: unable to enumerate USB device [ 245.699066][ T6735] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.722639][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.723493][ T6735] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.730818][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.073701][ T6968] qnx4: no qnx4 filesystem (no root dir). [ 246.075787][ T6968] openvswitch: netlink: IPv4 tunnel dst address is zero [ 246.467517][ T6735] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.520679][ T6735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.621911][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 246.621928][ T30] audit: type=1400 audit(1791075142.014:756): avc: denied { read write } for pid=6971 comm="syz.4.236" name="sg0" dev="devtmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.622294][ T30] audit: type=1400 audit(1791075142.014:757): avc: denied { open } for pid=6971 comm="syz.4.236" path="/dev/sg0" dev="devtmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.635252][ T30] audit: type=1400 audit(1791075142.034:758): avc: denied { ioctl } for pid=6971 comm="syz.4.236" path="/dev/sg0" dev="devtmpfs" ino=827 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.010718][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.207480][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.239249][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.239340][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.335541][ T6458] bridge_slave_1: left allmulticast mode [ 248.335565][ T6458] bridge_slave_1: left promiscuous mode [ 248.335759][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.376963][ T6458] bridge_slave_0: left allmulticast mode [ 248.385733][ T6458] bridge_slave_0: left promiscuous mode [ 248.388803][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.404605][ T30] audit: type=1400 audit(1791075143.804:759): avc: denied { write } for pid=6962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.529273][ T30] audit: type=1400 audit(1791075143.924:760): avc: denied { write } for pid=6996 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.593664][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 248.772864][ T30] audit: type=1400 audit(1791075144.164:761): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.841189][ T30] audit: type=1400 audit(1791075144.234:762): avc: denied { create } for pid=7001 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.107139][ T5815] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 249.315441][ T30] audit: type=1400 audit(1791075144.374:763): avc: denied { create } for pid=6998 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.315502][ T30] audit: type=1400 audit(1791075144.374:764): avc: denied { read } for pid=6998 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 249.315562][ T30] audit: type=1400 audit(1791075144.394:765): avc: denied { mount } for pid=6998 comm="syz.1.237" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 249.409915][ T5815] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.409937][ T5815] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.409952][ T5815] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.409971][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.461145][ T5815] usb 3-1: config 0 descriptor?? [ 250.306580][ T5815] usbhid 3-1:0.0: can't add hid device: -71 [ 250.306638][ T5815] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 250.323979][ T5815] usb 3-1: USB disconnect, device number 7 [ 250.346755][ T6458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.351828][ T6458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.359908][ T6458] bond0 (unregistering): Released all slaves [ 250.422514][ T6735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.422538][ T6735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.565157][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 251.426154][ T7021] ubi0: attaching mtd0 [ 251.440954][ T7021] ubi0: scanning is finished [ 251.441231][ T7021] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 251.456342][ T4924] Bluetooth: hci3: Malformed LE Event: 0x0d [ 251.886708][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 251.886722][ T30] audit: type=1400 audit(1791075147.274:768): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 251.890000][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.890054][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.953339][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.953392][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.953424][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.953464][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.965653][ T7021] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 253.084306][ T6785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.110502][ T30] audit: type=1400 audit(1791075148.504:769): avc: denied { mount } for pid=7039 comm="syz.1.246" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 253.124685][ T6785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.129674][ T6785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.172114][ T6785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.212107][ T6458] hsr_slave_0: left promiscuous mode [ 253.221595][ T6458] hsr_slave_1: left promiscuous mode [ 253.249297][ T6458] veth1_macvtap: left promiscuous mode [ 253.249337][ T6458] veth0_macvtap: left promiscuous mode [ 253.249466][ T6458] veth1_vlan: left promiscuous mode [ 253.249526][ T6458] veth0_vlan: left promiscuous mode [ 253.300182][ T30] audit: type=1400 audit(1791075148.694:770): avc: denied { create } for pid=7039 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 254.198760][ T30] audit: type=1400 audit(1791075149.594:771): avc: denied { remount } for pid=7046 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 255.445692][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.445762][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.721549][ T30] audit: type=1400 audit(1791075151.114:772): avc: denied { write } for pid=7038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.971831][ T6458] team0 (unregistering): Port device team_slave_1 removed [ 256.002579][ T6458] team0 (unregistering): Port device team_slave_0 removed [ 256.018331][ T30] audit: type=1400 audit(1791075151.414:773): avc: denied { write } for pid=7067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.351373][ T6785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 256.362596][ T6785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.381208][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 256.381534][ T6785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 256.425403][ T6785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.652396][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.908990][ T30] audit: type=1400 audit(1791075152.284:774): avc: denied { mount } for pid=7082 comm="syz.1.251" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 257.350253][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.447191][ T6785] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.744765][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.744899][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.804610][ T30] audit: type=1400 audit(1791075153.194:775): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 258.090387][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.090481][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.274486][ T30] audit: type=1400 audit(1791075155.634:776): avc: denied { bind } for pid=7116 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 260.686936][ T6735] veth0_vlan: entered promiscuous mode [ 260.711148][ T6735] veth1_vlan: entered promiscuous mode [ 260.825152][ T30] audit: type=1400 audit(1791075156.214:777): avc: denied { write } for pid=7090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.890209][ T6735] veth0_macvtap: entered promiscuous mode [ 260.906748][ T6735] veth1_macvtap: entered promiscuous mode [ 261.131325][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.165485][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.298926][ T30] audit: type=1400 audit(1791075156.674:778): avc: denied { connect } for pid=7132 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 261.316734][ T30] audit: type=1400 audit(1791075156.714:779): avc: denied { write } for pid=7131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.502419][ T3654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.503776][ T3634] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.503858][ T3634] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.503980][ T3634] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.960547][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.548726][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.548763][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.742055][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.742077][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.807951][ T30] audit: type=1400 audit(1791075159.204:780): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.a6tznS/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 263.808457][ T30] audit: type=1400 audit(1791075159.204:781): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.898400][ T30] audit: type=1400 audit(1791075159.294:782): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.a6tznS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 263.940148][ T30] audit: type=1400 audit(1791075159.334:783): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/root/syzkaller.a6tznS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 263.989040][ T30] audit: type=1400 audit(1791075159.384:784): avc: denied { unmount } for pid=6735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 264.028519][ T30] audit: type=1400 audit(1791075159.424:785): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 264.056268][ T30] audit: type=1400 audit(1791075159.424:786): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="gadgetfs" ino=6852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 264.056320][ T30] audit: type=1400 audit(1791075159.434:787): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 264.056362][ T30] audit: type=1400 audit(1791075159.434:788): avc: denied { mounton } for pid=6735 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 264.056402][ T30] audit: type=1400 audit(1791075159.434:789): avc: denied { mount } for pid=6735 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 264.336576][ T7156] netlink: 'syz.4.255': attribute type 16 has an invalid length. [ 264.336598][ T7156] netlink: 156 bytes leftover after parsing attributes in process `syz.4.255'. [ 264.417053][ T7156] erspan1: entered allmulticast mode [ 265.612578][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.409694][ T6785] veth0_vlan: entered promiscuous mode [ 267.450310][ T6785] veth1_vlan: entered promiscuous mode [ 267.521999][ T6785] veth0_macvtap: entered promiscuous mode [ 267.540984][ T6785] veth1_macvtap: entered promiscuous mode [ 267.585186][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.604970][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.630405][ T3654] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.630560][ T3654] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.630608][ T3654] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.630653][ T3654] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.479403][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.479424][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.619487][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 270.619505][ T30] audit: type=1400 audit(1791075166.014:794): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 270.787171][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 270.793179][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.793196][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.252072][ T30] audit: type=1400 audit(1791075166.644:795): avc: denied { create } for pid=7208 comm="syz.6.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.252304][ T30] audit: type=1400 audit(1791075166.644:796): avc: denied { ioctl } for pid=7208 comm="syz.6.211" path="socket:[14235]" dev="sockfs" ino=14235 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.323570][ T30] audit: type=1326 audit(1791075167.714:797): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.4.267" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbb839e159 code=0x0 [ 272.759182][ T30] audit: type=1400 audit(1791075168.124:798): avc: denied { connect } for pid=7216 comm="syz.5.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 272.952374][ T7234] F2FS-fs: Conflicting test_dummy_encryption options [ 273.466402][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'. [ 273.654535][ T30] audit: type=1400 audit(1791075169.054:799): avc: denied { write } for pid=7214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.074415][ T30] audit: type=1400 audit(1791075169.474:800): avc: denied { write } for pid=7250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.367373][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 275.319161][ T7270] serio: Serial port ptm0 [ 275.430824][ T30] audit: type=1400 audit(1791075170.824:801): avc: denied { write } for pid=7268 comm="syz.5.274" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 275.431044][ T30] audit: type=1400 audit(1791075170.824:802): avc: denied { open } for pid=7268 comm="syz.5.274" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 275.484886][ T30] audit: type=1400 audit(1791075170.854:803): avc: denied { setopt } for pid=7266 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.173614][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 277.173649][ T30] audit: type=1400 audit(1791075172.544:807): avc: denied { setopt } for pid=7282 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 277.173845][ T30] audit: type=1400 audit(1791075172.564:808): avc: denied { setopt } for pid=7282 comm="syz.4.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.468796][ T30] audit: type=1400 audit(1791075173.824:809): avc: denied { setopt } for pid=7297 comm="syz.6.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 278.469021][ T30] audit: type=1400 audit(1791075173.844:810): avc: denied { connect } for pid=7297 comm="syz.6.