last executing test programs: 25.490994721s ago: executing program 0 (id=40): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="aa94aaaaaaaae43f6642531e0800450000250000e000041190780000000000000000ffff4e23001190786110000072c004003f"], 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) read(r3, &(0x7f0000000140)=""/9, 0xffffff64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='@D\t\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a00020102aef7a81aec3d75f363aa255613e974b92dc6452c2de84831cc32d9b8ff0cbc66aa8e1bd74f58cb3f92dc2b98c9e3883b2ac2c33819b0b7c6653341f9"], 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) 20.485808631s ago: executing program 0 (id=47): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f00000005c0)={&(0x7f0000000500)=[{0x8ca, 0x8}, {0x4}, {0x4e80, 0x0, 0x1}, {0x5, 0x8001, 0x2}, {0x9, 0x4, 0x1}, {0x1000}, {0x1, 0x2, 0x2}, {0x9, 0x0, 0x1}, {0xed20, 0xc, 0x2}, {0xffff, 0x9, 0x3}], 0xa, 0x10, 0x1, 0x6}) sendmsg$nl_route_sched(r2, 0x0, 0x4000010) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f0000000040)="3400000010000504010000000000000000000000000000000000000000000000120012000e0001006e657464657673696d000000", 0x34, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0090000180c200000300000000000086dd694fd2cd00183afffe8000000000000000000000000000bbff020000000000000000000000000001a0009078ff2b050002000000040000000000000034c9693f"], 0x52) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) r8 = io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r8, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000200)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000000100)={0x0}, 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 16.343967883s ago: executing program 0 (id=58): r0 = fsopen(&(0x7f0000000240)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)=@ethtool_gfeatures}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x40) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120101026fa2d840ac05180279ce01020301090212000150402009090444a6000350020664020bc614d4f90bbb9f53a6a2a7cd2c20508c87ff8611db473b936d1ef6638badf9cd8657af2c865dcaefcc6f14a69402c0a78e9f78a71dde13a9282ec043ead5"], 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="2e000000010000", 0x7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) 11.211650793s ago: executing program 0 (id=69): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.014757313s ago: executing program 0 (id=75): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0xfffffffffffffff7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001880)={0x104000200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x81) madvise(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, 0x0) r3 = gettid() tkill(r3, 0x11) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x4eb) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="00feffff2d2d1b7f1742c7424e6959fbeb8218000000000000e57a6a95bc16965182f18af02f116b2130507db5c6b8f7894f9996e057ee000100005335e58623854f3aeb4128da96d4a46afe1a26da52fcb80ba002d4fa16f8ef6d10c4d2c53cfcb5e41a6e5482c1119f94d7846cd47632c557644a6ddbe362f7327cdd114ca911bcf7f816232f5821f9fd418875b078d77cbd8b6e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001cb500000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x5a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setresuid(0xee00, 0xee00, 0x0) setuid(0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 9.20272933s ago: executing program 2 (id=76): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f0000000400)={0x0, 0x3e49, 0x40, 0x2, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="060000060010220420000000000000001007000000000000"]) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 8.210090985s ago: executing program 4 (id=78): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x1c4}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{r5, 0x80}], 0x1, 0x0, 0x0, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r7, &(0x7f0000007700), 0x318, 0xfc0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000126bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="14000b0020010000000000000000000000000001080004000000000014000b002001000000000000000000000000000208000100", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r8, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=r8], 0x108}}], 0x1, 0xc040) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000000)=0x80000000, 0x4) poll(&(0x7f00000001c0)=[{r0, 0x1}, {r0, 0x2000}, {r0, 0x1006}, {r9, 0x3000}], 0x4, 0x1) 7.582266686s ago: executing program 2 (id=83): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) 7.363546121s ago: executing program 2 (id=85): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.082833654s ago: executing program 3 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x275a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0001f1ff07000800ffd000000000cde1d36283c9c4fb74dab28618ff503e0d102bad18820402e9abffba95c8b150a61e68165079a4650b3e3f286936cd36a18fdecba5b399febcf1cdafbb88adbdfbd4ea6194aeb140f6f246d6994e7f6c43600c7595d4e199b82592e83d1ab7bf5e81dc8270f3cfa8485c5d65782285e92e8095c79f650fc5ad96b12246066ba9b40d1a8974397843548a7580030b647cd513830cceb64293ebb9d5a7bfe185cb145bc5dad1db495084b3fac53a4e0cc14d180fe70f2eecd961dfbf0e10c2454cf3df33000000000000000000"], 0xde) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) creat(0x0, 0x7a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) 5.587345665s ago: executing program 3 (id=88): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="06ac0111cfab", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}, @remote, @local, @local}}}}, 0x0) 5.48078058s ago: executing program 2 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./myconfig/usb_gadget/g1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r3, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0403d11, &(0x7f00000001c0)={0xfffffffd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040100"/20, @ANYRES32=r4, @ANYBLOB="c30801004b26be261800128008000100677470000c00028005000500000000000ad2f6190aefb28611217c257a6cd3273a8d61e37b15f6a2e0a2132ec22edb8ab7fbd7fedb5adadd32a260d1a256b1a5b0e562468ae5cf26492ebed185c9472fdd0aeef9219bbab3822851b348872ca495ef564879e295ebedc203b1c02575aea1644d70c0877afd5119bd0c49aa8296ec9ae5ac932c43fd4db44eac6e1bf8ad155521272f798c6d48e587"], 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r9 = getpgrp(0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.475827875s ago: executing program 4 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@report={0xb0, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x50801310198f26cd, {@in=@remote, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 5.356403168s ago: executing program 3 (id=92): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000880)={'nat\x00', 0x0, 0x0, 0x0, [0xfa, 0x5, 0xff7fb5b2, 0x3a8e5b6f, 0x40000, 0x2]}, &(0x7f0000000180)=0x15) 5.323481502s ago: executing program 1 (id=93): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000540)=[{0x22, '\x00', @buffer={"f3894a9747f54875844b18072f8b537cd39743aa00dd84cdb4afaf56f0bb1e81", 0x20}, 0x1}]}) 5.259493109s ago: executing program 4 (id=94): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/damon_reclaim/parameters/enabled\x00', 0x1, 0x0) write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x2, {0x30d0, {0x20, 0x8001, 0x5}, 0x1ce, 0x0, 0x0, 0x10000, 0x5, 0x7, 0x5, 0x3, 0x4, 0x39, 0x7bf, 0xfff, 0x5, 0x96a, 0x9d4d, 0x0, 0x0, 0x7}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000100000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000300000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b0000000000000000"], 0x0, 0x0, 0x0}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000000040)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, r8, r7, r8, 0x61, 0x8}, 0xf0, 0x10000, 0x9, 0x6, r9, r10, 0x7f}) shutdown(r4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000000)={0x1, 0xffc, 0x6, 0x8c}) 5.003615965s ago: executing program 1 (id=95): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003d80)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000780)=[@rthdr={{0x18, 0x29, 0x39, {0x4, 0x0, 0x2}}}], 0x18}}], 0x2, 0x0) 5.00299464s ago: executing program 3 (id=96): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x31, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {0xa, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x1) 4.609047836s ago: executing program 1 (id=97): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000380)='10000', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r8, &(0x7f0000000200)='1', 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)='0', 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) 3.573526231s ago: executing program 3 (id=98): socket$key(0xf, 0x3, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='select \n', 0x10) write(r1, &(0x7f0000000100)='file read /etc/passwd ex/c argv[0]/\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r3 = fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="640000001900010000000400000000001d01090050001180"], 0x64}}, 0x0) r5 = fsmount(r2, 0x0, 0x90) r6 = openat(r5, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r10, 0x4010aeab, &(0x7f0000000100)=@arm64_fp_extra={0x20200000001000d4, 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x40088c0) sendfile(r0, r0, 0x0, 0x2000009) 2.985314297s ago: executing program 4 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400000037000702fefffffffbdbdf25017c00000e0003"], 0x24}, 0x1, 0x0, 0x0, 0x60004841}, 0x8000) 1.761487099s ago: executing program 0 (id=100): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) dup2(r6, r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2502000000080001000200000052930aafe84cbd5f07b956d06f05e3c04b8e2adab45d9d21236144d792d0d760910e2dec1c1b340cdae13952a239772756efe067261c2a10de7f7d95121258d00418d86e41e6573724b0fa66ba65eaddceb98d8fe2d8dd16d89001ae864e7abf72c9c9af481641c376c107d990c5fe45de5f71dc188c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="080028bd7000ffdbdf25000000000800020002000000"], 0x1c}}, 0x4008c) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) r8 = socket(0x2, 0x2, 0x1) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x7df, @local, 0x9}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r10, &(0x7f00000001c0)={0x11, 0x0, r11}, 0x14) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000078000104020000000000000007000000640000001400018008"], 0x2c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) bpf$MAP_CREATE(0x0, 0x0, 0x19) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x86, "8bfe69f5a6f43df28cd3f49d2a3a7cd7acad75775f4e9cc6c6a2311321a65005958f76037865d18ec40960511bd82e5f3179514d4f546d4bb391fe14cc05366af4de16c1740e7bd2c52ef36db4ef8859a77e57f606efd0c32e668b1621306b805afd25b27f834bd1736e033c62af72acdcb762303769942ed830b8839b68ca2406f6509e2691"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 