last executing test programs: 6m45.689273007s ago: executing program 32 (id=554): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000049c0)={0x2020, 0x0, 0x0}, 0xfffffead) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004300)={0x18, 0x0, 0x7, {0xb3ac}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x1, 0x1, 0xfff, 0x5, 0x5, 0x3}) close(r0) 4m1.384515635s ago: executing program 0 (id=1365): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 4m0.93846342s ago: executing program 0 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) 3m59.936647244s ago: executing program 0 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x9}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3m58.375575491s ago: executing program 0 (id=1378): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 3m56.893679764s ago: executing program 0 (id=1384): r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) listen(r0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 3m51.261061431s ago: executing program 0 (id=1405): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 3m36.20161s ago: executing program 33 (id=1405): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0xbc38, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1819, 0x0, 0x1, 0x8002ad, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x800102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x1000, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x1, 0x46a, 0x0, 0x0}}, 0x0) 3m13.403490319s ago: executing program 1 (id=1538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x5}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfaeccc0edd389ee1}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 3m11.611032305s ago: executing program 1 (id=1546): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401) 3m8.616892746s ago: executing program 1 (id=1555): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3m1.08799096s ago: executing program 1 (id=1579): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) syz_open_dev$dvb_dvr(0x0, 0x0, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) 3m0.682465214s ago: executing program 1 (id=1584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r2, 0x0, 0x8010) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0xa23, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 3m0.472104056s ago: executing program 1 (id=1585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80000003) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) 3m0.147219353s ago: executing program 34 (id=1585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80000003) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) 2m2.909983909s ago: executing program 4 (id=1762): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x48802) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000206030000000000000000000c"], 0x44}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'vxcan1\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0x0, 0xafea, 0x3ff, 0x3, 0x200, 0x4, 0x3d, 0x29}}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0x10000a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r4, 0x4004480d, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.273306053s ago: executing program 4 (id=1769): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, 0x0) 2m1.099318079s ago: executing program 4 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 2m0.916123263s ago: executing program 4 (id=1772): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000280)={0xbd2, "2317afad00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) readv(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)=""/152, 0x98}], 0x2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20040880) 2m0.825662743s ago: executing program 4 (id=1774): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x7a3101, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) 1m59.722613934s ago: executing program 4 (id=1776): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0}, {0x0, 0x0, 0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000006480)=[{0x0, 0x1, 0x0}], 0x1) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4, 0x880b, 0x0, 0x20}, {}, {}, {0x8, 0x88be, 0x4}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 1m43.910858796s ago: executing program 35 (id=1776): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0}, {0x0, 0x0, 0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000006480)=[{0x0, 0x1, 0x0}], 0x1) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4, 0x880b, 0x0, 0x20}, {}, {}, {0x8, 0x88be, 0x4}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 1m35.750261971s ago: executing program 2 (id=1835): socket$inet6_sctp(0xa, 0x5, 0x84) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc004aeba, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r7 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, 0x0, 0x0) 1m32.923649733s ago: executing program 2 (id=1839): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=ANY=[@ANYBLOB="34000000180000012dbd7000000000000200007e00000000000000000600150006000000100016800c00018008000100", @ANYRES32, @ANYBLOB="2dd503f07612c4f512341f567874753d9caaec0dd7b76354eb37eab941df248723128714faf809d0bf3486d516e2c520d929a5217781a57fa14a94b0c544697d211067c99073fa65e4f944ca2e54e060695c5055985ca3c96a8a68213057e3c9646708a70934d5e5920cc554d2285b2115a0e837dbc1f00d59c9258b5ef0d0c6f01e2c726a0f8f6051506dcce4fa6afd72a935af18ff84b423bd92671bc3edbe76cd4f7dc91e9105de659ffd38789b443191e1d3f3ceabe7e59058a2"], 0x34}}, 0x20000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) r4 = socket$inet6(0xa, 0x3, 0x101) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xffff}]}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 1m32.360226671s ago: executing program 2 (id=1842): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800), 0x0, 0x880, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x4f7, 0x1, 0x2be92edb, 0x676b, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x800, 0x14, 0xb28, 0x0, 0x76, r4}) syz_open_procfs(0x0, 0x0) close(0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) 1m31.988606787s ago: executing program 2 (id=1844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1m30.273940972s ago: executing program 2 (id=1849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) open$dir(0x0, 0x680442, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) exit(0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m29.276028424s ago: executing program 2 (id=1852): socket$alg(0x26, 0x5, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() sync() sync() sync() listen(0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) socket$inet6(0xa, 0x80003, 0xff) close(0x3) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x18181, 0x0) 1m14.069143619s ago: executing program 36 (id=1852): socket$alg(0x26, 0x5, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) sync() sync() sync() sync() listen(0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x3}, 0x2) socket$inet6(0xa, 0x80003, 0xff) close(0x3) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x18181, 0x0) 1m0.23838876s ago: executing program 5 (id=1911): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0xa, 0x3, 0x34343459, 0x3, 0x7, [{0x6, 0x800007}, {0x8, 0x2}, {0xa0000, 0xd}, {0x8, 0x4e3}, {0x800, 0x4}, {0x7fff, 0x8}, {0x8, 0x9}, {0x2, 0x100}], 0x8, 0x0, 0x1, 0x1, 0xc8e3b4378760c0f1}}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1d0000001946ebf7f23f08dffbdbdfd6226a8c7eec2d2c251c1c6304fe03000200320000"], 0x1c}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000\"N000000000100000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) 1m0.107248089s ago: executing program 5 (id=1912): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff0000000000000200000908000340f500000a0900010073797a30000000000c0006400000000000000002"], 0x70}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000303400a1af3c996c00802c910f48af66"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 58.421074951s ago: executing program 5 (id=1916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000180)={0xe, 0xb9f}, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) 57.410211791s ago: executing program 5 (id=1920): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/91, 0x5b, 0xc82) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56.406910417s ago: executing program 5 (id=1923): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) unshare(0x22020600) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet6(r1, &(0x7f0000000040)=""/62, 0x3e, 0x0, 0x0, 0x0) 55.4658789s ago: executing program 5 (id=1927): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 40.114151802s ago: executing program 37 (id=1927): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x3) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 19.759910595s ago: executing program 8 (id=2002): syz_io_uring_setup(0x7b67, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0xb) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830"], 0x48}}, 0x48000) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 17.797661545s ago: executing program 8 (id=2007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 16.565109674s ago: executing program 8 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000001c0)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x2, 0x1, "9e4309", 0x2e, 0x13}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x65}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000004800010029bd", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) landlock_create_ruleset(&(0x7f0000000200)={0x9104, 0x1, 0x1, 0x110, 0x2, 0xf4443a6faa7b022c}, 0x30, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 14.984982896s ago: executing program 9 (id=2012): bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8000) recvmsg$qrtr(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x0, 0x2000}, 0x1c, 0x0) recvmsg$qrtr(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x20}, 0x38, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 13.951383337s ago: executing program 6 (id=2022): write$nci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() r1 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) rseq(0x0, 0x0, 0x1, 0x0) syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@hyper}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x7d, 0x0, 0x3, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xdfffffffffffffff, 0x9, 0x100000, 0xa, 0x80000006, 0x3ff}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13.863833928s ago: executing program 9 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xec, 0x2, 0x7, 0x140, 0x1, 0x10000}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 12.016433819s ago: executing program 8 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d7, 0x0) shmctl$IPC_RMID(0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 11.100029868s ago: executing program 7 (id=2017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_generic(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041004}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffdfff8, r0}, 0x38) 11.049562319s ago: executing program 6 (id=2018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x3d, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)=0x0) timer_settime(r3, 0x0, &(0x7f0000000c40)={{}, {0x77359400}}, &(0x7f0000000c80)) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x80, 0x17, 0x0, 0x5}) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='ntfs3\x00', 0x0, &(0x7f00000001c0)='acl') 10.898649126s ago: executing program 8 (id=2019): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x1c}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 10.863794632s ago: executing program 3 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/166, 0xa6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 9.713677944s ago: executing program 9 (id=2021): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) 9.646128866s ago: executing program 3 (id=2023): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r0 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 9.645348235s ago: executing program 8 (id=2024): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000200)={0x72be92819639f682, 0xb9cd8224dab94072}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_clone3(0x0, 0x0) syz_clone3(0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaacdaafad1e048716e08060001080006040001bbbbbbbbbbd08cca700114afc8fc925fac"], 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) landlock_restrict_self(r1, 0x9) 9.638780699s ago: executing program 7 (id=2025): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xc, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 8.883808491s ago: executing program 7 (id=2026): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getpid() add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 8.638822306s ago: executing program 6 (id=2027): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x23, 0x5, 0x0) listen(r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) 8.637905007s ago: executing program 9 (id=2028): syz_open_dev$vcsa(0x0, 0x1, 0x102) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x105}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r1, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r2, r3, 0x0, 0xffffffff) open(&(0x7f00000000c0)='.