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 278.892113][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.280'. [ 281.290077][ T30] audit: type=1400 audit(1791075176.684:811): avc: denied { read } for pid=7310 comm="syz.4.281" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 281.386035][ T30] audit: type=1400 audit(1791075176.784:812): avc: denied { read write } for pid=7310 comm="syz.4.281" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 281.386298][ T30] audit: type=1400 audit(1791075176.784:813): avc: denied { open } for pid=7310 comm="syz.4.281" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 281.425988][ T30] audit: type=1400 audit(1791075176.814:814): avc: denied { ioctl } for pid=7310 comm="syz.4.281" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 281.456949][ T7314] input: syz1 as /devices/virtual/input/input11 [ 281.475458][ T30] audit: type=1400 audit(1791075176.864:815): avc: denied { read } for pid=4959 comm="acpid" name="event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 281.475801][ T30] audit: type=1400 audit(1791075176.864:816): avc: denied { open } for pid=4959 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2859 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 282.626694][ T7333] xt_CONNSECMARK: invalid mode: 66 [ 282.729849][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 282.729866][ T30] audit: type=1400 audit(1791075178.124:818): avc: denied { write } for pid=7336 comm="syz.5.286" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 282.930005][ T30] audit: type=1400 audit(1791075178.324:819): avc: denied { write } for pid=7292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.935997][ T30] audit: type=1400 audit(1791075178.334:820): avc: denied { mac_admin } for pid=7336 comm="syz.5.286" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.937782][ T7338] SELinux: Context system_u:object_r:passwd_exec_t:s0 is not valid (left unmapped). [ 282.938203][ T30] audit: type=1400 audit(1791075178.334:821): avc: denied { relabelto } for pid=7336 comm="syz.5.286" name="bus" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:passwd_exec_t:s0" [ 282.938493][ T30] audit: type=1400 audit(1791075178.334:822): avc: denied { associate } for pid=7336 comm="syz.5.286" name="bus" dev="tmpfs" ino=51 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:passwd_exec_t:s0" [ 283.068452][ T30] audit: type=1326 audit(1791075178.464:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.1.289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017b19e159 code=0x7ffc0000 [ 283.069247][ T30] audit: type=1326 audit(1791075178.464:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.1.289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017b19e159 code=0x7ffc0000 [ 283.070876][ T30] audit: type=1326 audit(1791075178.464:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.1.289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f017b19e159 code=0x7ffc0000 [ 283.166790][ T30] audit: type=1400 audit(1791075178.564:826): avc: denied { ioctl } for pid=7347 comm="syz.2.290" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 283.316700][ T30] audit: type=1400 audit(1791075178.624:827): avc: denied { write } for pid=7351 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.960285][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.288'. [ 287.121528][ T7374] Device name not specified. [ 287.121528][ T7374] [ 288.579700][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 289.226792][ T7383] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 289.816498][ T7388] hsr_slave_0 (unregistering): left promiscuous mode [ 290.263511][ T1222] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 290.493203][ T1222] usb 6-1: Using ep0 maxpacket: 16 [ 290.558939][ T1222] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 290.664324][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 290.664361][ T30] audit: type=1400 audit(1791075185.804:833): avc: denied { mounton } for pid=7402 comm="syz.1.299" path="/78/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 290.719711][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 290.719738][ T1222] usb 6-1: Product: syz [ 290.719753][ T1222] usb 6-1: Manufacturer: syz [ 290.719768][ T1222] usb 6-1: SerialNumber: syz [ 290.722370][ T1222] usb 6-1: config 0 descriptor?? [ 290.947111][ T7412] Failed to get privilege flags for destination (handle=0x2:0x0) [ 291.621244][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.642508][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.701808][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.702209][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.885110][ T30] audit: type=1400 audit(1791075187.284:834): avc: denied { read } for pid=7414 comm="syz.2.302" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.885464][ T30] audit: type=1400 audit(1791075187.284:835): avc: denied { open } for pid=7414 comm="syz.2.302" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.887025][ T30] audit: type=1400 audit(1791075187.284:836): avc: denied { ioctl } for pid=7414 comm="syz.2.302" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 291.888142][ T7415] fuse: Bad value for 'rootmode' [ 291.890817][ T7415] sctp: [Deprecated]: syz.2.302 (pid 7415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.890817][ T7415] Use struct sctp_sack_info instead [ 292.009002][ T1222] usb 6-1: USB disconnect, device number 2 [ 292.066327][ T30] audit: type=1400 audit(1791075187.464:837): avc: denied { write } for pid=7395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.120319][ T7396] udevd[7396]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.316530][ T30] audit: type=1400 audit(1791075188.174:838): avc: denied { append } for pid=7426 comm="syz.6.303" name="uprobe_events" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 293.466920][ T30] audit: type=1400 audit(1791075188.854:839): avc: denied { write } for pid=7431 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 293.592771][ T30] audit: type=1400 audit(1791075188.974:840): avc: denied { mount } for pid=7423 comm="syz.2.304" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 293.953644][ T30] audit: type=1400 audit(1791075189.344:841): avc: denied { write } for pid=7437 comm="syz.5.306" name="subsystems" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.955046][ T30] audit: type=1400 audit(1791075189.354:842): avc: denied { add_name } for pid=7437 comm="syz.5.306" name="testnqn" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 295.143131][ T7453] netlink: 'syz.2.309': attribute type 15 has an invalid length. [ 295.143154][ T7453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 295.302780][ T5724] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 295.352822][ T5827] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 295.472813][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 295.473409][ T5724] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 295.474369][ T5724] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.474400][ T5724] usb 6-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 