643.440125ms ago: executing program 1 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x7aff, 0x0, 0x14091, 0x8240}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 539.807762ms ago: executing program 2 (id=102): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x7, 0xfffffffe}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 445.190441ms ago: executing program 4 (id=103): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x34) 341.465563ms ago: executing program 1 (id=104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 309.457261ms ago: executing program 3 (id=105): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000300)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4', 0x31) 199.729825ms ago: executing program 2 (id=106): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 161.301062ms ago: executing program 4 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, 0x0, &(0x7f0000001000)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)={0x14, 0x76, 0x1, 0x0, 0x0, "", [@generic="a2"]}, 0x14}], 0x1}, 0x20000084) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x5a) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 0s ago: executing program 1 (id=108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2d, 0x2, 0x0) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, 0x0, &(0x7f0000000440)) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) r6 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0xc, 0xffff0000}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) kernel console output (not intermixed with test programs): [ 52.820269][ T31] audit: type=1400 audit(1788841156.634:111): avc: denied { write } for pid=5450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.889994][ T31] audit: type=1400 audit(1788841156.704:112): avc: denied { write } for pid=5461 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.677646][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 54.684060][ T31] audit: type=1400 audit(1788841158.494:123): avc: denied { write } for pid=5534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.737500][ T31] audit: type=1400 audit(1788841158.554:124): avc: denied { write } for pid=5545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.166545][ T31] audit: type=1400 audit(1788841158.984:125): avc: denied { write } for pid=5550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.228186][ T31] audit: type=1400 audit(1788841159.044:126): avc: denied { write } for pid=5561 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.419951][ T31] audit: type=1400 audit(1788841159.234:127): avc: denied { write } for pid=5564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.478774][ T31] audit: type=1400 audit(1788841159.294:128): avc: denied { write } for pid=5575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 60.369565][ T31] audit: type=1400 audit(1788841164.184:129): avc: denied { mounton } for pid=5585 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.393279][ T31] audit: type=1400 audit(1788841164.214:130): avc: denied { mount } for pid=5585 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.396261][ T5585] cgroup: Unknown subsys name 'net' [ 60.398622][ T31] audit: type=1400 audit(1788841164.214:131): avc: denied { unmount } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.545241][ T5585] cgroup: Unknown subsys name 'cpuset' [ 60.552782][ T5585] cgroup: Unknown subsys name 'rlimit' [ 60.704600][ T31] audit: type=1400 audit(1788841164.524:132): avc: denied { setattr } for pid=5585 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.706138][ T31] audit: type=1400 audit(1788841164.524:133): avc: denied { create } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.706180][ T31] audit: type=1400 audit(1788841164.524:134): avc: denied { write } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.706215][ T31] audit: type=1400 audit(1788841164.524:135): avc: denied { read } for pid=5585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.841958][ T5587] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.844768][ T31] audit: type=1400 audit(1788841164.664:136): avc: denied { relabelto } for pid=5587 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.844814][ T31] audit: type=1400 audit(1788841164.664:137): avc: denied { write } for pid=5587 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.878862][ T31] audit: type=1400 audit(1788841164.694:138): avc: denied { read } for pid=5585 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.822902][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.654317][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 65.654371][ T31] audit: type=1400 audit(1788841169.474:141): avc: denied { create } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.654417][ T31] audit: type=1400 audit(1788841169.474:142): avc: denied { read write } for pid=5597 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.654703][ T31] audit: type=1400 audit(1788841169.474:144): avc: denied { create } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.657952][ T31] audit: type=1400 audit(1788841169.474:143): avc: denied { open } for pid=5597 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 65.672260][ T31] audit: type=1400 audit(1788841169.474:145): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="socket:[5436]" dev="sockfs" ino=5436 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.690242][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.707621][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.727868][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.753887][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.754221][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.754526][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.755788][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.756029][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.756732][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.757014][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.786017][ T31] audit: type=1400 audit(1788841169.594:146): avc: denied { read } for pid=5598 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.786060][ T31] audit: type=1400 audit(1788841169.594:147): avc: denied { open } for pid=5597 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 65.789603][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.792606][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.793352][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.797852][ T31] audit: type=1400 audit(1788841169.604:148): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.808470][ T31] audit: type=1400 audit(1788841169.624:149): avc: denied { module_request } for pid=5597 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.812689][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.813153][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.871673][ T4919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.874157][ T4919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.874914][ T4919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.877059][ T4919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.877799][ T4919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.907517][ T4919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.909871][ T4919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.910266][ T4919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.911376][ T4919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.911943][ T4919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.991439][ T31] audit: type=1400 audit(1788841169.804:150): avc: denied { sys_module } for pid=5598 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.991468][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.991524][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 67.325974][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.326112][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.326951][ T5598] bridge_slave_0: entered allmulticast mode [ 67.328404][ T5598] bridge_slave_0: entered promiscuous mode [ 67.331561][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.331637][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.331730][ T5598] bridge_slave_1: entered allmulticast mode [ 67.333132][ T5598] bridge_slave_1: entered promiscuous mode [ 67.439650][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.469040][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.500733][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.500905][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.501239][ T5610] bridge_slave_0: entered allmulticast mode [ 67.503256][ T5610] bridge_slave_0: entered promiscuous mode [ 67.527545][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.527631][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.527991][ T5597] bridge_slave_0: entered allmulticast mode [ 67.529743][ T5597] bridge_slave_0: entered promiscuous mode [ 67.543825][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.543902][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.543995][ T5606] bridge_slave_0: entered allmulticast mode [ 67.545416][ T5606] bridge_slave_0: entered promiscuous mode [ 67.548170][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.548255][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.548347][ T5606] bridge_slave_1: entered allmulticast mode [ 67.549743][ T5606] bridge_slave_1: entered promiscuous mode [ 67.577031][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.580316][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.627061][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.634513][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.635129][ T5610] bridge_slave_1: entered allmulticast mode [ 67.636607][ T5610] bridge_slave_1: entered promiscuous mode [ 67.640157][ T5598] team0: Port device team_slave_0 added [ 67.640298][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.640374][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.640464][ T5597] bridge_slave_1: entered allmulticast mode [ 67.643109][ T5597] bridge_slave_1: entered promiscuous mode [ 67.665420][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.665498][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.665815][ T5613] bridge_slave_0: entered allmulticast mode [ 67.667973][ T5613] bridge_slave_0: entered promiscuous mode [ 67.685082][ T5598] team0: Port device team_slave_1 added [ 67.698044][ T5606] team0: Port device team_slave_0 added [ 67.700350][ T5606] team0: Port device team_slave_1 added [ 67.700493][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.700589][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.700873][ T5613] bridge_slave_1: entered allmulticast mode [ 67.703271][ T5613] bridge_slave_1: entered promiscuous mode [ 