\x00', 0x80, 0x1b4) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000240)={0xd4, 0x0, 0x1}) 8.464173111s ago: executing program 3 (id=2029): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.476841256s ago: executing program 6 (id=2030): sched_setscheduler(0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000005c0)=0xd) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 5.155483495s ago: executing program 3 (id=2031): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, r1, {0x9, 0x3ff}, {0xf, 0x41}, 0xfffd, [0xde99, 0x8e9, 0x9, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x2, 0xfffffffffffffffd, 0x8, 0x8, 0x2]}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x6, 0x6, [0x1, 0x9, 0x0, 0x900, 0x3, 0x2]}, 0x14) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x100, 0x100) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3", 0x60}, {&(0x7f00000005c0)="f2b314c9", 0x4}], 0x2}}], 0x1, 0x0) finit_module(r5, 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'team0\x00', 0xa}) 4.183988287s ago: executing program 9 (id=2032): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x5, 0x0) 3.890767109s ago: executing program 7 (id=2033): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) syz_open_dev$dri(0x0, 0x1, 0x294460) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff034}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2.959199848s ago: executing program 3 (id=2034): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00') sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x14, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x4e}]}, 0x14}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, 0x0) 1.760299022s ago: executing program 7 (id=2035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/166, 0xa6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 1.756369222s ago: executing program 6 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4c4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 1.563886459s ago: executing program 3 (id=2036): syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x5, 0x6}, {0x7f, 0x8001, [0x0]}}}}, 0x13) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 781.890779ms ago: executing program 7 (id=2037): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="2b7eeb962285"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[@ANYBLOB="020300061000000000070000000000000600090018010000ce45b8add73fd52f35e21bf163fe477120a04a0ecc43159711ad42393cb41d796061718cf0e6000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x80}, 0x1, 0x7}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x4, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, 0x0, 0x0) getrlimit(0x1, &(0x7f0000000000)) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x1c3200) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000440)={r5, 0x0, {0x0, 0x0, 0x0, 0xe08, 0xfff, 0x0, 0x0, 0x7, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) 546.898174ms ago: executing program 6 (id=2038): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xfff2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x3, [{0x0, 0x7fff, 0x4, 0x1}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 0s ago: executing program 9 (id=2039): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000001600)=""/102400, 0x19000) kernel console output (not intermixed with test programs): vice found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 306.850796][ T8501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.870118][ T8501] usb 6-1: config 0 descriptor?? [ 307.062718][ T5728] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 307.462648][ T5728] usb 2-1: Using ep0 maxpacket: 32 [ 307.476341][ T5728] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 307.486059][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.504663][ T5728] usb 2-1: config 0 descriptor?? [ 307.540638][ T5728] as10x_usb: device has been detected [ 307.559175][ T5728] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 307.715175][ T5728] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 307.735947][ T8501] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.0009/input/input8 [ 307.819243][ T30] audit: type=1400 audit(1782827837.062:1022): avc: denied { append } for pid=9965 comm="syz.5.1219" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.018750][ T30] audit: type=1400 audit(1782827837.232:1023): avc: denied { firmware_load } for pid=5728 comm="kworker/1:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 308.043265][ T5728] as10x_usb: error during firmware upload part1 [ 308.074747][ T5728] Registered device nBox DVB-T Dongle [ 308.096835][ T5728] usb 2-1: USB disconnect, device number 21 [ 308.158078][ T5728] Unregistered device nBox DVB-T Dongle [ 308.164628][ T5728] as10x_usb: device has been disconnected [ 308.296378][ T30] audit: type=1400 audit(1782827837.542:1024): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=2960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.333408][ T8501] holtek_kbd 0003:04D9:A055.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 308.386069][ T30] audit: type=1400 audit(1782827837.542:1025): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2960 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.422376][ T8501] usb 6-1: USB disconnect, device number 6 [ 308.482999][ T30] audit: type=1400 audit(1782827837.542:1026): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2960 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.676048][ T9998] fido_id[9998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 308.858557][T10006] netlink: 'syz.4.1230': attribute type 1 has an invalid length. [ 308.942230][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1230'. [ 308.959757][T10006] bond7: entered promiscuous mode [ 308.996238][T10006] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.047355][T10010] bond7: entered allmulticast mode [ 309.235197][T10006] bond7: (slave bridge4): making interface the new active one [ 309.252093][T10006] bridge4: entered promiscuous mode [ 309.267197][T10006] bridge4: entered allmulticast mode [ 309.303038][T10006] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 309.744817][ T30] audit: type=1400 audit(1782827838.992:1027): avc: denied { write } for pid=10021 comm="syz.1.1236" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.261317][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 310.301516][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 310.543237][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 310.552552][T10033] vlan3: entered allmulticast mode [ 310.552640][T10033] dummy0: entered allmulticast mode [ 310.585198][T10044] netlink: 'syz.2.1240': attribute type 5 has an invalid length. [ 311.027969][ T30] audit: type=1400 audit(1782827840.262:1028): avc: denied { map } for pid=10047 comm="syz.1.1242" path="socket:[28126]" dev="sockfs" ino=28126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 311.577217][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.584031][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.595008][ T30] audit: type=1400 audit(1782827840.812:1029): avc: denied { egress } for pid=10048 comm="syz.2.1243" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 311.938929][T10033] bridge0: port 3(vlan3) entered blocking state [ 311.945622][T10033] bridge0: port 3(vlan3) entered disabled state [ 312.010209][ T30] audit: type=1400 audit(1782827840.812:1030): avc: denied { sendto } for pid=10048 comm="syz.2.1243" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 312.200920][T10033] vlan3: entered promiscuous mode [ 312.819147][T10082] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1252'. [ 312.843968][ T30] audit: type=1400 audit(1782827842.092:1031): avc: denied { name_bind 0x1000000 } for pid=10081 comm="syz.5.1252" path="socket:[28162]" dev="sockfs" ino=28162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.890346][ T30] audit: type=1400 audit(1782827842.092:1032): avc: denied { read } for pid=10081 comm="syz.5.1252" path="socket:[28161]" dev="sockfs" ino=28161 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 313.894199][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1256'. [ 314.530689][ T5864] batadv1: left promiscuous mode [ 314.830048][T10078] fuse: fd is not a fuse device [ 315.064679][ T30] audit: type=1400 audit(1782827844.312:1033): avc: denied { mounton } for pid=10111 comm="syz.1.1260" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 315.171268][T10118] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 315.180847][T10118] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 315.362565][ T5714] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 315.523381][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 315.548631][ T5714] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 315.585023][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.599239][ T5714] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 315.630744][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.657995][ T5714] usb 2-1: config 0 descriptor?? [ 316.629000][ T5714] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 316.752204][T10140] futex_wake_op: syz.4.1268 tries to shift op by 144; fix this program [ 317.126129][ T5714] corsair-cpro 0003:1B1C:0C10.000A: probe with driver corsair-cpro failed with error -110 [ 317.713459][T10153] xt_SECMARK: invalid mode: 2 [ 318.132044][ T5714] usb 2-1: USB disconnect, device number 22 [ 319.597737][T10160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.306507][T10169] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.597651][T10177] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.458484][T10169] bond4: (slave lo): Enslaving as an active interface with an up link [ 321.542814][T10169] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 323.640015][T10195] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1281'. [ 323.649418][T10195] ksmbd: Unknown IPC event: 4, ignore. [ 324.474255][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 324.483280][T10214] tipc: Enabling of bearer rejected, media not registered [ 324.658420][ T30] audit: type=1400 audit(1782827853.902:1034): avc: denied { create } for pid=10221 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.681608][ T30] audit: type=1400 audit(1782827853.932:1035): avc: denied { bind } for pid=10221 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.414461][ T30] audit: type=1400 audit(1782827854.622:1036): avc: denied { setopt } for pid=10221 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 325.587447][ T30] audit: type=1400 audit(1782827854.622:1037): avc: denied { write } for pid=10221 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.462513][ T30] audit: type=1400 audit(1782827855.692:1038): avc: denied { mount } for pid=10241 comm="syz.2.1294" name="/" dev="rpc_pipefs" ino=29122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 326.995076][T10256] 9p: Bad value for 'rfdno' [ 328.510894][T10280] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 328.681920][T10284] syz_tun: entered allmulticast mode [ 328.731052][T10283] syz_tun: left allmulticast mode [ 329.563284][ T8501] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 329.792812][ T8501] usb 3-1: Using ep0 maxpacket: 8 [ 329.812830][ T8501] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.852711][ T8501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.031508][ T8501] usb 3-1: Product: syz [ 330.048883][ T8501] usb 3-1: Manufacturer: syz [ 330.064464][ T8501] usb 3-1: SerialNumber: syz [ 330.079685][ T8501] usb 3-1: config 0 descriptor?? [ 330.098113][T10310] overlayfs: failed to clone upperpath [ 330.292294][ T8501] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 332.702268][ T8501] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 332.752277][ T8501] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 332.793763][ T8501] usb 3-1: media controller created [ 332.840977][ T8501] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.063806][ T50] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 333.067935][T10331] netlink: 'syz.1.1320': attribute type 10 has an invalid length. [ 333.122791][T10332] netlink: 'syz.1.1320': attribute type 10 has an invalid length. [ 333.134326][ T8501] i2c i2c-1: Added multiplexed i2c bus 2 [ 333.152166][ T8501] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 333.178252][ T50] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 333.181919][T10332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.198757][ T8501] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 333.223750][ T8501] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 333.251694][T10332] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 333.418097][T10331] bond0: (slave netdevsim1): Releasing backup interface [ 333.904387][T10331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.913123][T10331] team0: Port device netdevsim1 added [ 333.934049][ T8501] DVB: Unable to find symbol fc0013_attach() [ 334.164001][ T8501] usb 3-1: USB disconnect, device number 13 [ 334.244803][T10342] openvswitch: netlink: IP tunnel dst address not specified [ 334.766171][T10352] bond3: option mode: unable to set because the bond device has slaves [ 334.776150][T10348] syzkaller0: entered promiscuous mode [ 334.782528][T10348] syzkaller0: entered allmulticast mode [ 334.812543][T10352] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 334.953196][T10352] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 334.987797][T10354] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 334.998050][T10356] bridge_slave_0: left allmulticast mode [ 335.007583][T10356] bridge_slave_0: left promiscuous mode [ 335.015930][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.035872][T10356] bridge_slave_1: left allmulticast mode [ 335.045040][T10356] bridge_slave_1: left promiscuous mode [ 335.051771][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.063774][T10356] bond0: (slave bond_slave_0): Releasing backup interface [ 335.074735][T10356] bond0: (slave bond_slave_1): Releasing backup interface [ 335.084839][T10356] team0: Port device team_slave_0 removed [ 335.092226][T10356] team0: Port device team_slave_1 removed [ 335.100908][T10356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.244499][T10356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.270243][T10356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 335.757001][T10357] team0: Port device xfrm0 added [ 335.762152][T10358] tipc: Started in network mode [ 335.767730][T10358] tipc: Node identity 06b4bec20f79, cluster identity 4711 [ 335.779386][T10358] tipc: Enabled bearer , priority 0 [ 336.318334][T10376] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 336.344555][T10376] CIFS mount error: No usable UNC path provided in device string! [ 336.344555][T10376] [ 336.354858][T10376] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 336.914416][ T5721] tipc: Node number set to 164478658 [ 337.000881][ T30] audit: type=1326 audit(1782827866.242:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 337.122536][ T30] audit: type=1326 audit(1782827866.282:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 337.234635][ T30] audit: type=1326 audit(1782827866.282:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 337.302046][ T30] audit: type=1326 audit(1782827866.282:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 337.334183][ T30] audit: type=1326 audit(1782827866.282:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 337.487025][ T30] audit: type=1326 audit(1782827866.332:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1c555d68e code=0x7ffc0000 [ 337.537655][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.565109][ T30] audit: type=1326 audit(1782827866.332:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1c555d68e code=0x7ffc0000 [ 337.884595][ T30] audit: type=1326 audit(1782827866.332:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1c555d68e code=0x7ffc0000 [ 338.233609][ T30] audit: type=1326 audit(1782827866.332:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1c555d68e code=0x7ffc0000 [ 338.401442][ T30] audit: type=1326 audit(1782827866.332:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.2.1330" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1c555d68e code=0x7ffc0000 [ 338.506970][T10415] syzkaller0: entered promiscuous mode [ 338.513059][T10415] syzkaller0: entered allmulticast mode [ 342.140471][T10447] x_tables: duplicate underflow at hook 1 [ 342.256238][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 342.360114][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 343.838899][T10516] netlink: 'syz.1.1371': attribute type 12 has an invalid length. [ 343.879828][T10516] lo: Caught tx_queue_len zero misconfig [ 343.889457][T10516] sch_tbf: burst 0 is lower than device lo mtu (123) ! [ 344.832515][ T8501] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 345.036864][ T8501] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.058063][ T8501] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 345.120309][ T8501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.371324][ T8501] usb 3-1: config 0 descriptor?? [ 345.912027][ T5714] usb 3-1: USB disconnect, device number 14 [ 346.547931][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 346.547943][ T30] audit: type=1400 audit(1782827875.792:1093): avc: denied { setopt } for pid=10550 comm="syz.1.