295.474428][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.474457][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.478266][ T5724] usb 6-1: config 0 descriptor?? [ 295.506369][ T5827] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 295.510493][ T5827] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.510525][ T5827] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.510551][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.510580][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.518268][ T5827] usb 5-1: config 0 descriptor?? [ 295.955069][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 295.955166][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 295.970245][ T5827] usb 5-1: USB disconnect, device number 6 [ 296.464849][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 296.464867][ T30] audit: type=1400 audit(1791075191.864:848): avc: denied { write } for pid=7471 comm="syz.6.305" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 296.466343][ T30] audit: type=1400 audit(1791075191.864:849): avc: denied { open } for pid=7471 comm="syz.6.305" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 296.480581][ T7474] random: crng reseeded on system resumption [ 296.544179][ T5724] logitech-djreceiver 0003:046D:C53A.0001: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 296.574753][ T44] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 296.725666][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.730207][ T44] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.730240][ T44] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.735074][ T44] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.735098][ T44] usb 2-1: Product: syz [ 296.735113][ T44] usb 2-1: Manufacturer: syz [ 296.751143][ T44] hub 2-1:4.0: USB hub found [ 296.799943][ T30] audit: type=1400 audit(1791075192.194:850): avc: denied { write } for pid=7464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.026070][ T44] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 297.034155][ T30] audit: type=1400 audit(1791075192.414:851): avc: denied { block_suspend } for pid=7488 comm="syz.6.312" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.392320][ T5724] usb 6-1: USB disconnect, device number 3 [ 297.742215][ T30] audit: type=1400 audit(1791075193.134:852): avc: denied { write } for pid=7490 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.928726][ T7512] syz.4.315 uses obsolete (PF_INET,SOCK_PACKET) [ 299.213553][ T44] usb 2-1: USB disconnect, device number 8 [ 300.416670][ T30] audit: type=1400 audit(1791075195.364:853): avc: denied { execute_no_trans } for pid=7525 comm="syz.2.316" path="/67/file2" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 300.416724][ T30] audit: type=1400 audit(1791075195.704:854): avc: denied { append } for pid=7523 comm="syz.6.318" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 300.846508][ T30] audit: type=1400 audit(1791075196.244:855): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.199724][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 301.366582][ T9] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 301.381062][ T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.381097][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.381123][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.381153][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.433730][ T9] usb 3-1: config 0 descriptor?? [ 301.498986][ T30] audit: type=1400 audit(1791075196.854:856): avc: denied { write } for pid=7554 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.869430][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 301.869526][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 301.889891][ T9] usb 3-1: USB disconnect, device number 8 [ 302.318772][ T7589] IPVS: lc: FWM 3 0x00000003 - no destination available [ 303.070540][ T30] audit: type=1400 audit(1791075197.814:857): avc: denied { create } for pid=7581 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.070846][ T30] audit: type=1400 audit(1791075198.274:858): avc: denied { unlink } for pid=7581 comm="syz.5.324" name="#1" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.071057][ T30] audit: type=1400 audit(1791075198.274:859): avc: denied { mount } for pid=7581 comm="syz.5.324" name="/" dev="overlay" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 303.071157][ T30] audit: type=1400 audit(1791075198.344:860): avc: denied { recv } for pid=7579 comm="syz.4.323" saddr=10.128.0.169 src=30006 daddr=10.128.1.81 dest=58614 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 303.530539][ T7597] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 303.531668][ T7597] netlink: 'syz.4.325': attribute type 7 has an invalid length. [ 303.594836][ T7597] Uý: entered promiscuous mode [ 303.989022][ T30] audit: type=1400 audit(1791075199.384:861): avc: denied { write } for pid=7600 comm="syz.5.326" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 304.016930][ T30] audit: type=1400 audit(1791075199.414:862): avc: denied { connect } for pid=7600 comm="syz.5.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.055335][ T30] audit: type=1400 audit(1791075199.444:863): avc: denied { write } for pid=7600 comm="syz.5.326" path="socket:[15709]" dev="sockfs" ino=15709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.791139][ T30] audit: type=1400 audit(1791075200.144:864): avc: denied { ioctl } for pid=7608 comm="syz.6.328" path="socket:[15743]" dev="sockfs" ino=15743 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 304.791394][ T30] audit: type=1400 audit(1791075200.154:865): avc: denied { write } for pid=7608 comm="syz.6.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.785891][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 306.785917][ T30] audit: type=1400 audit(1791075201.694:867): avc: denied { setopt } for pid=7618 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.786106][ T30] audit: type=1400 audit(1791075201.704:868): avc: denied { create } for pid=7618 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 306.786289][ T30] audit: type=1400 audit(1791075201.704:869): avc: denied { write } for pid=7618 comm="syz.1.331" path="socket:[15213]" dev="sockfs" ino=15213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 308.153568][ T30] audit: type=1400 audit(1791075203.544:870): avc: denied { write } for pid=7585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.387530][ T30] audit: type=1400 audit(1791075203.784:871): avc: denied { write } for pid=7633 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.636459][ T30] audit: type=1400 audit(1791075204.034:872): avc: denied { name_connect } for pid=7637 comm="syz.5.