67.740986][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.773097][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.775831][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.787113][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.787125][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.787146][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.789700][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.789711][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.789731][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.793307][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.825436][ T5602] Bluetooth: hci2: command tx timeout [ 67.825821][ T5602] Bluetooth: hci0: command tx timeout [ 67.825987][ T4919] Bluetooth: hci1: command tx timeout [ 67.857509][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.857521][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.857542][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.861123][ T5597] team0: Port device team_slave_0 added [ 67.865633][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.868177][ T5610] team0: Port device team_slave_0 added [ 67.869804][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.869816][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.869837][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.878219][ T5597] team0: Port device team_slave_1 added [ 67.881795][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.906200][ T4919] Bluetooth: hci3: command tx timeout [ 67.919439][ T5610] team0: Port device team_slave_1 added [ 67.950822][ T5613] team0: Port device team_slave_0 added [ 67.989741][ T5613] team0: Port device team_slave_1 added [ 68.003415][ T4919] Bluetooth: hci4: command tx timeout [ 68.008403][ T5598] hsr_slave_0: entered promiscuous mode [ 68.009233][ T5598] hsr_slave_1: entered promiscuous mode [ 68.039868][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.039881][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.039901][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.117399][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.117423][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.117443][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.131548][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.131561][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.131582][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.146741][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.146755][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.146775][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.185317][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.185331][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.185352][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.186823][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.186834][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.186855][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.257148][ T5606] hsr_slave_0: entered promiscuous mode [ 68.257922][ T5606] hsr_slave_1: entered promiscuous mode [ 68.258531][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 68.258607][ T5606] Cannot create hsr debugfs directory [ 68.323024][ T5610] hsr_slave_0: entered promiscuous mode [ 68.323874][ T5610] hsr_slave_1: entered promiscuous mode [ 68.324420][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 68.324436][ T5610] Cannot create hsr debugfs directory [ 68.394582][ T5597] hsr_slave_0: entered promiscuous mode [ 68.395323][ T5597] hsr_slave_1: entered promiscuous mode [ 68.395830][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 68.395846][ T5597] Cannot create hsr debugfs directory [ 68.413521][ T5613] hsr_slave_0: entered promiscuous mode [ 68.414253][ T5613] hsr_slave_1: entered promiscuous mode [ 68.415095][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 68.415117][ T5613] Cannot create hsr debugfs directory [ 68.779557][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.794515][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.795393][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.805488][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.808197][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.815227][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.819988][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.832700][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.898693][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.907673][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.909493][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.918845][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.920943][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.925856][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.930847][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.940877][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.026802][ T5597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.035898][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.048173][ T5597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.057145][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.074031][ T5597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.083764][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.091528][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.092239][ T5597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.101988][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.161100][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.171032][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.181676][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.191881][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.193039][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.201630][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.218326][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.227189][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.233564][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.288209][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.288317][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.310800][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.315377][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.315480][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.375027][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.384171][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.397423][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.405916][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.406563][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.416199][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.431729][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.432146][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.441366][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.480088][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.480198][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.508562][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.508656][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.526475][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.617962][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.627719][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.651756][ T980] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.651856][ T980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.680158][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.695173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.695257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.741183][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.741281][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.779538][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.779632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.904833][ T52] Bluetooth: hci0: command tx timeout [ 69.904874][ T52] Bluetooth: hci2: command tx timeout [ 69.905037][ T4919] Bluetooth: hci1: command tx timeout [ 69.941405][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.982706][ T4919] Bluetooth: hci3: command tx timeout [ 70.007525][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.042039][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.042139][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.063692][ T4919] Bluetooth: hci4: command tx timeout [ 70.075751][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.075853][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.272848][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.423812][ T5598] veth0_vlan: entered promiscuous mode [ 70.480429][ T5598] veth1_vlan: entered promiscuous mode [ 70.580372][ T5598] veth0_macvtap: entered promiscuous mode [ 70.595386][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.605905][ T5598] veth1_macvtap: entered promiscuous mode [ 70.651619][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.665737][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.744020][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.775730][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.776547][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.776583][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.776615][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.867600][ T5610] veth0_vlan: entered promiscuous mode [ 70.963954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.964006][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.967521][ T5610] veth1_vlan: entered promiscuous mode [ 71.030482][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.080211][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.080250][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.110441][ T31] audit: type=1400 audit(1788841174.924:151): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.mcz5ZP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.118776][ T31] audit: type=1400 audit(1788841174.924:152): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.125000][ T31] audit: type=1400 audit(1788841174.924:153): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.mcz5ZP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.125423][ T5610] veth0_macvtap: entered promiscuous mode [ 71.128965][ T31] audit: type=1400 audit(1788841174.924:154): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.141063][ T5610] veth1_macvtap: entered promiscuous mode [ 71.147515][ T31] audit: type=1400 audit(1788841174.954:155): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.mcz5ZP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.158023][ T31] audit: type=1400 audit(1788841174.954:156): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.mcz5ZP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.184251][ T31] audit: type=1400 audit(1788841175.004:157): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.230260][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.237922][ T31] audit: type=1400 audit(1788841175.034:158): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.249499][ T31] audit: type=1400 audit(1788841175.064:159): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="gadgetfs" ino=7943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.277382][ T31] audit: type=1400 audit(1788841175.094:160): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.280263][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.296842][ T5613] veth0_vlan: entered promiscuous mode [ 71.362404][ T5613] veth1_vlan: entered promiscuous mode [ 71.400993][ T5598] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.450405][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.503093][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.521751][ T5613] veth0_macvtap: entered promiscuous mode [ 71.554559][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.555410][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.555450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.555463][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.555628][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.576632][ T5613] veth1_macvtap: entered promiscuous mode [ 71.670982][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.671020][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.696667][ T5606] veth0_vlan: entered promiscuous mode [ 71.699898][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.706847][ T5597] veth0_vlan: entered promiscuous mode [ 71.751973][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.758938][ T5606] veth1_vlan: entered promiscuous mode [ 71.770538][ T5597] veth1_vlan: entered promiscuous mode [ 71.936397][ T980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.960597][ T5597] veth0_macvtap: entered promiscuous mode [ 71.972823][ T5606] veth0_macvtap: entered promiscuous mode [ 71.983428][ T52] Bluetooth: hci0: command tx timeout [ 71.983512][ T5602] Bluetooth: hci2: command tx timeout [ 71.983568][ T4919] Bluetooth: hci1: command tx timeout [ 71.985635][ T239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.035129][ T5597] veth1_macvtap: entered promiscuous mode [ 72.043096][ T5606] veth1_macvtap: entered promiscuous mode [ 72.062594][ T4919] Bluetooth: hci3: command tx timeout [ 72.076037][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.076062][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.103522][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.103999][ T1248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128432][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.138266][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.145091][ T4919] Bluetooth: hci4: command tx timeout [ 72.160021][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.195879][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.220446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.220476][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.223595][ T1248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.226370][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.328102][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.353267][ T980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.353408][ T980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.356100][ T980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.356138][ T980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.356170][ T980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.564110][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.564140][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.582061][ T5792] syzkaller0: entered promiscuous mode [ 72.582370][ T5792] syzkaller0: entered allmulticast mode [ 72.649824][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.649859][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.770631][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.770664][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.886091][ T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.886125][ T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.938041][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.938114][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.938144][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.938174][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.223521][ T5800] capability: warning: `syz.2.8' uses 32-bit capabilities (legacy support in use) [ 73.737598][ T5808] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 73.740284][ T5808] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 74.097794][ T4919] Bluetooth: hci1: command tx timeout [ 74.098677][ T4919] Bluetooth: hci2: command tx timeout [ 74.098698][ T4919] Bluetooth: hci0: command tx timeout [ 74.161298][ T5602] Bluetooth: hci3: command tx timeout [ 74.248630][ T5602] Bluetooth: hci4: command tx timeout [ 74.518044][ T5808] Dev vda: unable to read RDB block 8 [ 74.518281][ T5808] vda: unable to read partition table [ 74.762737][ T5816] block device autoloading is deprecated and will be removed. [ 75.767921][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 76.080545][ T5823] openvswitch: netlink: Invalid VLAN frame [ 76.091769][ T5823] fuse: Unknown parameter '017777777777777777777770177777777777777777777718446744073709551615' [ 76.117084][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 76.117123][ T31] audit: type=1400 audit(1788841179.934:239): avc: denied { mount } for pid=5842 comm="syz.4.14" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 76.161725][ T5843] ima: policy update completed [ 76.166883][ T31] audit: type=1807 audit(1788841179.974:240): action=measure res=1 [ 76.181302][ T31] audit: type=1802 audit(1788841179.994:241): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.14" res=1 errno=0 [ 76.216784][ T5844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 76.418825][ T31] audit: type=1400 audit(1788841180.114:242): avc: denied { ioctl } for pid=5840 comm="syz.0.13" path="socket:[7044]" dev="sockfs" ino=7044 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.476617][ T31] audit: type=1400 audit(1788841180.294:243): avc: denied { mount } for pid=5840 comm="syz.0.13" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.541762][ T31] audit: type=1800 audit(1788841180.344:244): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.13" name="add_target_port" dev="sysfs" ino=21804 res=0 errno=0 [ 76.885187][ T5688] libceph: connect (1)[c::]:6789 error -101 [ 76.907255][ T5688] libceph: mon0 (1)[c::]:6789 connect error [ 76.925527][ T31] audit: type=1800 audit(1788841180.744:245): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115336 res=0 errno=0 [ 76.983965][ T31] audit: type=1400 audit(1788841180.784:246): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.984014][ T31] audit: type=1400 audit(1788841180.784:247): avc: denied { open } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.984052][ T31] audit: type=1400 audit(1788841180.784:248): avc: denied { ioctl } for pid=5610 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.147665][ T5846] ceph: No mds server is up or the cluster is laggy [ 77.880166][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 78.681714][ T5861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 78.799521][ T5689] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.021528][ T5689] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 79.044645][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 79.044680][ T5689] usb 4-1: Product: syz [ 79.044706][ T5689] usb 4-1: SerialNumber: syz [ 79.089223][ T5689] usb 4-1: config 0 descriptor?? [ 79.545990][ T5866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.550757][ T5866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.632850][ T5867] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.641864][ T5867] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 79.645698][ T5867] sctp: [Deprecated]: syz.1.18 (pid 5867) Use of int in max_burst socket option deprecated. [ 79.645698][ T5867] Use struct sctp_assoc_value instead [ 81.155557][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 81.155617][ T31] audit: type=1800 audit(1788841184.964:322): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 81.190988][ T31] audit: type=1800 audit(1788841185.004:323): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 81.321274][ T31] audit: type=1400 audit(1788841185.134:324): avc: denied { read write } for pid=5872 comm="syz.4.21" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.322202][ T31] audit: type=1400 audit(1788841185.134:325): avc: denied { open } for pid=5872 comm="syz.4.21" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.340712][ T31] audit: type=1400 audit(1788841185.134:326): avc: denied { map } for pid=5872 comm="syz.4.21" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.341013][ T31] audit: type=1400 audit(1788841185.134:327): avc: denied { execute } for pid=5872 comm="syz.4.21" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 81.403427][ T31] audit: type=1400 audit(1788841185.214:328): avc: denied { watch } for pid=5872 comm="syz.4.21" path="/3/file1" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.406492][ T31] audit: type=1400 audit(1788841185.224:329): avc: denied { watch_sb watch_reads } for pid=5872 comm="syz.4.21" path="/3/file1" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.417115][ T10] cfg80211: failed to load regulatory.db [ 81.560151][ T5875] ======================================================= [ 81.560151][ T5875] WARNING: The mand mount option has been deprecated and [ 81.560151][ T5875] and is ignored by this kernel. Remove the mand [ 81.560151][ T5875] option from the mount to silence this warning. [ 81.560151][ T5875] ======================================================= [ 82.204669][ T31] audit: type=1800 audit(1788841185.364:330): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.21" name="file0" dev="tmpfs" ino=38 res=0 errno=0 [ 82.204821][ T31] audit: type=1400 audit(1788841185.374:331): avc: denied { mounton } for pid=5872 comm="syz.4.21" path="/3/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.711008][ T5689] usb 4-1: USB disconnect, device number 2 [ 82.875548][ T5878] ªªªªª»: renamed from dummy0 (while UP) [ 83.913591][ T5884] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 83.924190][ T5884] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 83.938040][ T5884] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 84.279398][ T5859] IPVS: starting estimator thread 0... [ 84.363181][ T5892] IPVS: using max 35 ests per chain, 84000 per kthread [ 84.566932][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 84.577916][ T5894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.850137][ T5894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.042363][ T5717] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.313424][ T5703] Process accounting resumed [ 85.313614][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 85.716676][ T5717] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.942339][ T5717] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 85.942398][ T5717] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 85.942481][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.942512][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.942538][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.942564][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.942586][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 85.942611][ T5717] usb 3-1: config 168 interface 0 has no altsetting 0 [ 86.221405][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 86.221433][ T31] audit: type=1400 audit(1788841190.034:378): avc: denied { create } for pid=5901 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.223587][ T31] audit: type=1400 audit(1788841190.044:379): avc: denied { create } for pid=5901 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.303616][ T5717] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 86.303660][ T5717] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 86.303706][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.303734][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.303760][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.303786][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.303811][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 86.303861][ T5717] usb 3-1: config 168 interface 0 has no altsetting 0 [ 86.304889][ T5717] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 86.304942][ T5717] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 86.304978][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 86.305004][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.305156][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.305181][ T5717] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.305206][ T5717] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 86.305231][ T5717] usb 3-1: config 168 interface 0 has no altsetting 0 [ 86.307902][ T5717] usb 3-1: string descriptor 0 read error: -22 [ 86.308086][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.322812][ T5717] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 86.323853][ T31] audit: type=1800 audit(1788841190.134:380): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 86.332283][ T31] audit: type=1800 audit(1788841190.144:381): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=115513 res=0 errno=0 [ 86.332323][ T31] audit: type=1800 audit(1788841190.144:382): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=115542 res=0 errno=0 [ 86.349276][ T31] audit: type=1400 audit(1788841190.164:383): avc: denied { create } for pid=5901 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.408326][ T31] audit: type=1800 audit(1788841190.224:384): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=115520 res=0 errno=0 [ 86.514731][ T31] audit: type=1400 audit(1788841190.224:385): avc: denied { execute } for pid=5901 comm="syz.1.27" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 86.571692][ T31] audit: type=1800 audit(1788841190.334:386): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=115521 res=0 errno=0 [ 86.571735][ T31] audit: type=1800 audit(1788841190.334:387): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=115522 res=0 errno=0 [ 86.679612][ T5893] Zero length message leads to an empty skb [ 86.686808][ T5717] usb 3-1: USB disconnect, device number 2 [ 87.139470][ T5602] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 88.165822][ T5926] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 88.167283][ T5926] CPU: 1 UID: 0 PID: 5926 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 88.167312][ T5926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 88.167331][ T5926] Call Trace: [ 88.167340][ T5926] [ 88.167348][ T5926] dump_stack_lvl+0x100/0x190 [ 88.167385][ T5926] sysfs_warn_dup.cold+0x1c/0x28 [ 88.167418][ T5926] sysfs_create_dir_ns+0x24b/0x2b0 [ 88.167447][ T5926] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.167474][ T5926] ? kobject_namespace+0xa5/0x1a0 [ 88.167504][ T5926] ? __pfx_class_dir_child_ns_type+0x10/0x10 [ 88.167532][ T5926] ? class_dir_child_ns_type+0xd/0x60 [ 88.167561][ T5926] kobject_add_internal+0x2c8/0x930 [ 88.167598][ T5926] kobject_add+0x16a/0x1e0 [ 88.167627][ T5926] ? __pfx_kobject_add+0x10/0x10 [ 88.167658][ T5926] ? get_device_parent+0x1b3/0x4c0 [ 88.167680][ T5926] ? kobject_put+0xb9/0x640 [ 88.167715][ T5926] device_add+0x294/0x1970 [ 88.167740][ T5926] ? lockdep_init_map_type+0x5c/0x250 [ 88.167763][ T5926] ? __pfx_device_add+0x10/0x10 [ 88.167786][ T5926] ? lockdep_init_map_type+0x5c/0x250 [ 88.167809][ T5926] ? __init_waitqueue_head+0xca/0x150 [ 88.167841][ T5926] tty_register_device_attr+0x388/0x7f0 [ 88.167867][ T5926] ? __pfx_tty_register_device_attr+0x10/0x10 [ 88.167896][ T5926] ? tty_port_init+0x156/0x1c0 [ 88.167922][ T5926] gsm_activate_mux+0x155/0x2a0 [ 88.167946][ T5926] gsmld_ioctl+0xbbc/0x15c0 [ 88.167977][ T5926] ? __pfx_gsmld_ioctl+0x10/0x10 [ 88.168007][ T5926] ? rcu_is_watching+0x13/0xc0 [ 88.168047][ T5926] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.168071][ T5926] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 88.168102][ T5926] ? __pfx_gsmld_ioctl+0x10/0x10 [ 88.168125][ T5926] tty_ioctl+0x11b4/0x1640 [ 88.168148][ T5926] ? __pfx_tty_ioctl+0x10/0x10 [ 88.168170][ T5926] ? irqentry_exit+0x24d/0xa10 [ 88.168201][ T5926] ? lockdep_hardirqs_on+0x7d/0x110 [ 88.168227][ T5926] ? irqentry_exit+0x24d/0xa10 [ 88.168264][ T5926] ? security_file_ioctl+0x131/0x230 [ 88.168288][ T5926] ? __sanitizer_cov_trace_pc+0xc/0x70 [ 88.168314][ T5926] ? __pfx_tty_ioctl+0x10/0x10 [ 88.168337][ T5926] __x64_sys_ioctl+0x18e/0x210 [ 88.168360][ T5926] do_syscall_64+0x123/0x790 [ 88.168389][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.168411][ T5926] RIP: 0033:0x7f1d3079e159 [ 88.168429][ T5926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.168456][ T5926] RSP: 002b:00007f1d3170a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.168480][ T5926] RAX: ffffffffffffffda RBX: 00007f1d30a26180 RCX: 00007f1d3079e159 [ 88.168494][ T5926] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000006 [ 88.168508][ T5926] RBP: 00007f1d30835024 R08: 0000000000000000 R09: 0000000000000000 [ 88.168520][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.168532][ T5926] R13: 00007f1d30a26218 R14: 00007f1d30a26180 R15: 00007fff697e8138 [ 88.168561][ T5926] [ 88.168666][ T5926] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.744343][ T59] IPVS: starting estimator thread 0... [ 88.774942][ T5932] IPVS: sh: FWM 3 0x00000003 - no destination available [ 88.842507][ T5933] IPVS: using max 34 ests per chain, 81600 per kthread [ 90.270408][ T5936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.635445][ T5931] loop8: detected capacity change from 0 to 7 [ 90.767061][ T5931] Dev loop8: unable to read RDB block 7 [ 90.767115][ T5931] loop8: unable to read partition table [ 90.785332][ T5931] loop8: partition table beyond EOD, truncated [ 90.785360][ T5931] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 90.872929][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.035640][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 91.038787][ T10] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 91.042491][ T10] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 91.042517][ T10] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 91.042535][ T10] usb 4-1: config 135 has no interface number 0 [ 91.042559][ T10] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.044828][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.044849][ T10] usb 4-1: Product: syz [ 91.044864][ T10] usb 4-1: Manufacturer: syz [ 91.044878][ T10] usb 4-1: SerialNumber: syz [ 91.131631][ T10] uvcvideo 4-1:135.230: Found Unit with invalid ID 0 [ 91.135050][ T10] uvcvideo 4-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 91.135092][ T10] uvcvideo 4-1:135.230: No valid video chain found. [ 91.306374][ T31] kauditd_printk_skb: 88 callbacks suppressed [ 91.306404][ T31] audit: type=1800 audit(1788841195.124:476): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15865 res=0 errno=0 [ 91.314802][ T31] audit: type=1400 audit(1788841195.134:477): avc: denied { unlink } for pid=5598 comm="syz-executor" name="file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 91.361190][ T10] usb 4-1: USB disconnect, device number 3 [ 91.417409][ T31] audit: type=1800 audit(1788841195.234:478): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 91.437461][ T31] audit: type=1800 audit(1788841195.234:479): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116415 res=0 errno=0 [ 91.545814][ T31] audit: type=1400 audit(1788841195.364:480): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.548096][ T31] audit: type=1800 audit(1788841195.364:481): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 91.637172][ T31] audit: type=1800 audit(1788841195.454:482): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 91.688350][ T5956] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.758717][ T31] audit: type=1400 audit(1788841195.574:483): avc: denied { setopt } for pid=5953 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.782978][ T31] audit: type=1800 audit(1788841195.604:484): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31192 res=0 errno=0 [ 91.794787][ T31] audit: type=1800 audit(1788841195.604:485): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31215 res=0 errno=0 [ 91.953775][ T5717] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.114517][ T5717] usb 2-1: Using ep0 maxpacket: 16 [ 92.120248][ T5717] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.132796][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.147007][ T5717] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 92.158645][ T5717] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 92.158671][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.190792][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.190829][ T5717] usb 2-1: SerialNumber: syz [ 92.222905][ T5956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.231086][ T5956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.246433][ T5717] hub 2-1:1.0: bad descriptor, ignoring hub [ 92.260090][ T5717] hub 2-1:1.0: probe with driver hub failed with error -5 [ 92.338018][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 92.559447][ T5956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.560160][ T5956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.812456][ T5783] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.989002][ T5783] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 93.097354][ T5783] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 93.109553][ T5783] usb 1-1: config 1 has no interface number 0 [ 93.149581][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.158097][ T5783] usb 1-1: Product: syz [ 93.164197][ T5783] usb 1-1: Manufacturer: syz [ 93.169990][ T5783] usb 1-1: SerialNumber: syz [ 93.566492][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.775191][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.819489][ T5783] usb 1-1: 3:1 : does not exist [ 93.849595][ T5783] usb 1-1: 3:2 : does not exist [ 93.864536][ T5717] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 95.817886][ T5969] usb3503 0-0008: unknown mode is requested [ 95.817922][ T5969] usb3503 0-0008: usb3503_probe: probed in standby mode [ 95.818585][ T5969] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 96.332216][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 96.332253][ T31] audit: type=1800 audit(1788841200.144:525): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=116810 res=0 errno=0 [ 96.332296][ T31] audit: type=1800 audit(1788841200.144:526): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="address" dev="sysfs" ino=116813 res=0 errno=0 [ 96.351534][ T5783] usb 1-1: USB disconnect, device number 2 [ 96.389887][ T31] audit: type=1800 audit(1788841200.164:527): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=116771 res=0 errno=0 [ 96.389942][ T31] audit: type=1800 audit(1788841200.164:528): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=116772 res=0 errno=0 [ 96.389990][ T31] audit: type=1800 audit(1788841200.164:529): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=116749 res=0 errno=0 [ 96.390029][ T31] audit: type=1800 audit(1788841200.204:530): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=116773 res=0 errno=0 [ 96.437342][ T31] audit: type=1800 audit(1788841200.254:531): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26196 res=0 errno=0 [ 96.442845][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.484018][ T31] audit: type=1800 audit(1788841200.294:532): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=116591 res=0 errno=0 [ 96.491621][ T31] audit: type=1800 audit(1788841200.304:533): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=116594 res=0 errno=0 [ 96.500929][ T31] audit: type=1800 audit(1788841200.314:534): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 96.547456][ T5696] usb 2-1: USB disconnect, device number 2 [ 96.617438][ T5696] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 97.391200][ T5602] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 97.902065][ T5696] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.128815][ T5984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.128840][ T5984] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.129861][ T5984] vhci_hcd vhci_hcd.0: Device attached [ 98.132506][ T5990] vhci_hcd: connection closed [ 98.135717][ T154] vhci_hcd vhci_hcd.2: stop threads [ 98.136034][ T154] vhci_hcd vhci_hcd.2: release socket [ 98.136074][ T154] vhci_hcd vhci_hcd.2: disconnect device [ 98.144605][ T5988] syzkaller1: entered promiscuous mode [ 98.144894][ T5988] syzkaller1: entered allmulticast mode [ 98.814185][ T5696] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 98.857424][ T5696] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.857466][ T5696] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 98.884982][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.885014][ T5696] usb 2-1: Product: syz [ 98.885293][ T5696] usb 2-1: Manufacturer: syz [ 98.885309][ T5696] usb 2-1: SerialNumber: syz [ 99.212722][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.212876][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.212929][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.212967][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213024][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213061][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213099][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213155][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213190][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.213228][ T5999] netlink: 'syz.4.51': attribute type 3 has an invalid length. [ 99.346360][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 99.658317][ T6006] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 99.658393][ T6006] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 99.658442][ T6006] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 99.719686][ T6006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.773448][ T6006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 99.892181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 100.842974][ T5689] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.986963][ T6035] netlink: 666 bytes leftover after parsing attributes in process `syz.3.59'. [ 101.003746][ T5689] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 101.008036][ T5689] usb 1-1: Dual-Role OTG device on HNP port [ 101.009857][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.018081][ T5696] usb 2-1: USB disconnect, device number 3 [ 101.131346][ T5689] gspca_main: spca501-2.14.0 probing 0000:0000 [ 101.131848][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.132271][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.134032][ T5689] gspca_spca501: reg write: error -32 [ 101.134044][ T5689] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 101.134108][ T5689] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 101.144195][ T5689] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.298809][ T6048] Bluetooth: MGMT ver 1.23 [ 101.349933][ T6048] IPv6: sit1: Disabled Multicast RS [ 101.351098][ T6048] sit1: entered allmulticast mode [ 101.374697][ T31] kauditd_printk_skb: 92 callbacks suppressed [ 101.374723][ T31] audit: type=1800 audit(1788841205.194:627): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 101.423577][ T31] audit: type=1800 audit(1788841205.244:628): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117678 res=0 errno=0 [ 101.481591][ T31] audit: type=1800 audit(1788841205.294:629): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=117707 res=0 errno=0 [ 101.510434][ T31] audit: type=1800 audit(1788841205.324:630): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=117685 res=0 errno=0 [ 101.537915][ T31] audit: type=1800 audit(1788841205.354:631): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=117686 res=0 errno=0 [ 101.563364][ T31] audit: type=1800 audit(1788841205.384:632): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=117687 res=0 errno=0 [ 101.593874][ T31] audit: type=1800 audit(1788841205.414:633): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 101.617679][ T31] audit: type=1800 audit(1788841205.414:634): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117727 res=0 errno=0 [ 101.617720][ T31] audit: type=1800 audit(1788841205.414:635): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31342 res=0 errno=0 [ 101.699476][ T31] audit: type=1800 audit(1788841205.514:636): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31365 res=0 errno=0 [ 101.722057][ T5696] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.872480][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 101.880728][ T5696] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 101.904671][ T6057] No such timeout policy "syz1" [ 101.935534][ T5696] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 101.946266][ T5696] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.946363][ T5696] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.946417][ T5696] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.946474][ T5696] usb 5-1: config 7 interface 0 has no altsetting 0 [ 101.975164][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.312183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.585214][ T5602] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 103.589032][ T5602] Bluetooth: hci1: Injecting HCI hardware error event [ 103.592001][ T4919] Bluetooth: hci1: hardware error 0x00 [ 104.683018][ T5696] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0001/input/input5 [ 105.133866][ T5696] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 105.180117][ T5696] usb 5-1: USB disconnect, device number 2 [ 105.407102][ T6068] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 105.574465][ T6062] syzkaller1: entered promiscuous mode [ 105.574494][ T6062] syzkaller1: entered allmulticast mode [ 105.613684][ T6075] fido_id[6075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 105.743620][ T4919] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 105.830193][ T6078] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.864837][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.874514][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.190371][ T6100] xt_CT: No such helper "snmp_trap" [ 106.301946][ T6060] nvmet: connect request for invalid subsystem tes! [ 106.317858][ T6094] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 106.458857][ T6111] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 106.487392][ T6111] CIFS: Attempting to mount //127.0.0.1/share [ 106.507754][ T5696] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.540351][ T6111] CIFS: VFS: Error connecting to socket. Aborting operation. [ 106.542089][ T6111] CIFS: VFS: cifs_mount failed w/return code = -111 [ 106.697328][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 106.708938][ T31] audit: type=1400 audit(1788841210.514:711): avc: denied { read } for pid=6107 comm="syz.4.74" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.732762][ T5696] usb 4-1: Using ep0 maxpacket: 8 [ 106.757236][ T5696] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.767899][ T5696] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 106.803999][ T31] audit: type=1400 audit(1788841210.604:712): avc: denied { open } for pid=6107 comm="syz.4.74" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 106.847449][ T5696] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 106.906901][ T5696] usb 4-1: string descriptor 0 read error: -22 [ 106.914252][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.993090][ T31] audit: type=1400 audit(1788841210.804:713): avc: denied { ioctl } for pid=6107 comm="syz.4.74" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.539265][ T31] audit: type=1800 audit(1788841211.344:714): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14881 res=0 errno=0 [ 107.618865][ T5696] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 107.639568][ T31] audit: type=1800 audit(1788841211.454:715): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=119091 res=0 errno=0 [ 107.661524][ T31] audit: type=1800 audit(1788841211.454:716): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=119120 