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.666917][ T30] audit: type=1400 audit(1782827875.912:1094): avc: denied { mounton } for pid=10552 comm="syz.1.1382" path="/file0" dev="ramfs" ino=29442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 346.700206][T10553] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 346.713661][T10553] overlayfs: failed to set xattr on upper [ 346.722621][T10553] overlayfs: ...falling back to redirect_dir=nofollow. [ 346.729543][T10553] overlayfs: ...falling back to index=off. [ 346.735502][T10553] overlayfs: ...falling back to uuid=null. [ 346.741355][T10553] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 348.961329][ T30] audit: type=1400 audit(1782827878.202:1095): avc: denied { listen } for pid=10574 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 348.983567][ T30] audit: type=1400 audit(1782827878.232:1096): avc: denied { accept } for pid=10574 comm="syz.0.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.117922][T10580] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 349.159575][T10580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.660525][T10580] vlan2: entered allmulticast mode [ 349.674323][T10580] bond2: entered allmulticast mode [ 349.716478][T10580] bond2: (slave geneve2): making interface the new active one [ 349.728165][T10580] geneve2: entered allmulticast mode [ 349.954838][T10580] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 350.028066][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.164655][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.204380][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.244462][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.570143][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1406'. [ 353.612599][ T30] audit: type=1400 audit(1782827882.852:1097): avc: denied { append } for pid=10638 comm="syz.5.1410" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 353.715328][ T30] audit: type=1400 audit(1782827882.882:1098): avc: denied { open } for pid=10638 comm="syz.5.1410" path="/144/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 354.695528][T10631] kexec: Could not allocate control_code_buffer [ 357.742007][ T30] audit: type=1400 audit(1782827886.982:1099): avc: denied { read } for pid=10666 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 360.010368][ T30] audit: type=1400 audit(1782827889.032:1100): avc: denied { getopt } for pid=10683 comm="syz.2.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.274910][ T30] audit: type=1400 audit(1782827889.522:1101): avc: denied { read } for pid=10690 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.629804][T10698] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1425'. [ 360.682782][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1425'. [ 360.748609][T10698] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1425'. [ 360.813944][ T30] audit: type=1400 audit(1782827890.052:1102): avc: denied { recv } for pid=10690 comm="syz.2.1426" saddr=10.128.0.169 src=49118 daddr=10.128.1.31 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 362.294198][ T30] audit: type=1400 audit(1782827891.512:1103): avc: denied { connect } for pid=10705 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 365.433359][ T30] audit: type=1400 audit(1782827894.682:1104): avc: denied { connect } for pid=10745 comm="syz.5.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 366.813876][T10770] fuse: Bad value for 'fd' [ 366.894757][ T30] audit: type=1400 audit(1782827896.102:1105): avc: denied { name_bind } for pid=10768 comm="syz.1.1444" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 367.055322][ T30] audit: type=1400 audit(1782827896.292:1106): avc: denied { ioctl } for pid=10771 comm="syz.4.1446" path="socket:[30369]" dev="sockfs" ino=30369 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 367.761790][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.773663][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.787004][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.795278][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.810241][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.888360][ T5617] Bluetooth: hci0: command tx timeout [ 370.322551][ T30] audit: type=1400 audit(1782827899.562:1107): avc: denied { bind } for pid=10829 comm="syz.4.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.002514][ T5617] Bluetooth: hci0: command tx timeout [ 372.437376][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.459898][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.479694][T10782] bridge_slave_0: entered allmulticast mode [ 372.504609][T10782] bridge_slave_0: entered promiscuous mode [ 372.544773][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.574809][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.602033][T10782] bridge_slave_1: entered allmulticast mode [ 372.629516][T10782] bridge_slave_1: entered promiscuous mode [ 372.786692][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.834683][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.969458][T10782] team0: Port device team_slave_0 added [ 372.990997][ T30] audit: type=1326 audit(1782827902.232:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239ce59 code=0x7ffc0000 [ 373.027234][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.033719][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.144744][T10782] team0: Port device team_slave_1 added [ 373.633700][ T30] audit: type=1326 audit(1782827902.232:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239ce59 code=0x7ffc0000 [ 373.700859][ T30] audit: type=1326 audit(1782827902.232:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5239ce59 code=0x7ffc0000 [ 373.767517][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.792570][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.832816][ T30] audit: type=1326 audit(1782827902.262:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbb5239ce59 code=0x7ffc0000 [ 373.868115][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.892571][ T30] audit: type=1326 audit(1782827902.382:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 373.921688][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.943327][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.010882][ T30] audit: type=1326 audit(1782827902.382:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 374.045293][ T5617] Bluetooth: hci0: command tx timeout [ 374.050874][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.073455][ T30] audit: type=1326 audit(1782827902.382:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 374.131956][ T30] audit: type=1326 audit(1782827902.382:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 374.172285][T10894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.637462][ T30] audit: type=1326 audit(1782827902.382:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 374.668376][T10894] bond2: (slave macvlan2): making interface the new active one [ 374.676926][T10894] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 375.190910][ T30] audit: type=1326 audit(1782827902.382:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10874 comm="syz.4.1471" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb5235d68e code=0x7ffc0000 [ 375.288872][ T8501] bond_slave_0: entered promiscuous mode [ 375.295964][ T8501] bond_slave_1: entered promiscuous mode [ 375.408430][T10782] hsr_slave_0: entered promiscuous mode [ 375.448641][T10782] hsr_slave_1: entered promiscuous mode [ 375.481765][T10782] debugfs: 'hsr0' already exists in 'hsr' [ 375.620434][T10782] Cannot create hsr debugfs directory [ 376.122519][ T5617] Bluetooth: hci0: command tx timeout [ 376.786161][T10931] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 376.920537][T10931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.048153][T10934] bond5: (slave veth7): Enslaving as an active interface with a down link [ 377.578055][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.599419][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.669756][T10935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.690822][T10935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.706453][T10935] veth1_vlan: left promiscuous mode [ 377.713238][T10935] veth0_vlan: left promiscuous mode [ 377.720941][T10935] veth0_vlan: entered promiscuous mode [ 377.728542][T10935] veth1_vlan: entered promiscuous mode [ 377.738514][T10935] veth1_macvtap: left promiscuous mode [ 377.746236][T10935] veth0_macvtap: left promiscuous mode [ 377.807178][T10935] veth0_macvtap: entered promiscuous mode [ 377.824920][T10935] veth1_macvtap: entered promiscuous mode [ 377.838559][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.853769][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.862571][T10935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.905831][T10935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.918493][T10935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.942684][T10935] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 377.977142][T10935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.989129][T10935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 378.035423][T10931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.117212][T10931] bond5: (slave batadv0): making interface the new active one [ 378.128622][T10931] batadv0: entered promiscuous mode [ 378.135285][T10931] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 378.149980][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.157136][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.570740][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.578042][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.656591][ T6020] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 378.674820][ T6020] bond1: (slave veth3): making interface the new active one [ 378.694374][ T6020] bond1: active interface up! [ 378.756287][T10945] batman_adv: batadv0: Adding interface: macvtap1 [ 378.766565][T10945] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.818003][T10945] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 379.325723][T10947] batman_adv: batadv0: Removing interface: macvtap1 [ 379.345040][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.384718][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.413543][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.449268][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 379.449285][ T30] audit: type=1400 audit(1782827908.692:1179): avc: denied { set_context_mgr } for pid=10965 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 379.491169][T10967] binder_alloc: 10965: pid 10965 spamming oneway? 1 buffers allocated for a total size of 4096 [ 379.502987][T10967] binder_alloc: 10965: pid 10965 spamming oneway? 2 buffers allocated for a total size of 5120 [ 379.529360][T10782] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 379.536571][ T30] audit: type=1400 audit(1782827908.732:1180): avc: denied { call } for pid=10965 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 379.591142][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.632280][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.675483][T10966] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 379.812112][T10782] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.181072][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.189259][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 380.320683][T10782] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.366199][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.390930][T10782] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.409176][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.436648][ T5858] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 380.584347][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 380.767022][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 380.829246][ T9] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.964292][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.025043][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 381.043424][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.070824][ T147] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 381.081699][ T9] usb 2-1: config 0 descriptor?? [ 381.351158][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.387054][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.447576][ T6020] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.454771][ T6020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.517657][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.524773][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.544662][ T9] belkin 0003:050D:3201.000B: global environment stack underflow [ 381.779253][T10985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.866067][T10985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.960245][ T9] belkin 0003:050D:3201.000B: item 0 4 1 11 parsing failed [ 381.981602][ T9] belkin 0003:050D:3201.000B: parse failed [ 381.988325][T10985] SELinux: syz.1.1500 (10985) wrote to user. This is no longer supported. [ 381.995416][ T9] belkin 0003:050D:3201.000B: probe with driver belkin failed with error -22 [ 382.069606][ T5714] usb 2-1: USB disconnect, device number 23 [ 382.312340][T11010] tipc: Enabling of bearer rejected, failed to enable media [ 383.229311][T10782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.613358][T11043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1510'. [ 383.781780][T11049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.394786][T10782] veth0_vlan: entered promiscuous mode [ 384.411497][T10782] veth1_vlan: entered promiscuous mode [ 384.483502][ T5721] IPVS: starting estimator thread 0... [ 384.542231][T10782] veth0_macvtap: entered promiscuous mode [ 384.702655][T11060] IPVS: using max 74 ests per chain, 177600 per kthread [ 384.724876][T10782] veth1_macvtap: entered promiscuous mode [ 384.748251][T10782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.398403][T11071] kthread_run failed with err -4 [ 385.416310][T10782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.487243][ T147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.512282][ T147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.571060][ T5854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.611467][ T5854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.661470][T11081] syzkaller0: entered promiscuous mode [ 385.673181][T11081] syzkaller0: entered allmulticast mode [ 386.026826][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.068622][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.217824][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.231629][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.392828][ T8501] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 386.573764][ T8501] usb 2-1: Using ep0 maxpacket: 16 [ 386.953948][ T8501] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 386.983073][ T8501] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.015710][ T8501] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.051444][ T8501] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.079497][ T8501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.093477][ T8501] usb 2-1: Product: syz [ 387.105964][ T8501] usb 2-1: Manufacturer: syz [ 387.116962][ T8501] usb 2-1: SerialNumber: syz [ 387.229274][ T8501] usb 2-1: 0:2 : does not exist [ 387.890748][ T8501] usb 2-1: USB disconnect, device number 24 [ 388.747844][T11110] syzkaller0: entered promiscuous mode [ 388.771261][T11110] syzkaller0: entered allmulticast mode [ 388.967910][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.334142][ T30] audit: type=1400 audit(1782827920.552:1181): avc: denied { create } for pid=11134 comm="syz.6.