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 308.698472][ T30] audit: type=1400 audit(1791075204.094:873): avc: denied { listen } for pid=7637 comm="syz.5.337" lport=39393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 308.731270][ T30] audit: type=1400 audit(1791075204.124:874): avc: denied { accept } for pid=7637 comm="syz.5.337" lport=39393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.756098][ T30] audit: type=1400 audit(1791075205.154:875): avc: denied { read } for pid=7657 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 309.869781][ T4924] Bluetooth: Frame is too long (len 16, expected len 4) [ 310.644893][ T7671] FAULT_INJECTION: forcing a failure. [ 310.644893][ T7671] name failslab, interval 1, probability 0, space 0, times 0 [ 310.644963][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.1.333 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.644995][ T7671] Tainted: [L]=SOFTLOCKUP [ 310.645003][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.645016][ T7671] Call Trace: [ 310.645024][ T7671] [ 310.645032][ T7671] dump_stack_lvl+0x100/0x190 [ 310.645067][ T7671] should_fail_ex.cold+0x5/0xa [ 310.645084][ T7671] should_failslab+0xc2/0x120 [ 310.645103][ T7671] kmem_cache_alloc_noprof+0x92/0x6a0 [ 310.645118][ T7671] ? anon_vma_clone+0x2b3/0xca0 [ 310.645140][ T7671] anon_vma_clone+0x2b3/0xca0 [ 310.645161][ T7671] __split_vma+0x750/0x1de0 [ 310.645176][ T7671] ? __pfx___split_vma+0x10/0x10 [ 310.645186][ T7671] ? mas_next_slot+0xc05/0x13a0 [ 310.645208][ T7671] vms_gather_munmap_vmas+0x3a5/0x1720 [ 310.645223][ T7671] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 310.645235][ T7671] ? mtree_range_walk+0x72b/0xb70 [ 310.645253][ T7671] ? mas_walk+0x260/0x310 [ 310.645268][ T7671] __mmap_region+0x4cc/0x32e0 [ 310.645280][ T7671] ? __schedule+0x315b/0x6920 [ 310.645293][ T7671] ? __pfx___mmap_region+0x10/0x10 [ 310.645304][ T7671] ? trace_sched_exit_tp+0x120/0x160 [ 310.645321][ T7671] ? __schedule+0x126b/0x6920 [ 310.645330][ T7671] ? find_held_lock+0x2b/0x80 [ 310.645359][ T7671] ? pick_eevdf+0x1ad/0x880 [ 310.645375][ T7671] ? pick_eevdf+0x1ad/0x880 [ 310.645398][ T7671] ? sched_clock+0x3a/0x60 [ 310.645411][ T7671] ? kvm_sched_clock_read+0x11/0x20 [ 310.645422][ T7671] ? sched_clock+0x3a/0x60 [ 310.645433][ T7671] ? sched_clock_cpu+0x6c/0x570 [ 310.645449][ T7671] ? find_held_lock+0x2b/0x80 [ 310.645486][ T7671] ? irqentry_exit+0x24d/0xa10 [ 310.645510][ T7671] mmap_region+0x3db/0x6d0 [ 310.645526][ T7671] ? __pfx_mmap_region+0x10/0x10 [ 310.645539][ T7671] ? shmem_mapping+0xd/0x50 [ 310.645553][ T7671] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 310.645573][ T7671] ? bpf_lsm_capable+0x9/0x10 [ 310.645583][ T7671] ? security_capable+0x80/0x260 [ 310.645598][ T7671] do_mmap+0x12c7/0x1c30 [ 310.645616][ T7671] ? lock_acquire+0x1d1/0x380 [ 310.645629][ T7671] ? __pfx_do_mmap+0x10/0x10 [ 310.645645][ T7671] ? __pfx___might_resched+0x10/0x10 [ 310.645658][ T7671] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 310.645670][ T7671] ? security_current_getlsmprop_subj+0x6e/0x130 [ 310.645686][ T7671] ? __pfx_down_write_killable+0x10/0x10 [ 310.645703][ T7671] vm_mmap_pgoff+0x28d/0x470 [ 310.645721][ T7671] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 310.645734][ T7671] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 310.645759][ T7671] ksys_mmap_pgoff+0x285/0x610 [ 310.645776][ T7671] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 310.645790][ T7671] ? xfd_validate_state+0x129/0x190 [ 310.645806][ T7671] __x64_sys_mmap+0x125/0x190 [ 310.645821][ T7671] do_syscall_64+0x123/0x790 [ 310.645836][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.645848][ T7671] RIP: 0033:0x7f017b19e159 [ 310.645866][ T7671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.645878][ T7671] RSP: 002b:00007f017c089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 310.645892][ T7671] RAX: ffffffffffffffda RBX: 00007f017b426090 RCX: 00007f017b19e159 [ 310.645900][ T7671] RDX: 000000000000000b RSI: 0000000000400000 RDI: 0000200000000000 [ 310.645908][ T7671] RBP: 00007f017b23506b R08: ffffffffffffffff R09: 0000000000000000 [ 310.645916][ T7671] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000000 [ 310.645923][ T7671] R13: 00007f017b426128 R14: 00007f017b426090 R15: 00007ffec1195fa8 [ 310.645940][ T7671] [ 311.142795][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 311.143511][ T30] audit: type=1400 audit(1791075206.524:876): avc: denied { egress } for pid=7673 comm="syz.4.341" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 312.229830][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 312.229878][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 312.233982][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 312.234014][ T9] usb 2-1: can't read configurations, error -71 [ 312.450226][ T7690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 312.467236][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 312.467252][ T30] audit: type=1400 audit(1791075207.864:879): avc: denied { create } for pid=7691 comm="syz.5.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 313.006053][ T30] audit: type=1400 audit(1791075208.404:880): avc: denied { ioctl } for pid=7689 comm="syz.2.346" path="socket:[16403]" dev="sockfs" ino=16403 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.224608][ T7698] netlink: 128 bytes leftover after parsing attributes in process `syz.5.347'. [ 313.224659][ T7698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.347'. [ 313.639843][ T30] audit: type=1400 audit(1791075209.034:881): avc: denied { connect } for pid=7702 comm="syz.5.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.831442][ T30] audit: type=1400 audit(1791075209.224:882): avc: denied { wake_alarm } for pid=7708 comm="syz.1.351" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 316.901700][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.901754][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.129305][ T30] audit: type=1400 audit(1791075213.518:883): avc: denied { write } for pid=7695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.226721][ T30] audit: type=1400 audit(1791075213.618:884): avc: denied { write } for pid=7738 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.895344][ T7757] ip_tables: iptables: counters copy to user failed while replacing table [ 318.262744][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 318.508192][ T9] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 318.546604][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.546639][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.546666][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.546695][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.857918][ T30] audit: type=1400 audit(1791075215.228:885): avc: denied { create } for pid=7748 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 319.161141][ T7759] : renamed from bond0 (while UP) [ 319.164035][ T9] usb 2-1: config 0 descriptor?? [ 319.226136][ T500] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.226182][ T500] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.226214][ T500] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.226268][ T500] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.272322][ T30] audit: type=1400 audit(1791075215.668:886): avc: denied { create } for pid=7761 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.275763][ T30] audit: type=1400 audit(1791075215.668:887): avc: denied { setopt } for pid=7761 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 320.638576][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 