res=0 errno=0 [ 107.661567][ T31] audit: type=1800 audit(1788841211.454:717): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=119098 res=0 errno=0 [ 107.661601][ T31] audit: type=1800 audit(1788841211.454:718): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=119099 res=0 errno=0 [ 107.661632][ T31] audit: type=1800 audit(1788841211.454:719): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=119100 res=0 errno=0 [ 107.752194][ T31] audit: type=1800 audit(1788841211.554:720): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=119140 res=0 errno=0 [ 107.872113][ T5696] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.886344][ T5696] usb 4-1: disable ehci-hcd to run US-144 [ 107.898934][ T5696] usb 4-1: disable ehci-hcd to run US-144 [ 107.912731][ T5696] usb 4-1: disable ehci-hcd to run US-144 [ 107.922126][ T5696] usb 4-1: USB disconnect, device number 4 [ 108.185785][ T6120] lo speed is unknown, defaulting to 1000 [ 108.185956][ T6120] lo speed is unknown, defaulting to 1000 [ 108.211289][ T6120] lo speed is unknown, defaulting to 1000 [ 108.223039][ T6120] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 108.239125][ T6120] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 108.239208][ T6120] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 108.330535][ T6120] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.542338][ T6120] lo speed is unknown, defaulting to 1000 [ 108.566473][ T6120] lo speed is unknown, defaulting to 1000 [ 108.584429][ T6120] lo speed is unknown, defaulting to 1000 [ 108.606053][ T6120] lo speed is unknown, defaulting to 1000 [ 108.621490][ T6120] lo speed is unknown, defaulting to 1000 [ 109.066668][ T6122] smbdirect: ib_dev[syz1] removed [ 109.632736][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 109.672971][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 109.686251][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 109.695634][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 109.751221][ T6139] syz.4.78: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.776439][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.4.78 Not tainted syzkaller #0 PREEMPT(full) [ 109.776464][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 109.776476][ T6139] Call Trace: [ 109.776484][ T6139] [ 109.776492][ T6139] dump_stack_lvl+0x100/0x190 [ 109.776528][ T6139] warn_alloc.cold+0x9e/0xb2 [ 109.776552][ T6139] ? __pfx_warn_alloc+0x10/0x10 [ 109.776582][ T6139] ? __kasan_kmalloc+0xaa/0xb0 [ 109.776602][ T6139] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 109.776629][ T6139] ? xskq_create+0x52/0x290 [ 109.776649][ T6139] ? do_sock_setsockopt+0xf3/0x1d0 [ 109.776675][ T6139] ? do_syscall_64+0x123/0x790 [ 109.776698][ T6139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.776733][ T6139] ? xsk_setsockopt+0x56f/0xab0 [ 109.776753][ T6139] __vmalloc_node_range_noprof+0x123b/0x1420 [ 109.776788][ T6139] ? xsk_setsockopt+0x56f/0xab0 [ 109.776813][ T6139] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.776838][ T6139] ? kasan_save_track+0x14/0x30 [ 109.776859][ T6139] ? __kasan_kmalloc+0xaa/0xb0 [ 109.776881][ T6139] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 109.776910][ T6139] ? xskq_create+0x52/0x290 [ 109.776931][ T6139] ? xsk_setsockopt+0x56f/0xab0 [ 109.776949][ T6139] xskq_create+0x18f/0x290 [ 109.776970][ T6139] ? xsk_setsockopt+0x56f/0xab0 [ 109.776996][ T6139] xsk_setsockopt+0x56f/0xab0 [ 109.777020][ T6139] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.777040][ T6139] ? find_held_lock+0x2b/0x80 [ 109.777066][ T6139] ? __fget_files+0x215/0x3d0 [ 109.777104][ T6139] ? selinux_socket_setsockopt+0x6a/0x80 [ 109.777138][ T6139] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.777161][ T6139] do_sock_setsockopt+0xf3/0x1d0 [ 109.777190][ T6139] __sys_setsockopt+0x195/0x220 [ 109.777216][ T6139] __x64_sys_setsockopt+0xbd/0x160 [ 109.777236][ T6139] ? do_syscall_64+0xae/0x790 [ 109.777259][ T6139] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.777283][ T6139] do_syscall_64+0x123/0x790 [ 109.777310][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.777331][ T6139] RIP: 0033:0x7efd9819e159 [ 109.777348][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.777368][ T6139] RSP: 002b:00007efd963d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.777388][ T6139] RAX: ffffffffffffffda RBX: 00007efd98426090 RCX: 00007efd9819e159 [ 109.777403][ T6139] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000014 [ 109.777416][ T6139] RBP: 00007efd98235024 R08: 0000000000000004 R09: 0000000000000000 [ 109.777428][ T6139] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.777440][ T6139] R13: 00007efd98426128 R14: 00007efd98426090 R15: 00007ffdca519ed8 [ 109.777469][ T6139] [ 109.913211][ T6139] Mem-Info: [ 109.913228][ T6139] active_anon:10855 inactive_anon:0 isolated_anon:0 [ 109.913228][ T6139] active_file:0 inactive_file:44306 isolated_file:0 [ 109.913228][ T6139] unevictable:0 dirty:879 writeback:0 [ 109.913228][ T6139] slab_reclaimable:11229 slab_unreclaimable:95538 [ 109.913228][ T6139] mapped:30680 shmem:525 pagetables:1244 [ 109.913228][ T6139] sec_pagetables:0 bounce:0 [ 109.913228][ T6139] kernel_misc_reclaimable:0 [ 109.913228][ T6139] free:1286835 free_pcp:9375 free_cma:0 [ 109.913284][ T6139] Node 0 active_anon:43420kB inactive_anon:0kB active_file:0kB inactive_file:177020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122720kB dirty:3508kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12360kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.913338][ T6139] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.913386][ T6139] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.913441][ T6139] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 109.913475][ T6139] Node 0 DMA32 free:1197220kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:43420kB inactive_anon:0kB active_file:0kB inactive_file:177020kB unevictable:0kB writepending:3508kB zspages:0kB present:3129332kB managed:2530196kB mlocked:0kB bounce:0kB free_pcp:37048kB local_pcp:16212kB free_cma:0kB [ 109.920284][ T6139] lowmem_reserve[]: 0 0 0 0 0 [ 109.920322][ T6139] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.920378][ T6139] lowmem_reserve[]: 0 0 0 0 0 [ 109.920410][ T6139] Node 1 Normal free:3934760kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:452kB local_pcp:400kB free_cma:0kB [ 109.920465][ T6139] lowmem_reserve[]: 0 0 0 0 0 [ 109.920496][ T6139] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.920626][ T6139] Node 0 DMA32: 975*4kB (UME) 763*8kB (UME) 256*16kB (UME) 223*32kB (UM) 53*64kB (UME) 40*128kB (UM) 11*256kB (ME) 4*512kB (ME) 3*1024kB (UM) 6*2048kB (UME) 280*4096kB (UM) = 1196852kB [ 109.920790][ T6139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.920892][ T6139] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 9*16kB (UM) 6*32kB (UM) 4*64kB (UM) 5*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3934760kB [ 109.921041][ T6139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.921057][ T6139] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.921077][ T6139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.921094][ T6139] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.921110][ T6139] 44827 total pagecache pages [ 109.921117][ T6139] 0 pages in swap cache [ 109.921123][ T6139] Free swap = 124996kB [ 109.921131][ T6139] Total swap = 124996kB [ 109.921139][ T6139] 2097051 pages RAM [ 109.921145][ T6139] 0 pages HighMem/MovableOnly [ 109.921151][ T6139] 432868 pages reserved [ 109.921158][ T6139] 0 pages cma reserved [ 110.595745][ T6150] CIFS: Attempting to mount //127.0.0.1/share [ 110.616409][ T6150] CIFS: VFS: Error connecting to socket. Aborting operation. [ 110.626660][ T6150] CIFS: VFS: cifs_mount failed w/return code = -111 [ 111.742052][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 111.742087][ T31] audit: type=1800 audit(1788841215.554:761): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 111.791470][ T31] audit: type=1400 audit(1788841215.604:762): avc: denied { getopt } for pid=6159 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.822716][ T31] audit: type=1400 audit(1788841215.644:763): avc: denied { firmware_load } for pid=6155 comm="syz.2.90" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 111.823994][ T6162] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 111.868921][ T31] audit: type=1800 audit(1788841215.684:764): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15004 res=0 errno=0 [ 111.973200][ T31] audit: type=1800 audit(1788841215.794:765): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 112.078521][ T31] audit: type=1800 audit(1788841215.884:766): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 112.107270][ T31] audit: type=1800 audit(1788841215.924:767): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.94" name="pm_test" dev="sysfs" ino=1415 res=0 errno=0 [ 112.130110][ T31] audit: type=1400 audit(1788841215.944:768): avc: denied { read write } for pid=6155 comm="syz.2.90" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.154672][ T31] audit: type=1400 audit(1788841215.944:769): avc: denied { open } for pid=6155 comm="syz.2.90" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.154718][ T31] audit: type=1400 audit(1788841215.974:770): avc: denied { ioctl } for pid=6155 comm="syz.2.90" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.052178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.127427][ T6180] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.444934][ T6190] validate_nla: 44 callbacks suppressed [ 116.445008][ T6190] netlink: 'syz.4.99': attribute type 3 has an invalid length. [ 116.469492][ T6158] syz.2.90 (6158) used greatest stack depth: 16664 bytes left [ 116.517439][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.534101][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.708031][ T6196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.100'. [ 116.761037][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 116.767227][ T31] audit: type=1400 audit(1788841220.574:784): avc: denied { getopt } for pid=6206 comm="syz.4.