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 391.464278][T11139] syzkaller0: entered promiscuous mode [ 391.480114][T11139] syzkaller0: entered allmulticast mode [ 391.573849][ T8501] libceph: connect (1)[c::]:6789 error -101 [ 391.626957][ T8501] libceph: mon0 (1)[c::]:6789 connect error [ 391.652477][T11143] ceph: No mds server is up or the cluster is laggy [ 392.251418][ T5855] batadv0: left promiscuous mode [ 394.237518][T11177] dummy0: left promiscuous mode [ 394.400444][T11177] batman_adv: batadv0: Adding interface: dummy0 [ 394.429896][T11177] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.498776][T11177] batman_adv: batadv0: Interface activated: dummy0 [ 394.600325][T11179] batadv0: mtu less than device minimum [ 394.609077][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.622039][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.633330][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.644134][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.654958][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.665744][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.676535][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.687348][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.698141][T11179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.236621][T11198] syzkaller0: entered promiscuous mode [ 395.264292][T11198] syzkaller0: entered allmulticast mode [ 395.569087][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 396.281600][ T30] audit: type=1400 audit(1782827925.522:1182): avc: denied { name_bind } for pid=11206 comm="syz.5.1557" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 396.349927][ T30] audit: type=1326 audit(1782827925.592:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.395425][ T30] audit: type=1326 audit(1782827925.622:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.423743][ T30] audit: type=1326 audit(1782827925.622:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.552962][ T30] audit: type=1326 audit(1782827925.622:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.580301][ T30] audit: type=1326 audit(1782827925.622:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.610263][ T30] audit: type=1326 audit(1782827925.622:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 396.652051][ T30] audit: type=1326 audit(1782827925.622:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 397.095351][ T30] audit: type=1326 audit(1782827925.622:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 397.133982][ T30] audit: type=1326 audit(1782827925.622:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 397.161854][ T30] audit: type=1326 audit(1782827925.622:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.5.1559" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f119ce59 code=0x7ffc0000 [ 400.951197][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'. [ 402.852031][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 402.852045][ T30] audit: type=1400 audit(1782827932.092:1276): avc: denied { read } for pid=11281 comm="syz.6.1581" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.885893][ T30] audit: type=1400 audit(1782827932.092:1277): avc: denied { open } for pid=11281 comm="syz.6.1581" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.910234][ T30] audit: type=1400 audit(1782827932.132:1278): avc: denied { ioctl } for pid=11281 comm="syz.6.1581" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 403.142481][ T8478] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 403.348657][ T8478] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.381181][ T8478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 403.416965][ T8478] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 403.449572][ T8478] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 403.534759][ T8478] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.550234][ T8478] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.566907][ T8478] usb 7-1: Manufacturer: syz [ 403.582690][ T8478] usb 7-1: config 0 descriptor?? [ 403.944414][ T8478] rc_core: IR keymap rc-hauppauge not found [ 403.973883][ T8478] Registered IR keymap rc-empty [ 404.025855][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.034210][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.049240][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.070697][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.079200][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.092828][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.094482][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.199499][ T8478] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 404.277654][ T8478] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 404.361819][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.427269][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.483730][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.530973][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.586415][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.611516][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 404.635332][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.684783][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.733195][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.773909][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.903921][ T8478] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 404.935136][ T8478] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 405.466364][ T8478] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 405.662514][ T8478] usb 7-1: USB disconnect, device number 2 [ 405.927145][T11333] netlink: 'syz.4.1593': attribute type 28 has an invalid length. [ 405.935040][T11333] netlink: 'syz.4.1593': attribute type 29 has an invalid length. [ 405.942850][T11333] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1593'. [ 406.216006][ T50] Bluetooth: hci2: command tx timeout [ 407.240179][ T30] audit: type=1400 audit(1782827936.482:1279): avc: denied { read } for pid=11357 comm="syz.4.1599" path="socket:[33833]" dev="sockfs" ino=33833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 407.367859][T11359] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 407.743096][T11299] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.776587][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.810736][T11299] bridge_slave_0: entered allmulticast mode [ 407.847897][T11299] bridge_slave_0: entered promiscuous mode [ 407.877289][T11299] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.899521][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.918445][T11299] bridge_slave_1: entered allmulticast mode [ 407.937983][T11299] bridge_slave_1: entered promiscuous mode [ 408.006615][T11299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.021270][T11299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.099876][T11299] team0: Port device team_slave_0 added [ 408.165674][T11299] team0: Port device team_slave_1 added [ 408.286683][ T50] Bluetooth: hci2: command tx timeout [ 409.118825][T11299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.194723][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.880300][T11299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.111780][T11299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.255079][T11299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.362564][ T50] Bluetooth: hci2: command tx timeout [ 410.728680][T11299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.829336][T11299] hsr_slave_0: entered promiscuous mode [ 410.843408][T11299] hsr_slave_1: entered promiscuous mode [ 410.863160][T11299] debugfs: 'hsr0' already exists in 'hsr' [ 410.869041][T11299] Cannot create hsr debugfs directory [ 411.260744][ T30] audit: type=1326 audit(1782827940.502:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.2.1611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 411.386704][ T30] audit: type=1326 audit(1782827940.502:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.2.1611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 411.531684][ T30] audit: type=1326 audit(1782827940.632:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.2.1611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 411.592750][ T30] audit: type=1326 audit(1782827940.632:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.2.1611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 411.661798][ T30] audit: type=1326 audit(1782827940.632:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.2.1611" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c559ce59 code=0x7ffc0000 [ 411.907375][T11299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 411.935454][T11299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.959257][T11299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 411.983572][T11299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.994049][T11299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.040997][T11299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.073100][T11299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.135451][T11299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.445332][ T50] Bluetooth: hci2: command tx timeout [ 413.101478][ T30] audit: type=1400 audit(1782827942.342:1285): avc: denied { mounton } for pid=11472 comm="syz.4.1619" path=2F3432382FE91F7189591E9233614B dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 413.179038][T11299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.217228][T11299] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.295334][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.302482][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.334946][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.342163][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.579872][ T30] audit: type=1400 audit(1782827946.822:1286): avc: denied { bind } for pid=11521 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.624280][ T30] audit: type=1400 audit(1782827946.822:1287): avc: denied { listen } for pid=11521 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.649938][ T30] audit: type=1400 audit(1782827946.822:1288): avc: denied { accept } for pid=11521 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 417.693214][ T30] audit: type=1400 audit(1782827946.932:1289): avc: denied { create } for pid=11523 comm="syz.5.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 417.731131][ T30] audit: type=1400 audit(1782827946.972:1290): avc: denied { write } for pid=11523 comm="syz.5.1632" path="socket:[34844]" dev="sockfs" ino=34844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 417.814106][T11299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.375552][T11299] veth0_vlan: entered promiscuous mode [ 418.436552][T11299] veth1_vlan: entered promiscuous mode [ 418.548535][T11299] veth0_macvtap: entered promiscuous mode [ 419.777827][T11299] veth1_macvtap: entered promiscuous mode [ 419.803820][T11299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.818521][T11299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.831929][ T6020] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.883211][ T6020] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.909393][ T30] audit: type=1400 audit(1782827949.152:1291): avc: denied { lock } for pid=11551 comm="syz.6.1646" path="socket:[34730]" dev="sockfs" ino=34730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 419.948274][ T6020] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.060806][ T6020] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.096864][T11555] netdevsim netdevsim4: Direct firmware load for . [ 420.096864][T11555] failed with error -2 [ 420.118702][T11555] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 420.118702][T11555] [ 420.119577][ T30] audit: type=1400 audit(1782827949.362:1292): avc: denied { firmware_load } for pid=11549 comm="syz.4.1638" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 420.578405][ T8501] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 420.739925][ T8501] usb 7-1: unable to get BOS descriptor or descriptor too short [ 420.839648][ T8501] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.874231][ T8501] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.884084][ T8501] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 420.896161][ T8501] usb 7-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 420.911917][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.924183][ T8501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.942973][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.945324][ T30] audit: type=1400 audit(1782827950.192:1293): avc: denied { connect } for pid=11556 comm="syz.2.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.950341][ T8501] usb 7-1: Product: syz [ 420.950359][ T8501] usb 7-1: Manufacturer: syz [ 421.016419][T11567] bond3: option mode: unable to set because the bond device has slaves [ 421.027569][ T30] audit: type=1400 audit(1782827950.222:1294): avc: denied { write } for pid=11556 comm="syz.2.1639" lport=64168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 421.042735][ T8501] usb 7-1: SerialNumber: syz [ 421.065068][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.086353][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.336491][ T30] audit: type=1400 audit(1782827950.582:1295): avc: denied { open } for pid=11551 comm="syz.6.1646" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 421.440704][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.450982][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.938112][ T8501] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.953314][ T8501] usb 7-1: MIDIStreaming interface descriptor not found [ 424.731525][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1648'. [ 424.786199][ T8501] usb 7-1: USB disconnect, device number 3 [ 426.153586][T11613] udevd[11613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.649647][ T5721] IPVS: starting estimator thread 0... [ 429.970220][T11664] net_ratelimit: 10 callbacks suppressed [ 429.970231][T11664] IPVS: fo: FWM 3 0x00000003 - no destination available [ 430.032474][T11662] IPVS: using max 76 ests per chain, 182400 per kthread [ 430.971333][T11678] overlayfs: failed to clone upperpath [ 431.397591][ T8493] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 431.405590][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'. [ 431.468355][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 431.468373][ T30] audit: type=1400 audit(1782827960.712:1298): avc: denied { ioctl } for pid=11687 comm="syz.5.1672" path="socket:[36182]" dev="sockfs" ino=36182 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 431.993047][ T8493] usb 8-1: Using ep0 maxpacket: 16 [ 432.010560][ T8493] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 432.020196][ T8493] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.067592][ T8493] usb 8-1: config 0 descriptor?? [ 432.080290][ T8493] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 432.150316][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 432.497503][T11677] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1668'. [ 432.829628][T11711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.036918][T11677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.066688][ T30] audit: type=1400 audit(1782827962.312:1299): avc: denied { mounton } for pid=11712 comm="syz.2.1678" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.202246][T11677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.491339][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1679'. [ 434.009090][T11677] bond0 (unregistering): Released all slaves [ 434.393082][ T8493] usb 8-1: Detected FT232A [ 434.431188][ T8493] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 434.445923][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.452486][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.854500][ T8493] usb 8-1: USB disconnect, device number 2 [ 434.868601][ T8493] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 434.883290][ T8493] ftdi_sio 8-1:0.0: device disconnected [ 437.526480][T11773] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11299] was attempted by " [ 442.306424][T11806] syzkaller0: entered promiscuous mode [ 442.610330][T11806] syzkaller0: entered allmulticast mode [ 443.448432][T11822] netlink: 'syz.4.1707': attribute type 12 has an invalid length. [ 445.674296][ T30] audit: type=1400 audit(1782827974.912:1300): avc: denied { getopt } for pid=11847 comm="syz.2.