320.638667][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.672901][ T9] usb 2-1: USB disconnect, device number 11 [ 320.925621][ T7776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.926031][ T7785] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 321.926501][ T7785] ALSA: mixer_oss: invalid index 137438 [ 322.613629][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 322.675297][ T30] audit: type=1400 audit(1791075219.068:888): avc: denied { write } for pid=7746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.783587][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 322.784440][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 322.785975][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.787878][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.787902][ T9] usb 7-1: Product: syz [ 322.787917][ T9] usb 7-1: Manufacturer: syz [ 322.787933][ T9] usb 7-1: SerialNumber: syz [ 322.853049][ T9] usb 7-1: config 0 descriptor?? [ 322.924326][ T9] usb 7-1: No union descriptors [ 322.924789][ T9] usb 7-1: unsupported MDLM descriptors [ 323.172555][ T30] audit: type=1400 audit(1791075219.558:889): avc: denied { write } for pid=7803 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.206778][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.221358][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.838115][ T7822] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7824] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7822] [ 324.839583][ T30] audit: type=1400 audit(1791075221.228:890): avc: denied { setopt } for pid=7821 comm="syz.4.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 324.956224][ T30] audit: type=1326 audit(1791075221.348:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7821 comm="syz.4.373" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbb839e159 code=0x0 [ 325.424544][ T7828] ptrace attach of ""[7824] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[7828] [ 325.428221][ T44] usb 7-1: USB disconnect, device number 2 [ 325.461731][ T30] audit: type=1400 audit(1791075221.848:892): avc: denied { create } for pid=7829 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 325.600481][ T30] audit: type=1400 audit(1791075221.988:893): avc: denied { execute } for pid=7829 comm="syz.5.375" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 325.910260][ T30] audit: type=1400 audit(1791075222.298:894): avc: denied { bind } for pid=7829 comm="syz.5.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 328.807786][ T30] audit: type=1400 audit(1791075225.198:895): avc: denied { setattr } for pid=7858 comm="syz.5.383" name="adsp1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 328.902920][ T30] audit: type=1400 audit(1791075225.238:896): avc: denied { read } for pid=7862 comm="syz.2.384" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 328.902979][ T30] audit: type=1400 audit(1791075225.248:897): avc: denied { ioctl } for pid=7862 comm="syz.2.384" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 330.489745][ T5724] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 330.654128][ T5724] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 330.656399][ T5724] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.656522][ T5724] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.656584][ T5724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.656832][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.868190][ T5724] usb 5-1: config 0 descriptor?? [ 331.906681][ T5724] usbhid 5-1:0.0: can't add hid device: -71 [ 331.906774][ T5724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.934529][ T5724] usb 5-1: USB disconnect, device number 7 [ 332.200941][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.380'. [ 333.572703][ T7891] netlink: 'syz.5.391': attribute type 4 has an invalid length. [ 333.572725][ T7891] netlink: 17 bytes leftover after parsing attributes in process `syz.5.391'. [ 334.726952][ T7899] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (8589934590 ns) > initial count (3328 ns). Using initial count to start timer. [ 338.851132][ T30] audit: type=1400 audit(1791075235.238:898): avc: denied { ioctl } for pid=7923 comm="syz.1.399" path="socket:[16745]" dev="sockfs" ino=16745 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 338.874095][ T30] audit: type=1400 audit(1791075235.258:899): avc: denied { write } for pid=7923 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 342.378974][ T30] audit: type=1400 audit(1791075238.768:900): avc: denied { write } for pid=7951 comm="syz.6.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.458131][ T30] audit: type=1400 audit(1791075238.848:901): avc: denied { write } for pid=7951 comm="syz.6.408" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 342.530745][ T7958] faux_driver vgem: [drm] Unknown color mode 11177; guessing buffer size. [ 344.572857][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 344.958784][ T30] audit: type=1400 audit(1791075241.348:902): avc: denied { bind } for pid=7960 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.632617][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 347.626918][ T9] usb 7-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 347.628158][ T9] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.628187][ T9] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.628213][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 347.628240][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.629809][ T9] usb 7-1: config 0 descriptor?? [ 347.976061][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 348.145659][ T5827] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 348.171069][ T5827] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.171109][ T5827] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.171142][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 348.171252][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.319908][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 348.320013][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 348.356327][ T5827] usb 5-1: config 0 descriptor?? [ 348.392953][ T5815] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 348.428681][ T9] usb 7-1: USB disconnect, device number 3 [ 348.556540][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 348.557277][ T5815] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 348.594554][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.594581][ T5815] usb 6-1: Product: syz [ 348.594597][ T5815] usb 6-1: Manufacturer: syz [ 348.594633][ T5815] usb 6-1: SerialNumber: syz [ 348.776755][ T5815] usb 6-1: config 0 descriptor?? [ 348.791614][ T5815] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 349.014351][ T7998] syz.2.416 (7998): /proc/7992/oom_adj is deprecated, please use /proc/7992/oom_score_adj instead. [ 349.495319][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 349.496299][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 349.595372][ T5815] dvb-usb: bulk message failed: -22 (4/0) [ 349.595416][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.595527][ T5815] dvb-usb: bulk message failed: -22 (5/0) [ 349.595543][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 