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.788983][ T31] audit: type=1800 audit(1788841220.584:785): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15250 res=0 errno=0 [ 116.822857][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 116.848982][ T31] audit: type=1800 audit(1788841220.664:786): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15127 res=0 errno=0 [ 116.873983][ T31] audit: type=1400 audit(1788841220.664:787): avc: denied { bind } for pid=6195 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.893313][ T31] audit: type=1400 audit(1788841220.664:788): avc: denied { name_bind } for pid=6195 comm="syz.0.100" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 116.914972][ T31] audit: type=1400 audit(1788841220.664:789): avc: denied { node_bind } for pid=6195 comm="syz.0.100" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 116.915015][ T31] audit: type=1400 audit(1788841220.694:790): avc: denied { ioctl } for pid=6195 comm="syz.0.100" path="socket:[9662]" dev="sockfs" ino=9662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.915054][ T31] audit: type=1400 audit(1788841220.694:791): avc: denied { bind } for pid=6195 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.915090][ T31] audit: type=1800 audit(1788841220.714:792): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15373 res=0 errno=0 [ 116.972330][ T31] audit: type=1326 audit(1788841220.754:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.0.100" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3079e159 code=0x7ffc0000 [ 117.065143][ ** replaying previous printk message ** [ 117.065143][ T6213] nvme nvme0: failed to connect socket: -111 [ 117.065491][ T6213] [ 117.078602][ T6213] ====================================================== [ 117.085608][ T6213] WARNING: possible circular locking dependency detected [ 117.092622][ T6213] syzkaller #0 Not tainted [ 117.097029][ T6213] ------------------------------------------------------ [ 117.104035][ T6213] syz.3.105/6213 is trying to acquire lock: [ 117.109919][ T6213] ffff8880570be9c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 117.120041][ T6213] [ 117.120041][ T6213] but task is already holding lock: [ 117.127400][ T6213] ffffffff8ff4c700 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 117.136374][ T6213] [ 117.136374][ T6213] which lock already depends on the new lock. [ 117.136374][ T6213] [ 117.146769][ T6213] [ 117.146769][ T6213] the existing dependency chain (in reverse order) is: [ 117.155786][ T6213] [ 117.155786][ T6213] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 117.163366][ T6213] lock_acquire+0x1d1/0x380 [ 117.168393][ T6213] __mutex_lock+0x1a4/0x1bd0 [ 117.173512][ T6213] nvmf_dev_show+0x26/0x210 [ 117.178542][ T6213] seq_read_iter+0x32f/0x1270 [ 117.183746][ T6213] seq_read+0x344/0x4d0 [ 117.188426][ T6213] vfs_read+0x1e4/0xb40 [ 117.193101][ T6213] ksys_read+0x12a/0x250 [ 117.197867][ T6213] do_syscall_64+0x123/0x790 [ 117.202983][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.209400][ T6213] [ 117.209400][ T6213] -> #3 (&p->lock){+.+.}-{4:4}: [ 117.216443][ T6213] lock_acquire+0x1d1/0x380 [ 117.221468][ T6213] __mutex_lock+0x1a4/0x1bd0 [ 117.226582][ T6213] seq_read_iter+0xe1/0x1270 [ 117.231698][ T6213] kernfs_fop_read_iter+0x46c/0x610 [ 117.237419][ T6213] __kernel_read+0x397/0xad0 [ 117.242530][ T6213] integrity_kernel_read+0x7e/0xb0 [ 117.248174][ T6213] ima_calc_file_hash_tfm+0x25e/0x350 [ 117.254066][ T6213] ima_calc_file_hash+0x1e3/0x380 [ 117.259613][ T6213] ima_collect_measurement+0x94f/0xb30 [ 117.265591][ T6213] process_measurement+0xdfe/0x2350 [ 117.271308][ T6213] ima_file_check+0xc3/0x110 [ 117.276417][ T6213] security_file_post_open+0xc4/0x210 [ 117.282308][ T6213] path_openat+0x5cd/0x2440 [ 117.287336][ T6213] do_file_open+0x20e/0x430 [ 117.292361][ T6213] do_sys_openat2+0x10f/0x1e0 [ 117.297565][ T6213] __x64_sys_openat+0x12d/0x210 [ 117.302939][ T6213] do_syscall_64+0x123/0x790 [ 117.308053][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.314466][ T6213] [ 117.314466][ T6213] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 117.323066][ T6213] lock_acquire+0x1d1/0x380 [ 117.328089][ T6213] __mutex_lock+0x1a4/0x1bd0 [ 117.333205][ T6213] process_measurement+0x5ab/0x2350 [ 117.338921][ T6213] ima_file_check+0xc3/0x110 [ 117.344048][ T6213] security_file_post_open+0xc4/0x210 [ 117.349938][ T6213] path_openat+0x5cd/0x2440 [ 117.354960][ T6213] do_file_open+0x20e/0x430 [ 117.359985][ T6213] file_open_name+0x1c3/0x3e0 [ 117.365179][ T6213] filp_open+0x2e/0x50 [ 117.369756][ T6213] kernel_read_file_from_path_initns+0xec/0x240 [ 117.376499][ T6213] _request_firmware+0x733/0x13c0 [ 117.382036][ T6213] request_firmware+0x35/0x50 [ 117.387227][ T6213] reg_reload_regdb+0x85/0x460 [ 117.392498][ T6213] genl_family_rcv_msg_doit+0x214/0x300 [ 117.398551][ T6213] genl_rcv_msg+0x560/0x800 [ 117.403559][ T6213] netlink_rcv_skb+0x159/0x420 [ 117.408826][ T6213] genl_rcv+0x28/0x40 [ 117.413314][ T6213] netlink_unicast+0x585/0x850 [ 117.418580][ T6213] netlink_sendmsg+0x8b0/0xda0 [ 117.423845][ T6213] ____sys_sendmsg+0xa4d/0xbe0 [ 117.429120][ T6213] ___sys_sendmsg+0x190/0x1e0 [ 117.434310][ T6213] __sys_sendmsg+0x160/0x210 [ 117.439403][ T6213] do_syscall_64+0x123/0x790 [ 117.444503][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.450903][ T6213] [ 117.450903][ T6213] -> #1 (cb_lock){++++}-{4:4}: [ 117.457835][ T6213] lock_acquire+0x1d1/0x380 [ 117.462842][ T6213] down_read+0x99/0x4c0 [ 117.467507][ T6213] genl_release+0x7e/0x1d0 [ 117.472427][ T6213] netlink_release+0x105e/0x2000 [ 117.477876][ T6213] __sock_release+0xb3/0x260 [ 117.482976][ T6213] sock_close+0x1c/0x30 [ 117.487655][ T6213] __fput+0x3ff/0xb50 [ 117.492159][ T6213] fput_close_sync+0x118/0x250 [ 117.497449][ T6213] __x64_sys_close+0x8b/0x120 [ 117.502648][ T6213] do_syscall_64+0x123/0x790 [ 117.507754][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.514152][ T6213] [ 117.514152][ T6213] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 117.522826][ T6213] check_prev_add+0xeb/0xe60 [ 117.527921][ T6213] __lock_acquire+0x1528/0x1f40 [ 117.533278][ T6213] lock_acquire+0x1d1/0x380 [ 117.538295][ T6213] down_write+0x8b/0x1f0 [ 117.543054][ T6213] __sock_release+0x86/0x260 [ 117.548149][ T6213] sock_close+0x1c/0x30 [ 117.552810][ T6213] __fput+0x3ff/0xb50 [ 117.557307][ T6213] __fput_sync+0xd7/0x100 [ 117.562146][ T6213] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 117.568553][ T6213] nvme_tcp_configure_admin_queue+0x26/0x530 [ 117.575042][ T6213] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 117.580578][ T6213] nvme_tcp_create_ctrl+0x970/0xd90 [ 117.586283][ T6213] nvmf_dev_write+0x4ee/0xb60 [ 117.591470][ T6213] vfs_write+0x2aa/0x1050 [ 117.596305][ T6213] ksys_write+0x12a/0x250 [ 117.601138][ T6213] do_syscall_64+0x123/0x790 [ 117.606235][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.612631][ T6213] [ 117.612631][ T6213] other info that might help us debug this: [ 117.612631][ T6213] [ 117.622837][ T6213] Chain exists of: [ 117.622837][ T6213] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 117.622837][ T6213] [ 117.636205][ T6213] Possible unsafe locking scenario: [ 117.636205][ T6213] [ 117.643631][ T6213] CPU0 CPU1 [ 117.648972][ T6213] ---- ---- [ 117.654317][ T6213] lock(nvmf_dev_mutex); [ 117.658626][ T6213] lock(&p->lock); [ 117.664932][ T6213] lock(nvmf_dev_mutex); [ 117.671762][ T6213] lock(&sb->s_type->i_mutex_key#13); [ 117.677212][ T6213] [ 117.677212][ T6213] *** DEADLOCK *** [ 117.677212][ T6213] [ 117.685332][ T6213] locks held by syz.3.105/6213: 1, last CPU#0: [ 117.691465][ T6213] #0: ffffffff8ff4c700 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 117.700850][ T6213] [ 117.700850][ T6213] stack backtrace: [ 117.706728][ T6213] CPU: 0 UID: 0 PID: 6213 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 117.715909][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 117.725962][ T6213] Call Trace: [ 117.729236][ T6213] [ 117.732152][ T6213] dump_stack_lvl+0x100/0x190 [ 117.736831][ T6213] print_circular_bug.cold+0x178/0x1be [ 117.742285][ T6213] check_noncircular+0x146/0x160 [ 117.747211][ T6213] check_prev_add+0xeb/0xe60 [ 117.751791][ T6213] __lock_acquire+0x1528/0x1f40 [ 117.756629][ T6213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.762686][ T6213] lock_acquire+0x1d1/0x380 [ 117.767173][ T6213] ? __sock_release+0x86/0x260 [ 117.771924][ T6213] ? __pfx___might_resched+0x10/0x10 [ 117.777202][ T6213] down_write+0x8b/0x1f0 [ 117.781439][ T6213] ? __sock_release+0x86/0x260 [ 117.786198][ T6213] ? __pfx_down_write+0x10/0x10 [ 117.791043][ T6213] ? __pfx_locks_remove_file+0x10/0x10 [ 117.796496][ T6213] __sock_release+0x86/0x260 [ 117.801072][ T6213] ? __pfx_sock_close+0x10/0x10 [ 117.805908][ T6213] sock_close+0x1c/0x30 [ 117.810050][ T6213] __fput+0x3ff/0xb50 [ 117.814024][ T6213] ? kfree+0x22b/0x6d0 [ 117.818087][ T6213] __fput_sync+0xd7/0x100 [ 117.822405][ T6213] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 117.828292][ T6213] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 117.834433][ T6213] nvme_tcp_configure_admin_queue+0x26/0x530 [ 117.840402][ T6213] ? __wake_up+0x3f/0x60 [ 117.844641][ T6213] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 117.849654][ T6213] ? mark_held_locks+0x40/0x70 [ 117.854404][ T6213] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 117.860027][ T6213] ? lockdep_hardirqs_on+0x7d/0x110 [ 117.865213][ T6213] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.871002][ T6213] ? nvme_change_ctrl_state+0xc0/0x440 [ 117.876453][ T6213] nvme_tcp_create_ctrl+0x970/0xd90 [ 117.881639][ T6213] nvmf_dev_write+0x4ee/0xb60 [ 117.886305][ T6213] vfs_write+0x2aa/0x1050 [ 117.890621][ T6213] ? __pfx_nvmf_dev_write+0x10/0x10 [ 117.895807][ T6213] ? lock_acquire+0x1d1/0x380 [ 117.900468][ T6213] ? __fget_files+0x34/0x3d0 [ 117.905045][ T6213] ? __pfx_vfs_write+0x10/0x10 [ 117.909790][ T6213] ? find_held_lock+0x2b/0x80 [ 117.914459][ T6213] ? __fget_files+0x215/0x3d0 [ 117.919122][ T6213] ? __fget_files+0x215/0x3d0 [ 117.923785][ T6213] ? __fget_files+0x21f/0x3d0 [ 117.928447][ T6213] ksys_write+0x12a/0x250 [ 117.932762][ T6213] ? __pfx_ksys_write+0x10/0x10 [ 117.937599][ T6213] do_syscall_64+0x123/0x790 [ 117.942178][ T6213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.948056][ T6213] RIP: 0033:0x7f4b22b9e159 [ 117.952466][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.972056][ T6213] RSP: 002b:00007f4b23b2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.980453][ T6213] RAX: ffffffffffffffda RBX: 00007f4b22e25fa0 RCX: 00007f4b22b9e159 [ 117.988406][ T6213] RDX: 0000000000000031 RSI: 0000200000000300 RDI: 0000000000000003 [ 117.996359][ T6213] RBP: 00007f4b22c35024 R08: 0000000000000000 R09: 0000000000000000 [ 118.004311][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.012264][ T6213] R13: 00007f4b22e26038 R14: 00007f4b22e25fa0 R15: 00007ffe5c5044b8 [ 118.020225][ T6213] [ 118.162226][ T1586] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.423426][ T6240] tmpfs: Unknown parameter '' [ 118.433348][ T6240] capability: warning: `syz.1.108' uses deprecated v2 capabilities in a way that may be insecure [ 118.594160][ T1586] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 118.604176][ T1586] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.605305][ T1586] usb 3-1: config 0 descriptor?? [ 118.614894][ T1586] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 119.019131][ T1586] gspca_stv06xx: I2C: Read error writing address: -71 [ 119.026195][ T1586] usb 3-1: USB disconnect, device number 3