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 446.656154][T11864] : renamed from bond_slave_0 [ 447.468456][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 447.824931][T11878] tipc: Enabled bearer , priority 0 [ 448.475383][T11882] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 448.845534][ T30] audit: type=1400 audit(1782827978.092:1301): avc: denied { bind } for pid=11885 comm="syz.5.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 448.962346][T11884] tipc: Resetting bearer [ 450.296638][T11900] batman_adv: batadv0: Interface deactivated: dummy0 [ 450.328937][T11900] batman_adv: batadv0: Removing interface: dummy0 [ 450.381095][T11900] team0: Port device xfrm0 removed [ 450.408616][T11900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.523124][ T8501] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 450.596209][T11905] netlink: 'syz.6.1732': attribute type 21 has an invalid length. [ 450.612719][T11905] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1732'. [ 450.626709][T11905] netlink: 'syz.6.1732': attribute type 1 has an invalid length. [ 450.712989][ T8501] usb 8-1: Using ep0 maxpacket: 32 [ 450.720624][ T30] audit: type=1400 audit(1782827979.962:1302): avc: denied { sys_module } for pid=11906 comm="syz.4.1725" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 450.756032][ T8501] usb 8-1: config 4 has an invalid interface number: 44 but max is 0 [ 450.774845][ T8501] usb 8-1: config 4 has no interface number 0 [ 450.787684][ T8501] usb 8-1: config 4 interface 44 has no altsetting 0 [ 450.801611][ T8501] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 450.811465][ T8501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.820085][ T8501] usb 8-1: Product: syz [ 450.825674][ T8501] usb 8-1: Manufacturer: syz [ 450.830407][ T8501] usb 8-1: SerialNumber: syz [ 451.127774][ T8501] kl5kusb105 8-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 451.217510][ T30] audit: type=1400 audit(1782827980.442:1303): avc: denied { listen } for pid=11915 comm="syz.2.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.574154][ T8501] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 451.630595][ T8501] usb 8-1: USB disconnect, device number 3 [ 451.635901][ T30] audit: type=1400 audit(1782827980.872:1304): avc: denied { create } for pid=11927 comm="syz.5.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.021971][ T8501] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 452.408869][ T8501] kl5kusb105 8-1:4.44: device disconnected [ 452.436157][T11905] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 452.638758][T11943] syz.2.1737 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 453.749845][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1741'. [ 455.523157][ T30] audit: type=1400 audit(1782827984.752:1305): avc: denied { ioctl } for pid=11968 comm="syz.5.1746" path="socket:[37138]" dev="sockfs" ino=37138 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 457.134723][T11988] xt_nat: multiple ranges no longer supported [ 458.652672][ T8502] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 458.932445][ T8502] usb 8-1: Using ep0 maxpacket: 32 [ 458.946704][ T8502] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.972468][ T8502] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.077482][ T8502] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 459.417588][ T8502] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 459.443423][ T8502] usb 8-1: Product: syz [ 459.457541][ T8502] usb 8-1: Manufacturer: syz [ 459.472710][T12007] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1758'. [ 459.476689][ T8502] usb 8-1: SerialNumber: syz [ 459.520467][ T8502] appletouch 8-1:1.0: Could not find int-in endpoint [ 459.534709][ T8502] appletouch 8-1:1.0: probe with driver appletouch failed with error -5 [ 459.547752][ T8502] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 461.199135][T12017] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 461.221884][T12023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1762'. [ 461.238008][T12025] tipc: Enabling of bearer rejected, failed to enable media [ 461.311534][T12017] picdev_read: 77 callbacks suppressed [ 461.311553][T12017] kvm: pic: non byte read [ 461.346584][T12017] pic_ioport_write: 22 callbacks suppressed [ 461.346640][T12017] kvm: pic: level sensitive irq not supported [ 461.361557][T12017] kvm: pic: non byte read [ 461.394938][T12017] kvm: pic: level sensitive irq not supported [ 461.395062][T12017] kvm: pic: non byte read [ 462.191709][ T5721] usb 8-1: USB disconnect, device number 4 [ 462.524785][T12041] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1767'. [ 462.566025][T12041] netlink: 'syz.7.1767': attribute type 15 has an invalid length. [ 462.575090][T12045] netlink: 'syz.4.1769': attribute type 23 has an invalid length. [ 462.627969][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'. [ 462.657166][ T30] audit: type=1400 audit(1782827991.902:1306): avc: denied { read write } for pid=12042 comm="syz.2.1768" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 462.682846][T12050] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 462.700898][ T30] audit: type=1400 audit(1782827991.902:1307): avc: denied { open } for pid=12042 comm="syz.2.1768" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 462.818256][ T5867] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.839134][T12041] netlink: 'syz.7.1767': attribute type 15 has an invalid length. [ 462.841037][ T5867] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.857726][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1767'. [ 462.874433][ T5867] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 462.892760][ T8501] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 462.901805][ T5867] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 463.062652][ T8501] usb 7-1: Using ep0 maxpacket: 8 [ 463.077072][ T8501] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 463.142909][ T8501] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.557287][ T30] audit: type=1400 audit(1782827992.802:1308): avc: denied { mount } for pid=12061 comm="syz.2.1775" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 463.580956][T12063] overlay: Bad value for 'index' [ 463.645296][ T30] audit: type=1400 audit(1782827992.822:1309): avc: denied { mounton } for pid=12061 comm="syz.2.1775" path="/320/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 463.676747][ T5721] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 464.121391][ T5721] usb 8-1: config 0 has no interfaces? [ 464.154419][ T5721] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 464.207171][ T5721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.228355][ T8501] usb 7-1: Product: syz [ 464.233649][ T30] audit: type=1400 audit(1782827993.482:1310): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 464.234778][ T8501] usb 7-1: Manufacturer: syz [ 464.259216][ T8501] usb 7-1: SerialNumber: syz [ 464.264837][ T5721] usb 8-1: config 0 descriptor?? [ 464.565847][ T8493] usb 8-1: USB disconnect, device number 5 [ 464.924794][ T8501] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 464.993885][ T8501] usb 7-1: clock source 0 is not valid, cannot use [ 465.050765][ T8501] usb 7-1: 1:1: cannot get freq (v2/v3): err -32 [ 465.216611][T12080] macsec1: entered promiscuous mode [ 465.228383][T12080] virt_wifi0: entered promiscuous mode [ 467.772396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 467.822397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 468.042387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 468.102567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 468.256146][ T8501] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 468.309249][ T8501] usb 7-1: clock source 0 is not valid, cannot use [ 468.359519][ T8501] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 468.380000][ T8501] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 469.726512][ T8501] usb 7-1: USB disconnect, device number 4 [ 470.480956][T11296] udevd[11296]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.980572][T12129] ubi0: attaching mtd0 [ 471.002932][T12129] ubi0: scanning is finished [ 471.009610][T12129] ubi0: empty MTD device detected [ 471.966917][T12129] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 472.358791][ T30] audit: type=1400 audit(1782828001.602:1311): avc: denied { transfer } for pid=12146 comm="syz.6.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 476.852433][ T30] audit: type=1400 audit(1782828005.832:1312): avc: denied { watch } for pid=12187 comm="syz.7.1808" path="/28/file1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 479.990171][T12212] 9p: Bad value for 'source' [ 480.989849][T12220] syzkaller0: entered promiscuous mode [ 480.995311][ T30] audit: type=1400 audit(1782828010.202:1313): avc: denied { bpf } for pid=12214 comm="syz.6.1815" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.002455][T12220] syzkaller0: entered allmulticast mode [ 481.496758][ T30] audit: type=1400 audit(1782828010.342:1314): avc: denied { perfmon } for pid=12218 comm="syz.5.1817" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 481.548695][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.562074][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 481.571435][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 481.588591][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 481.596310][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 481.659886][T12227] fuse: Bad value for 'fd' [ 482.039585][T12236] overlayfs: failed to clone upperpath [ 483.137771][T12067] team0: Port device syz_tun removed [ 483.294231][ T5860] smbdirect: ib_dev[syz1] removed [ 483.646206][ T50] Bluetooth: hci6: command tx timeout [ 484.155196][ T30] audit: type=1400 audit(1782828013.402:1315): avc: denied { block_suspend } for pid=12256 comm="syz.6.1824" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 485.569028][T12222] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.122234][ T50] Bluetooth: hci6: command tx timeout [ 486.150800][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.158439][T12222] bridge_slave_0: entered allmulticast mode [ 486.167645][T12222] bridge_slave_0: entered promiscuous mode [ 486.178301][T12222] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.188833][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.196520][T12222] bridge_slave_1: entered allmulticast mode [ 486.210227][T12222] bridge_slave_1: entered promiscuous mode [ 486.313705][T12222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.360640][T12222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.631367][T12294] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 486.763734][T12294] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 486.853604][T12294] overlayfs: failed to look up (tracing) for ino (-66) [ 487.009605][ T30] audit: type=1400 audit(1782828015.862:1316): avc: denied { mount } for pid=12287 comm="syz.2.1831" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 487.468427][ T30] audit: type=1400 audit(1782828016.672:1317): avc: denied { ioctl } for pid=12290 comm="syz.6.1832" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 488.651332][ T50] Bluetooth: hci6: command tx timeout [ 489.014806][ T30] audit: type=1400 audit(1782828018.262:1318): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 489.693742][T12300] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.701062][T12300] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.688163][ T50] Bluetooth: hci6: command tx timeout [ 490.960310][T12300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.978642][T12300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.304177][T12222] team0: Port device team_slave_0 added [ 491.315007][T12222] team0: Port device team_slave_1 added [ 491.320881][T12327] tipc: Enabling of bearer rejected, failed to enable media [ 491.356655][T12341] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 491.414352][T12342] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1838'. [ 491.451617][ T1033] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 491.468268][ T1033] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.534619][T12347] blktrace: Concurrent blktraces are not allowed on sg0 [ 491.694303][ T1033] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 491.709544][ T1033] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.191830][ T5864] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 492.201424][ T5864] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.213451][ T5864] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 492.223749][ T5864] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.265583][T12222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.272946][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.307714][T12222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.474683][T12222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.482080][T12222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.578431][T12222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.827626][T12371] syzkaller0: entered promiscuous mode [ 493.834410][T12371] syzkaller0: entered allmulticast mode [ 493.846897][T12378] syzkaller0: entered promiscuous mode [ 493.858845][T12378] syzkaller0: entered allmulticast mode [ 495.934336][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.940770][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.706973][T12408] netlink: 'syz.5.1855': attribute type 4 has an invalid length. [ 497.787784][T12409] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1855'. [ 497.796899][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1855'. [ 497.806170][T12409] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1855'. [ 498.058523][T12222] hsr_slave_0: entered promiscuous mode [ 498.071631][T12222] hsr_slave_1: entered promiscuous