349.619169][ T5827] usb 5-1: USB disconnect, device number 8 [ 349.650015][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.415'. [ 349.689577][ T30] audit: type=1400 audit(1791075246.078:903): avc: denied { firmware_load } for pid=7990 comm="syz.1.415" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 349.853309][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 349.885825][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 349.887027][ T5815] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 349.887078][ T5815] usb 6-1: media controller created [ 349.995220][ T30] audit: type=1400 audit(1791075246.388:904): avc: denied { ioctl } for pid=7985 comm="syz.5.414" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 349.995270][ T30] audit: type=1400 audit(1791075246.388:905): avc: denied { set_context_mgr } for pid=7985 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 350.008435][ T30] audit: type=1400 audit(1791075246.398:906): avc: denied { map } for pid=7985 comm="syz.5.414" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.010154][ T30] audit: type=1400 audit(1791075246.398:907): avc: denied { call } for pid=7985 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 350.010499][ T30] audit: type=1400 audit(1791075246.398:908): avc: denied { transfer } for pid=7985 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 350.016348][ T7987] loop2: detected capacity change from 0 to 7 [ 350.021554][ T7987] Dev loop2: unable to read RDB block 7 [ 350.021594][ T7987] loop2: unable to read partition table [ 350.021766][ T7987] loop2: partition table beyond EOD, truncated [ 350.025719][ T7987] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 350.155035][ T30] audit: type=1400 audit(1791075246.548:909): avc: denied { create } for pid=8001 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 350.156366][ T30] audit: type=1400 audit(1791075246.548:910): avc: denied { bind } for pid=8001 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 350.233761][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.259776][ T5815] usb 6-1: selecting invalid altsetting 3 [ 350.259797][ T5815] ttusb2: set interface to alts=3 failed [ 350.264612][ T8005] netlink: 288 bytes leftover after parsing attributes in process `syz.2.418'. [ 350.423975][ T5815] DVB: Unable to find symbol tda10086_attach() [ 350.424010][ T5815] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 350.426394][ T5815] dvb-usb: bulk message failed: -22 (4/0) [ 350.426424][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.427241][ T5815] dvb-usb: bulk message failed: -22 (5/0) [ 350.427283][ T5815] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.427649][ T5815] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 350.524965][ T5815] usb 6-1: USB disconnect, device number 4 [ 351.234562][ T5815] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 351.677525][ T30] audit: type=1400 audit(1791075247.818:911): avc: denied { remount } for pid=8011 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 352.016168][ T8018] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.107972][ T8017] input: syz1 as /devices/virtual/input/input14 [ 352.475464][ T8018] nvme_fabrics: missing parameter 'transport=%s' [ 352.475482][ T8018] nvme_fabrics: missing parameter 'nqn=%s' [ 353.186601][ T30] audit: type=1400 audit(1791075249.578:912): avc: denied { read write } for pid=8021 comm="syz.1.422" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.188606][ T30] audit: type=1400 audit(1791075249.578:913): avc: denied { open } for pid=8021 comm="syz.1.422" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 353.293765][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.559392][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.122244][ T8034] jffs2: notice: (8034) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 356.283375][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 356.283412][ T30] audit: type=1400 audit(1791075252.638:916): avc: denied { setopt } for pid=8047 comm="syz.6.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 356.283599][ T30] audit: type=1400 audit(1791075252.638:917): avc: denied { accept } for pid=8047 comm="syz.6.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 356.930320][ T30] audit: type=1400 audit(1791075253.318:918): avc: denied { open } for pid=8063 comm="syz.2.432" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 356.957261][ T30] audit: type=1400 audit(1791075253.328:919): avc: denied { create } for pid=8063 comm="syz.2.432" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 357.862733][ T5702] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 357.992785][ T30] audit: type=1400 audit(1791075254.358:920): avc: denied { write } for pid=8077 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 358.006146][ T191] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 358.079692][ T30] audit: type=1400 audit(1791075254.448:921): avc: denied { ioctl } for pid=8077 comm="syz.6.436" path="socket:[17017]" dev="sockfs" ino=17017 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.079899][ T30] audit: type=1400 audit(1791075254.458:922): avc: denied { create } for pid=8077 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.080034][ T30] audit: type=1400 audit(1791075254.458:923): avc: denied { connect } for pid=8077 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.080175][ T30] audit: type=1400 audit(1791075254.458:924): avc: denied { write } for pid=8077 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 358.381026][ T5702] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 358.517730][ T5702] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.517798][ T5702] usb 6-1: config 0 has no interface number 0 [ 358.518166][ T5702] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.518264][ T5702] usb 6-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.518305][ T5702] usb 6-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.518371][ T5702] usb 6-1: config 0 interface 1 has no altsetting 0 [ 358.622945][ T5702] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 358.622980][ T5702] usb 6-1: Manufacturer: syz [ 358.750470][ T8088] [ 358.752829][ T8088] ====================================================== [ 358.759833][ T8088] WARNING: possible circular locking dependency detected [ 358.766842][ T8088] syzkaller #0 Tainted: G L [ 358.772813][ T8088] ------------------------------------------------------ [ 358.779820][ T8088] syz.1.437/8088 is trying to acquire lock: [ 358.785697][ T8088] ffff8880336700b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 358.794844][ T8088] [ 358.794844][ T8088] but task is already holding lock: [ 358.802195][ T8088] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 358.811074][ T8088] [ 358.811074][ T8088] which lock already depends on the new lock. [ 358.811074][ T8088] [ 358.821466][ T8088] [ 358.821466][ T8088] the existing dependency chain (in reverse order) is: [ 358.830473][ T8088] [ 358.830473][ T8088] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 358.837884][ T8088] lock_acquire+0x1d1/0x380 [ 358.842916][ T8088] __mutex_lock+0x1a4/0x1bd0 [ 358.848032][ T8088] rfcomm_security_cfm+0x3f/0x4b0 [ 358.853573][ T8088] hci_cc_read_enc_key_size+0x3a8/0xec0 [ 358.859654][ T8088] hci_cmd_complete_evt+0x342/0xa20 [ 358.865370][ T8088] hci_event_packet+0x51c/0xcd0 [ 358.870744][ T8088] hci_rx_work+0x451/0xfc0 [ 358.875685][ T8088] process_one_work+0xac7/0x1b10 [ 358.881156][ T8088] worker_thread+0x5ef/0xe50 [ 358.886261][ T8088] kthread+0x373/0x450 [ 358.890857][ T8088] ret_from_fork+0x730/0xd60 [ 358.895965][ T8088] ret_from_fork_asm+0x1a/0x30 [ 358.901253][ T8088] [ 358.901253][ T8088] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 358.908981][ T8088] lock_acquire+0x1d1/0x380 [ 358.914009][ T8088] __mutex_lock+0x1a4/0x1bd0 [ 358.919121][ T8088] hci_remote_features_evt+0x485/0x9b0 [ 358.925105][ T8088] hci_event_packet+0x8e9/0xcd0 [ 358.930483][ T8088] hci_rx_work+0x451/0xfc0 [ 358.935428][ T8088] process_one_work+0xac7/0x1b10 [ 358.940895][ T8088] worker_thread+0x5ef/0xe50 [ 358.946001][ T8088] kthread+0x373/0x450 [ 358.950594][ T8088] ret_from_fork+0x730/0xd60 [ 358.955699][ T8088] ret_from_fork_asm+0x1a/0x30 [ 358.960979][ T8088] [ 358.960979][ T8088] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 358.968272][ T8088] check_prev_add+0xeb/0xe60 [ 358.973384][ T8088] __lock_acquire+0x1528/0x1f40 [ 358.978762][ T8088] lock_acquire+0x1d1/0x380 [ 358.983781][ T8088] __mutex_lock+0x1a4/0x1bd0 [ 358.988888][ T8088] l2cap_chan_connect+0xac/0x2110 [ 358.994435][ T8088] l2cap_sock_connect+0x37a/0x770 [ 358.999976][ T8088] kernel_connect+0x107/0x160 [ 359.005177][ T8088] rfcomm_dlc_open+0x838/0xac0 [ 359.010454][ T8088] rfcomm_sock_connect+0x42c/0x690 [ 359.016172][ T8088] __sys_connect_file+0x146/0x1a0 [ 359.021712][ T8088] __sys_connect+0x141/0x170 [ 359.026823][ T8088] __x64_sys_connect+0x72/0xb0 [ 359.032107][ T8088] do_syscall_64+0x123/0x790 [ 359.037213][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.043621][ T8088] [ 359.043621][ T8088] other info that might help us debug this: [ 359.043621][ T8088] [ 359.053875][ T8088] Chain exists of: [ 359.053875][ T8088] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 359.053875][ T8088] [ 359.066478][ T8088] Possible unsafe locking scenario: [ 359.066478][ T8088] [ 359.073923][ T8088] CPU0 CPU1 [ 359.079276][ T8088] ---- ---- [ 359.084629][ T8088] lock(rfcomm_mutex); [ 359.088777][ T8088] lock(hci_cb_list_lock); [ 359.095791][ T8088] lock(rfcomm_mutex); [ 359.102462][ T8088] lock(&hdev->lock); [ 359.106527][ T8088] [ 359.106527][ T8088] *** DEADLOCK *** [ 359.106527][ T8088] [ 359.114667][ T8088] locks held by syz.1.437/8088: 1, last CPU#0: [ 359.120811][ T8088] #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 359.130130][ T8088] [ 359.130130][ T8088] stack backtrace: [ 359.136011][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.146772][ T8088] Tainted: [L]=SOFTLOCKUP [ 359.151087][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.161142][ T8088] Call Trace: [ 359.164418][ T8088] [ 359.167339][ T8088] dump_stack_lvl+0x100/0x190 [ 359.172020][ T8088] print_circular_bug.cold+0x178/0x1be [ 359.177490][ T8088] check_noncircular+0x146/0x160 [ 359.182434][ T8088] ? find_held_lock+0x2b/0x80 [ 359.187121][ T8088] check_prev_add+0xeb/0xe60 [ 359.191708][ T8088] ? rcu_is_watching+0x13/0xc0 [ 359.196476][ T8088] __lock_acquire+0x1528/0x1f40 [ 359.201338][ T8088] lock_acquire+0x1d1/0x380 [ 359.205841][ T8088] ? l2cap_chan_connect+0xac/0x2110 [ 359.211050][ T8088] ? __pfx___might_resched+0x10/0x10 [ 359.216331][ T8088] __mutex_lock+0x1a4/0x1bd0 [ 359.220917][ T8088] ? l2cap_chan_connect+0xac/0x2110 [ 359.226117][ T8088] ? l2cap_chan_connect+0xac/0x2110 [ 359.231317][ T8088] ? preempt_schedule_thunk+0x16/0x40 [ 359.236692][ T8088] ? __pfx___mutex_lock+0x10/0x10 [ 359.241710][ T8088] ? _raw_read_unlock+0x3e/0x50 [ 359.246552][ T8088] ? hci_get_route+0x368/0x520 [ 359.251318][ T8088] ? __pfx_hci_get_route+0x10/0x10 [ 359.256433][ T8088] ? irqentry_exit+0x24d/0xa10 [ 359.261201][ T8088] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.266393][ T8088] ? irqentry_exit+0x24d/0xa10 [ 359.271154][ T8088] ? l2cap_chan_connect+0xac/0x2110 [ 359.276354][ T8088] l2cap_chan_connect+0xac/0x2110 [ 359.281389][ T8088] l2cap_sock_connect+0x37a/0x770 [ 359.286409][ T8088] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 359.291949][ T8088] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.297757][ T8088] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 359.303559][ T8088] kernel_connect+0x107/0x160 [ 359.308240][ T8088] ? __pfx_kernel_connect+0x10/0x10 [ 359.313449][ T8088] ? timer_init_key+0x150/0x310 [ 359.318306][ T8088] rfcomm_dlc_open+0x838/0xac0 [ 359.323068][ T8088] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 359.328345][ T8088] ? rfcomm_sock_connect+0x3e8/0x690 [ 359.333626][ T8088] ? find_held_lock+0x2b/0x80 [ 359.338302][ T8088] ? rfcomm_sock_connect+0x3e8/0x690 [ 359.343584][ T8088] ? __local_bh_enable_ip+0xa5/0x120 [ 359.348870][ T8088] rfcomm_sock_connect+0x42c/0x690 [ 359.353992][ T8088] __sys_connect_file+0x146/0x1a0 [ 359.359018][ T8088] __sys_connect+0x141/0x170 [ 359.363610][ T8088] ? __pfx___sys_connect+0x10/0x10 [ 359.368728][ T8088] __x64_sys_connect+0x72/0xb0 [ 359.373488][ T8088] ? lockdep_hardirqs_on+0x7d/0x110 [ 359.378680][ T8088] do_syscall_64+0x123/0x790 [ 359.383280][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.389167][ T8088] RIP: 0033:0x7f017b19e159 [ 359.393572][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.413174][ T8088] RSP: 002b:00007f017c089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 359.421587][ T8088] RAX: ffffffffffffffda RBX: 00007f017b426090 RCX: 00007f017b19e159 [ 359.429553][ T8088] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000007 [ 359.437517][ T8088] RBP: 00007f017b23506b R08: 0000000000000000 R09: 0000000000000000 [ 359.445481][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.453442][ T8088] R13: 00007f017b426128 R14: 00007f017b426090 R15: 00007ffec1195fa8 [ 359.461423][ T8088] [ 359.500309][ T5702] usb 6-1: config 0 descriptor?? [ 359.585148][ T191] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 359.588368][ T191] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.588425][ T191] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.588479][ T191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 359.588565][ T191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.646855][ T191] usb 5-1: config 0 descriptor?? [ 359.918543][ T5607] Bluetooth: hci5: adv larger than maximum supported [ 360.063348][ T191] usbhid 5-1:0.0: can't add hid device: -71 [ 360.063429][ T191] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 360.066354][ T191] usb 5-1: USB disconnect, device number 9 [ 360.119966][ T5702] uclogic 0003:145F:0212.0003: pen parameters not found [ 360.119986][ T5702] uclogic 0003:145F:0212.0003: interface is invalid, ignoring [ 360.332637][ T5815] usb 6-1: USB disconnect, device number 5 [ 361.602897][ T5607] Bluetooth: hci4: command 0x0406 tx timeout [ 363.681288][ T30] audit: type=1400 audit(1791075260.068:925): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=36198 daddr=10.128.1.81 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1