mode [ 498.078363][T12222] debugfs: 'hsr0' already exists in 'hsr' [ 498.084396][T12222] Cannot create hsr debugfs directory [ 498.272474][ T3359] bridge_slave_1: left allmulticast mode [ 498.290559][ T3359] bridge_slave_1: left promiscuous mode [ 498.307607][ T3359] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.471823][ T3359] bridge_slave_0: left allmulticast mode [ 498.485701][ T3359] bridge_slave_0: left promiscuous mode [ 498.497632][ T3359] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.957927][T12423] xt_connbytes: Forcing CT accounting to be enabled [ 498.973601][T12423] set match dimension is over the limit! [ 499.126081][T12430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.138865][ T30] audit: type=1400 audit(1782828028.382:1319): avc: denied { write } for pid=12414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.240419][ T3359] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 499.249815][ T3359] bond3 (unregistering): (slave macvlan2): making interface the new active one [ 499.258407][ T30] audit: type=1400 audit(1782828028.502:1320): avc: denied { write } for pid=12435 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.320376][ T3359] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 499.330348][ T3359] macvlan2: entered promiscuous mode [ 499.336098][ T3359] bond0 (unregistering): entered promiscuous mode [ 499.344627][ T3359] bond_slave_0: entered promiscuous mode [ 499.350467][ T3359] bond_slave_1: entered promiscuous mode [ 499.406814][ T3359] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 499.465805][ T3359] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 499.482783][ T3359] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 499.491028][ T3359] bridge4 (unregistering): left promiscuous mode [ 499.498556][ T3359] bridge4 (unregistering): left allmulticast mode [ 499.511147][ T3359] bond0 (unregistering): left promiscuous mode [ 499.518423][ T3359] bond_slave_0: left promiscuous mode [ 499.524276][ T3359] bond_slave_1: left promiscuous mode [ 499.530961][ T3359] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 499.539224][ T3359] macvlan2 (unregistering): left promiscuous mode [ 499.556487][ T3359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.566267][ T3359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.575581][ T3359] bond0 (unregistering): Released all slaves [ 499.590026][ T3359] bond1 (unregistering): (slave veth3): Releasing active interface [ 499.605163][ T3359] bond1 (unregistering): Released all slaves [ 499.621298][ T3359] bond2 (unregistering): Released all slaves [ 499.637271][ T3359] bond3 (unregistering): Released all slaves [ 499.676962][ T3359] bond4 (unregistering): Released all slaves [ 499.691820][ T3359] bond5 (unregistering): (slave bond6): Releasing backup interface [ 499.700470][ T3359] bond5 (unregistering): Released all slaves [ 499.717460][ T3359] bond6 (unregistering): Released all slaves [ 499.733048][ T3359] bond7 (unregistering): Released all slaves [ 499.787935][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 500.080237][T12446] netlink: 'syz.5.1862': attribute type 12 has an invalid length. [ 501.534187][T12222] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 501.863569][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.899641][T12222] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 501.963172][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.979609][T12222] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 502.108537][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.117075][T12222] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 502.137418][T12222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.556398][ T30] audit: type=1400 audit(1782828031.792:1321): avc: denied { write } for pid=12447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.618491][T12222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.710641][T12222] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.770100][ T30] audit: type=1400 audit(1782828032.002:1322): avc: denied { write } for pid=12479 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.873733][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.880944][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.911647][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.918822][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.049299][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 504.649692][ T30] audit: type=1400 audit(1782828033.892:1323): avc: denied { write } for pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.902457][T12222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.105839][ T30] audit: type=1400 audit(1782828034.352:1324): avc: denied { write } for pid=12520 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.667571][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 506.199068][T12536] ÿ: renamed from dummy0 [ 506.446341][T12543] vlan2: entered promiscuous mode [ 506.467164][T12543] hsr0: entered promiscuous mode [ 506.474396][T12543] vlan2: entered allmulticast mode [ 506.482723][T12543] hsr0: entered allmulticast mode [ 506.492577][T12543] hsr_slave_0: entered allmulticast mode [ 506.504085][T12543] hsr_slave_1: entered allmulticast mode [ 506.511686][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1875'. [ 506.792936][ T30] audit: type=1400 audit(1782828036.012:1325): avc: denied { write } for pid=12538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.829993][ T30] audit: type=1400 audit(1782828036.072:1326): avc: denied { write } for pid=12561 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.272759][ T50] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 507.307341][T12551] hsr_slave_1 (unregistering): left promiscuous mode [ 507.482291][ T3359] hsr_slave_1: left promiscuous mode [ 509.142804][ T30] audit: type=1400 audit(1782828038.332:1327): avc: denied { create } for pid=12578 comm="syz.6.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 509.206437][ T30] audit: type=1400 audit(1782828038.382:1328): avc: denied { write } for pid=12578 comm="syz.6.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 509.474014][ T3359] team0 (unregistering): Port device team_slave_1 removed [ 509.507380][ T3359] team0 (unregistering): Port device team_slave_0 removed [ 511.578221][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.611797][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.633169][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.646904][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.661878][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 512.056945][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 512.418718][T12222] veth0_vlan: entered promiscuous mode [ 512.551685][T12222] veth1_vlan: entered promiscuous mode [ 512.590334][T12637] xt_hashlimit: size too large, truncated to 1048576 [ 512.644537][T12222] veth0_macvtap: entered promiscuous mode [ 512.707569][T12222] veth1_macvtap: entered promiscuous mode [ 512.838508][T12222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.984227][T12647] Cannot find add_set index 0 as target [ 513.067287][T12222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.436106][ T6011] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.472104][ T6011] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.512466][ T6011] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.653672][ T6011] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.887745][ T5617] Bluetooth: hci3: command tx timeout [ 513.934315][ T30] audit: type=1400 audit(1782828043.172:1329): avc: denied { write } for pid=12636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.043151][ T30] audit: type=1400 audit(1782828043.262:1330): avc: denied { write } for pid=12666 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.490715][T12680] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1894'. [ 514.651725][ T3359] IPVS: stop unused estimator thread 0... [ 514.851733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.880193][ T30] audit: type=1400 audit(1782828044.112:1331): avc: denied { write } for pid=12668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.927092][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.653798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.731094][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.905892][ T30] audit: type=1400 audit(1782828045.152:1332): avc: denied { write } for pid=12697 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.962430][ T5617] Bluetooth: hci3: command tx timeout [ 516.038174][ T30] audit: type=1400 audit(1782828045.212:1333): avc: denied { lock } for pid=12699 comm="syz.5.1897" path="socket:[41447]" dev="sockfs" ino=41447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 516.662063][T12623] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.670148][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.677489][T12623] bridge_slave_0: entered allmulticast mode [ 516.693404][T12623] bridge_slave_0: entered promiscuous mode [ 516.703760][T12623] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.711022][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.718391][T12623] bridge_slave_1: entered allmulticast mode [ 516.752265][T12623] bridge_slave_1: entered promiscuous mode [ 516.958806][T12623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.047513][T12623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.325134][T12623] team0: Port device team_slave_0 added [ 517.400804][T12623] team0: Port device team_slave_1 added [ 517.503934][ T30] audit: type=1400 audit(1782828046.752:1334): avc: denied { write } for pid=12706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.578670][T12623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.620651][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.659495][T12730] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.677034][T12730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.686708][T12730] IPv6: NLM_F_CREATE should be set when creating new route [ 517.693997][T12730] IPv6: NLM_F_CREATE should be set when creating new route [ 517.721792][T12623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.784700][ T30] audit: type=1400 audit(1782828047.032:1335): avc: denied { write } for pid=12731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.925289][T12623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.946393][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.028534][T12623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.042414][ T5617] Bluetooth: hci3: command tx timeout [ 518.456003][T12623] hsr_slave_0: entered promiscuous mode [ 518.484423][T12623] hsr_slave_1: entered promiscuous mode [ 520.189627][ T5617] Bluetooth: hci3: command tx timeout [ 520.273645][T12747] netlink: 'syz.5.1903': attribute type 3 has an invalid length. [ 520.319103][T12747] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1903'. [ 523.597778][T12781] fuse: Bad value for 'fd' [ 524.395990][ T30] audit: type=1400 audit(1782828053.632:1336): avc: denied { write } for pid=12737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.672633][ T30] audit: type=1400 audit(1782828053.912:1337): avc: denied { write } for pid=12791 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.103573][ T30] audit: type=1400 audit(1782828053.982:1338): avc: denied { mount } for pid=12792 comm="syz.7.1913" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 525.127274][ T30] audit: type=1400 audit(1782828053.982:1339): avc: denied { search } for pid=12792 comm="syz.7.1913" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 525.151020][ T30] audit: type=1400 audit(1782828053.982:1340): avc: denied { search } for pid=12792 comm="syz.7.1913" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 525.375759][ T30] audit: type=1400 audit(1782828053.982:1341): avc: denied { read } for pid=12792 comm="syz.7.1913" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 525.585015][T12805] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 526.025860][ T30] audit: type=1400 audit(1782828053.992:1342): avc: denied { read open } for pid=12792 comm="syz.7.1913" path="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 526.137529][ T30] audit: type=1400 audit(1782828054.822:1343): avc: denied { mounton } for pid=12798 comm="syz.6.1914" path="/80/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 526.166064][ T30] audit: type=1400 audit(1782828054.822:1344): avc: denied { read } for pid=12798 comm="syz.6.1914" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 526.260256][ T30] audit: type=1400 audit(1782828054.922:1345): avc: denied { prog_load } for pid=12801 comm="syz.8.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 526.448299][T12623] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 526.588042][T12623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.610867][T12814] netlink: 'syz.8.1919': attribute type 9 has an invalid length. [ 526.630839][T12623] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 526.664747][T12623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.692103][T12623] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 526.942538][T12623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.960886][T12623] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 527.306928][T12623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.360789][T12835] netlink: 'syz.8.1922': attribute type 12 has an invalid length. [ 527.737455][T12623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.101834][T12623] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.184992][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.192116][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.244603][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.251725][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.684554][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 529.083569][T12861] syzkaller0: entered promiscuous mode [ 529.100176][T12861] syzkaller0: entered allmulticast mode [ 529.128983][T12861] tipc: Started in network mode [ 529.142309][T12861] tipc: Node identity 0a4235ed83b7, cluster identity 4711 [ 529.170460][T12861] tipc: Enabled bearer , priority 0 [ 529.207013][T12861] tipc: Resetting bearer [ 529.228960][T12860] tipc: Resetting bearer [ 529.298063][T12860] tipc: Disabling bearer [ 529.670396][T12878] syzkaller0: entered promiscuous mode [ 529.687201][T12878] syzkaller0: entered allmulticast mode [ 529.722615][ T5714] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 529.912208][ T5714] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 529.943046][ T5714] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.962649][ T5714] usb 7-1: config 0 has no interface number 0 [ 529.976968][ T5714] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 530.001257][ T5714] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 530.014985][ T5714] usb 7-1: config 0 interface 255 has no altsetting 0 [ 531.050585][T12623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.059616][ T5714] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 531.069141][ T5714] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.081617][ T5714] usb 7-1: Product: syz [ 531.093474][ T5714] usb 7-1: Manufacturer: syz [ 531.098190][ T5714] usb 7-1: SerialNumber: syz [ 531.113031][ T5714] usb 7-1: config 0 descriptor?? [ 531.129680][ T5714] CoreChips 7-1:0.255: probe with driver CoreChips failed with error -22 [ 532.108138][T12623] veth0_vlan: entered promiscuous mode [ 532.115701][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 532.115715][ T30] audit: type=1400 audit(1782828061.362:1350): avc: denied { write } for pid=12889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.133700][T12623] veth1_vlan: entered promiscuous mode [ 532.235586][T12623] veth0_macvtap: entered promiscuous mode [ 532.253519][T12623] veth1_macvtap: entered promiscuous mode [ 532.261584][ T30] audit: type=1400 audit(1782828061.502:1351): avc: denied { write } for pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.281928][T12623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.338728][T12623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.383694][ T6020] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.484740][ T6020] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.762253][T12919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.116586][ T6020] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.280255][ T6020] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.692734][ T9] usb 7-1: USB disconnect, device number 5 [ 535.377265][ T5855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.386331][ T5855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.860335][ T5856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.958471][ T5856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.638203][ T30] audit: type=1400 audit(1782828066.882:1352): avc: denied { ioctl } for pid=12958 comm="syz.7.1943" path="socket:[42555]" dev="sockfs" ino=42555 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.638377][T12959] syzkaller0: entered promiscuous mode [ 538.801263][ T30] audit: type=1400 audit(1782828068.042:1353): avc: denied { listen } for pid=12970 comm="syz.7.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.758585][ T30] audit: type=1400 audit(1782828068.332:1354): avc: denied { write } for pid=12951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.372581][ T30] audit: type=1400 audit(1782828069.612:1355): avc: denied { write } for pid=12983 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.927151][T13005] overlayfs: conflicting lowerdir path [ 541.936924][ T30] audit: type=1400 audit(1782828071.172:1356): avc: denied { mounton } for pid=12998 comm="syz.8.1947" path="/17/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 542.669332][ T8493] IPVS: starting estimator thread 0... [ 542.735618][ T30] audit: type=1400 audit(1782828071.982:1357): avc: denied { read write } for pid=13019 comm="syz.7.1954" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.768631][T13018] IPVS: using max 57 ests per chain, 136800 per kthread [ 542.833888][ T30] audit: type=1400 audit(1782828071.982:1358): avc: denied { open } for pid=13019 comm="syz.7.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.954558][ T30] audit: type=1400 audit(1782828071.982:1359): avc: denied { ioctl } for pid=13019 comm="syz.7.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 543.000031][ T30] audit: type=1400 audit(1782828071.982:1360): avc: denied { map } for pid=13019 comm="syz.7.1954" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 543.381758][ T30] audit: type=1400 audit(1782828072.612:1361): avc: denied { write } for pid=13007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.789713][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 543.809899][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 543.830566][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 543.844969][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 543.854994][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 544.300007][ T30] audit: type=1400 audit(1782828073.542:1362): avc: denied { write } for pid=13038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.304245][T13039] kAFS: unable to lookup cell '(,c¾ûL' [ 545.833745][T13058] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1962'. [ 546.053249][ T8493] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 546.112424][ T30] audit: type=1400 audit(1782828075.352:1363): avc: denied { unmount } for pid=12222 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 546.202590][ T50] Bluetooth: hci7: command tx timeout [ 546.272017][ T30] audit: type=1400 audit(1782828075.512:1364): avc: denied { write } for pid=13052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.696910][ T8493] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 546.696936][ T8493] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.696965][ T8493] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.696984][ T8493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.699104][ T8493] usb 7-1: config 0 descriptor?? [ 546.897772][ T30] audit: type=1400 audit(1782828076.142:1365): avc: denied { write } for pid=13083 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.962624][ T8477] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 547.122828][ T8477] usb 9-1: Using ep0 maxpacket: 32 [ 547.171466][T13096] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1965'. [ 547.186387][ T8477] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 547.197705][ T30] audit: type=1400 audit(1782828076.412:1366): avc: denied { nlmsg_read } for pid=13093 comm="syz.7.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 547.247603][ T8477] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 547.299266][ T8477] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 547.339779][ T8477] usb 9-1: config 1 has no interface number 0 [ 547.386528][ T8477] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.428191][ T8477] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 547.502013][ T8477] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 547.502065][ T8477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.885727][ T8477] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 548.288447][ T8477] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 548.295403][ T50] Bluetooth: hci7: command tx timeout [ 548.371664][T13035] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.373636][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.373854][T13035] bridge_slave_0: entered allmulticast mode [ 548.377815][T13035] bridge_slave_0: entered promiscuous mode [ 548.386530][T13035] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.396627][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.396867][T13035] bridge_slave_1: entered allmulticast mode [ 548.400751][T13035] bridge_slave_1: entered promiscuous mode [ 548.507621][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.527655][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.650771][T13035] team0: Port device team_slave_0 added [ 548.655587][T13035] team0: Port device team_slave_1 added [ 548.720794][ T803] usb 9-1: USB disconnect, device number 2 [ 548.732250][ T803] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 548.820676][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.839328][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.876981][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.890690][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.902577][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.964085][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.086651][T13035] hsr_slave_0: entered promiscuous mode [ 549.095355][T13035] hsr_slave_1: entered promiscuous mode [ 549.102014][T13035] debugfs: 'hsr0' already exists in 'hsr' [ 549.113408][T13035] Cannot create hsr debugfs directory [ 549.254118][T13111] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 549.261666][T13111] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 549.580098][ T803] usb 7-1: USB disconnect, device number 6 [ 549.888674][ T8487] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 550.362544][ T50] Bluetooth: hci7: command tx timeout [ 550.435288][ T8487] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.482624][ T8487] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 550.523392][ T8487] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 550.549971][ T8487] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 550.653225][ T8487] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.671793][ T8487] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.698838][ T8487] usb 10-1: Manufacturer: syz [ 550.747043][ T8487] usb 10-1: config 0 descriptor?? [ 551.282082][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.383049][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.072969][ T30] audit: type=1400 audit(1782828081.302:1367): avc: denied { write } for pid=13123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.299771][ T30] audit: type=1400 audit(1782828081.542:1368): avc: denied { write } for pid=13145 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.370000][T13148] netlink: 'syz.8.1975': attribute type 2 has an invalid length. [ 552.392713][T13148] netlink: 'syz.8.1975': attribute type 2 has an invalid length. [ 552.494633][T13107] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 552.512797][ T50] Bluetooth: hci7: command tx timeout [ 552.546061][T13156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.047507][T13161] netlink: 'syz.8.1978': attribute type 4 has an invalid length. [ 553.072734][T13161] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1978'. [ 553.092505][ T8487] rc_core: IR keymap rc-hauppauge not found [ 553.117825][ T8487] Registered IR keymap rc-empty [ 553.150951][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 553.250690][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 553.344717][ T8487] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 553.473146][ T8487] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input13 [ 554.092689][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 554.134081][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 554.136809][ T30] audit: type=1400 audit(1782828083.372:1369): avc: denied { write } for pid=13162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.208766][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 554.861357][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 554.903508][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.061421][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.089562][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.133921][ T30] audit: type=1400 audit(1782828084.352:1370): avc: denied { append } for pid=13197 comm="syz.7.1982" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 555.240837][ T30] audit: type=1400 audit(1782828084.452:1371): avc: denied { write } for pid=13194 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.284098][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.350408][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.878090][ T8487] mceusb 10-1:0.0: Error: mce write urb status = -71 [ 555.940514][ T8487] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 556.043392][ T8487] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 556.078171][ T8487] usb 10-1: USB disconnect, device number 2 [ 556.243444][ T30] audit: type=1804 audit(1782828085.462:1372): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1985" name="bus" dev="ramfs" ino=43290 res=1 errno=0 [ 557.678819][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.685409][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.103504][ T30] audit: type=1804 audit(1782828085.472:1373): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.1985" name="bus" dev="ramfs" ino=43290 res=1 errno=0 [ 558.449485][T13035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.593516][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.657459][T13035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 559.206039][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.240290][ T30] audit: type=1400 audit(1782828088.482:1374): avc: denied { write } for pid=13207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.269069][T13035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 559.592485][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.681708][ T30] audit: type=1400 audit(1782828088.922:1375): avc: denied { write } for pid=13246 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.729722][T13035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 559.850806][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.762703][ T8486] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 560.831414][T13035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.904240][T13035] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.936208][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.943396][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.944645][ T8486] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.976547][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.983746][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.075690][ T30] audit: type=1400 audit(1782828090.192:1376): avc: denied { write } for pid=13258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.099925][ T8486] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.153974][ T8486] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.667203][ T8486] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.687237][ T8486] usb 9-1: config 0 descriptor?? [ 561.720932][ T30] audit: type=1400 audit(1782828090.962:1377): avc: denied { write } for pid=13287 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.803023][ T8486] usb 9-1: can't set config #0, error -71 [ 561.862151][ T8486] usb 9-1: USB disconnect, device number 3 [ 562.565299][ T30] audit: type=1400 audit(1782828091.812:1378): avc: denied { write } for pid=13298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.439173][ T30] audit: type=1400 audit(1782828093.682:1379): avc: denied { write } for pid=13323 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.556881][ T30] audit: type=1400 audit(1782828093.742:1380): avc: denied { create } for pid=13327 comm="syz.8.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 566.014291][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.716258][T13035] veth0_vlan: entered promiscuous mode [ 567.756077][T13035] veth1_vlan: entered promiscuous mode [ 567.875744][T13035] veth0_macvtap: entered promiscuous mode [ 567.922462][ T5714] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 567.955145][T13035] veth1_macvtap: entered promiscuous mode [ 567.998973][ T30] audit: type=1400 audit(1782828097.242:1381): avc: denied { write } for pid=13339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.039372][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.060262][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.103948][ T5714] usb 9-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 568.117772][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.130322][ T5714] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 568.146012][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.162811][ T5714] usb 9-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 568.227860][ T5714] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.244868][ T5714] usb 9-1: Product: syz [ 568.249215][ T5714] usb 9-1: Manufacturer: syz [ 568.263783][ T3359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.331435][ T5714] usb 9-1: SerialNumber: syz [ 568.371177][ T3359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.399388][ T5714] usb 9-1: config 0 descriptor?? [ 568.465185][ T30] audit: type=1400 audit(1782828097.712:1382): avc: denied { write } for pid=13375 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.612354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 568.642043][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.677720][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.202862][ T30] audit: type=1400 audit(1782828098.402:1383): avc: denied { connect } for pid=13377 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 569.561566][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.600988][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.736014][ T30] audit: type=1400 audit(1782828098.402:1384): avc: denied { getopt } for pid=13377 comm="syz.6.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 571.023081][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 571.030132][T13366] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 571.094972][T13400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 571.137595][ T30] audit: type=1400 audit(1782828100.372:1385): avc: denied { open } for pid=13397 comm="syz.3.1957" path="/0/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 571.401817][ T30] audit: type=1400 audit(1782828100.432:1386): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 571.739282][ T5714] mos7840 9-1:0.0: required endpoints missing [ 571.789442][ T5714] usb 9-1: USB disconnect, device number 4 [ 571.799024][ T30] audit: type=1400 audit(1782828100.442:1387): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 571.871400][T12136] udevd[12136]: setting mode of /dev/bus/usb/009/004 to 020664 failed: No such file or directory [ 571.903274][ T30] audit: type=1400 audit(1782828100.442:1388): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 571.958298][T13415] IPVS: rr: FWM 3 0x00000003 - no destination available [ 571.969819][T12136] udevd[12136]: setting owner of /dev/bus/usb/009/004 to uid=0, gid=0 failed: No such file or directory [ 571.986346][ T8487] IPVS: starting estimator thread 0... [ 572.140761][ T30] audit: type=1400 audit(1782828100.442:1389): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 572.658661][T13416] IPVS: using max 53 ests per chain, 127200 per kthread [ 572.659173][ T30] audit: type=1400 audit(1782828100.442:1390): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 572.922469][ T30] audit: type=1400 audit(1782828100.442:1391): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 573.089984][ T5855] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.111322][ T30] audit: type=1400 audit(1782828100.442:1392): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 573.145705][ T30] audit: type=1400 audit(1782828100.442:1393): avc: denied { search } for pid=13397 comm="syz.3.1957" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 573.468378][T13432] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 574.657519][T13439] ntfs3(loop6): try to read out of volume at offset 0x0 [ 574.766437][ T5855] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.882268][T13450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 574.923757][T13450] batman_adv: batadv0: Adding interface: macvlan2 [ 574.934006][T13450] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.963402][T13450] batman_adv: batadv0: Interface activated: macvlan2 [ 575.761922][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 575.761948][ T30] audit: type=1400 audit(1782828104.622:1403): avc: denied { accept } for pid=13456 comm="syz.6.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 578.237792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 578.498274][ T5855] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.255181][T13438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.454770][T13502] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 582.798838][T13438] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 584.282363][ C0] ------------[ cut here ]------------ [ 584.288122][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 584.294797][ C0] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#0: syz.3.2036/13499 [ 584.304581][ C0] Modules linked in: [ 584.308598][ C0] CPU: 0 UID: 0 PID: 13499 Comm: syz.3.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.319500][ C0] Tainted: [L]=SOFTLOCKUP [ 584.323794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.333825][ C0] RIP: 0010:__queue_work+0xd31/0x12b0 [ 584.339196][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 08 30 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 584.358784][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046 [ 584.364822][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007d3a14e [ 584.372765][ C0] RDX: ffff88803350a170 RSI: ffffffff8a905390 RDI: ffffffff90feef40 [ 584.380707][ C0] RBP: ffff88803e9d0a58 R08: 0000000000000005 R09: 0000000000000000 [ 584.388653][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88803350a000 [ 584.396609][ C0] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 584.404562][ C0] FS: 00007fb6c7dfc6c0(0000) GS:ffff8881240e0000(0000) knlGS:0000000000000000 [ 584.413477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.420047][ C0] CR2: 000020000000d000 CR3: 000000005502d000 CR4: 00000000003526f0 [ 584.428001][ C0] Call Trace: [ 584.431275][ C0] [ 584.434103][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 584.439890][ C0] call_timer_fn+0x19a/0x610 [ 584.444463][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 584.449563][ C0] ? __run_timers+0x560/0xb00 [ 584.454233][ C0] ? __run_timers+0x560/0xb00 [ 584.458886][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 584.464681][ C0] __run_timers+0x570/0xb00 [ 584.469165][ C0] ? __pfx___run_timers+0x10/0x10 [ 584.474171][ C0] ? ktime_get+0x9f/0x320 [ 584.478479][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 584.483483][ C0] run_timer_base+0x114/0x190 [ 584.488156][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 584.493397][ C0] run_timer_softirq+0x1a/0x50 [ 584.498186][ C0] handle_softirqs+0x1ea/0x9b0 [ 584.502971][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 584.508274][ C0] ? _raw_spin_unlock+0x28/0x50 [ 584.513154][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 584.518802][ C0] __irq_exit_rcu+0x162/0x210 [ 584.523474][ C0] irq_exit_rcu+0x9/0x30 [ 584.527699][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 584.533311][ C0] [ 584.536223][ C0] [ 584.539129][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 584.545085][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 584.551477][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 4e 45 f6 48 89 df e8 1e 9e 45 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 af 34 f6 65 8b 05 ee 38 94 08 85 c0 74 16 5b [ 584.571064][ C0] RSP: 0018:ffffc90004bef8e0 EFLAGS: 00000246 [ 584.577110][ C0] RAX: 0000000000000006 RBX: ffff8880b8426280 RCX: 0000000000000000 [ 584.585053][ C0] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 584.593002][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 584.600944][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8426280 [ 584.608887][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880b84262c8 [ 584.616836][ C0] __mod_timer+0x409/0xca0 [ 584.621242][ C0] ? __pfx___mod_timer+0x10/0x10 [ 584.626161][ C0] ? __lock_acquire+0x49f/0x1a40 [ 584.631076][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 584.636433][ C0] add_timer+0x62/0x90 [ 584.640487][ C0] schedule_timeout+0x122/0x280 [ 584.645312][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 584.650666][ C0] ? __pfx_process_timeout+0x10/0x10 [ 584.655925][ C0] ? snd_rawmidi_write+0x488/0xc60 [ 584.661026][ C0] ? rcu_is_watching+0x12/0xc0 [ 584.665770][ C0] ? snd_rawmidi_write+0x44d/0xc60 [ 584.670858][ C0] snd_rawmidi_write+0x492/0xc60 [ 584.675783][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 584.681217][ C0] ? avc_policy_seqno+0x9/0x20 [ 584.685960][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 584.691482][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 584.697275][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 584.702626][ C0] ? security_file_permission+0x76/0x210 [ 584.708237][ C0] ? rw_verify_area+0xce/0x6d0 [ 584.712979][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 584.718425][ C0] vfs_writev+0x5ed/0xdd0 [ 584.722755][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 584.727593][ C0] ? __fget_files+0x21f/0x3d0 [ 584.732259][ C0] ? do_writev+0x28a/0x340 [ 584.736657][ C0] do_writev+0x28a/0x340 [ 584.740912][ C0] ? __pfx_do_writev+0x10/0x10 [ 584.745659][ C0] do_syscall_64+0x115/0x870 [ 584.750235][ C0] ? clear_bhb_loop+0x40/0x90 [ 584.754896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.760761][ C0] RIP: 0033:0x7fb6c6f9ce59 [ 584.765164][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.784762][ C0] RSP: 002b:00007fb6c7dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 584.793156][ C0] RAX: ffffffffffffffda RBX: 00007fb6c7215fa0 RCX: 00007fb6c6f9ce59 [ 584.801100][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 584.809045][ C0] RBP: 00007fb6c7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 584.816996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.824938][ C0] R13: 00007fb6c7216038 R14: 00007fb6c7215fa0 R15: 00007ffd11055d58 [ 584.832891][ C0] [ 584.835884][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 584.843141][ C0] CPU: 0 UID: 0 PID: 13499 Comm: syz.3.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.854047][ C0] Tainted: [L]=SOFTLOCKUP [ 584.858340][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.868365][ C0] Call Trace: [ 584.871620][ C0] [ 584.874440][ C0] dump_stack_lvl+0x100/0x190 [ 584.879097][ C0] vpanic+0x552/0x970 [ 584.883052][ C0] ? __pfx_vpanic+0x10/0x10 [ 584.887534][ C0] panic+0xd1/0xe0 [ 584.891235][ C0] ? __pfx_panic+0x10/0x10 [ 584.895630][ C0] ? check_panic_on_warn+0x1f/0x90 [ 584.900718][ C0] check_panic_on_warn.cold+0x19/0x34 [ 584.906072][ C0] ? __queue_work+0xd2d/0x12b0 [ 584.910818][ C0] __warn.cold+0x191/0x318 [ 584.915211][ C0] __report_bug+0x30f/0x440 [ 584.919693][ C0] ? __queue_work+0xd2d/0x12b0 [ 584.924431][ C0] ? __pfx___report_bug+0x10/0x10 [ 584.929442][ C0] ? __lock_acquire+0x49f/0x1a40 [ 584.934368][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 584.939636][ C0] ? look_up_lock_class+0x64/0x120 [ 584.944733][ C0] report_bug_entry+0xe1/0x290 [ 584.949486][ C0] ? __queue_work+0xd31/0x12b0 [ 584.954225][ C0] handle_bug+0x1cd/0x2a0 [ 584.958536][ C0] exc_invalid_op+0x17/0x50 [ 584.963011][ C0] asm_exc_invalid_op+0x1a/0x20 [ 584.967835][ C0] RIP: 0010:__queue_work+0xd31/0x12b0 [ 584.973191][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 08 30 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 584.992771][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00010046 [ 584.998838][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007d3a14e [ 585.006803][ C0] RDX: ffff88803350a170 RSI: ffffffff8a905390 RDI: ffffffff90feef40 [ 585.014770][ C0] RBP: ffff88803e9d0a58 R08: 0000000000000005 R09: 0000000000000000 [ 585.022724][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88803350a000 [ 585.030677][ C0] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 585.038626][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 585.044419][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 585.049693][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 585.055484][ C0] call_timer_fn+0x19a/0x610 [ 585.060051][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 585.065138][ C0] ? __run_timers+0x560/0xb00 [ 585.069790][ C0] ? __run_timers+0x560/0xb00 [ 585.074455][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 585.080235][ C0] __run_timers+0x570/0xb00 [ 585.084717][ C0] ? __pfx___run_timers+0x10/0x10 [ 585.089728][ C0] ? ktime_get+0x9f/0x320 [ 585.094036][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 585.099039][ C0] run_timer_base+0x114/0x190 [ 585.103697][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 585.108870][ C0] run_timer_softirq+0x1a/0x50 [ 585.113615][ C0] handle_softirqs+0x1ea/0x9b0 [ 585.118368][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 585.123641][ C0] ? _raw_spin_unlock+0x28/0x50 [ 585.128467][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 585.134072][ C0] __irq_exit_rcu+0x162/0x210 [ 585.138724][ C0] irq_exit_rcu+0x9/0x30 [ 585.142944][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 585.148563][ C0] [ 585.151480][ C0] [ 585.154386][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.160346][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 585.166737][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 4e 45 f6 48 89 df e8 1e 9e 45 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 af 34 f6 65 8b 05 ee 38 94 08 85 c0 74 16 5b [ 585.186317][ C0] RSP: 0018:ffffc90004bef8e0 EFLAGS: 00000246 [ 585.192357][ C0] RAX: 0000000000000006 RBX: ffff8880b8426280 RCX: 0000000000000000 [ 585.200308][ C0] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 585.208261][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 585.216207][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8426280 [ 585.224160][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880b84262c8 [ 585.232121][ C0] __mod_timer+0x409/0xca0 [ 585.236529][ C0] ? __pfx___mod_timer+0x10/0x10 [ 585.241453][ C0] ? __lock_acquire+0x49f/0x1a40 [ 585.246375][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 585.251734][ C0] add_timer+0x62/0x90 [ 585.255784][ C0] schedule_timeout+0x122/0x280 [ 585.260672][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 585.266039][ C0] ? __pfx_process_timeout+0x10/0x10 [ 585.271310][ C0] ? snd_rawmidi_write+0x488/0xc60 [ 585.276419][ C0] ? rcu_is_watching+0x12/0xc0 [ 585.281177][ C0] ? snd_rawmidi_write+0x44d/0xc60 [ 585.286266][ C0] snd_rawmidi_write+0x492/0xc60 [ 585.291185][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 585.296619][ C0] ? avc_policy_seqno+0x9/0x20 [ 585.301369][ C0] ? selinux_file_permission+0x8f/0x6d0 [ 585.306898][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 585.312702][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 585.318060][ C0] ? security_file_permission+0x76/0x210 [ 585.323670][ C0] ? rw_verify_area+0xce/0x6d0 [ 585.328413][ C0] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 585.333847][ C0] vfs_writev+0x5ed/0xdd0 [ 585.338161][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 585.342998][ C0] ? __fget_files+0x21f/0x3d0 [ 585.347667][ C0] ? do_writev+0x28a/0x340 [ 585.352076][ C0] do_writev+0x28a/0x340 [ 585.356311][ C0] ? __pfx_do_writev+0x10/0x10 [ 585.361064][ C0] do_syscall_64+0x115/0x870 [ 585.365642][ C0] ? clear_bhb_loop+0x40/0x90 [ 585.370305][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.376177][ C0] RIP: 0033:0x7fb6c6f9ce59 [ 585.380567][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.400156][ C0] RSP: 002b:00007fb6c7dfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 585.408561][ C0] RAX: ffffffffffffffda RBX: 00007fb6c7215fa0 RCX: 00007fb6c6f9ce59 [ 585.416518][ C0] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 585.424461][ C0] RBP: 00007fb6c7032e6f R08: 0000000000000000 R09: 0000000000000000 [ 585.432408][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.440361][ C0] R13: 00007fb6c7216038 R14: 00007fb6c7215fa0 R15: 00007ffd11055d58 [ 585.448315][ C0] [ 585.451552][ C0] Kernel Offset: disabled [ 585.455853][ C0] Rebooting in 86400 seconds..