last executing test programs: 2m16.506434543s ago: executing program 1 (id=663): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x2, @mcast1, 0xc}}, 0x0, 0x0, 0x4e, 0x0, "9e0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16efe7c7c1c8ecfcc76b47d9ab75573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) io_setup(0x8, &(0x7f0000000180)=0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x0, 0x318, 0xffffffff, 0xf0, 0xf0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000300), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff, 0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'vxcan1\x00', {}, {}, 0x3a, 0x1, 0x3, 0x12}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010100, @ipv6=@loopback, @gre_key=0x4, @icmp_id=0x66}}}, {{@ipv6={@private1, @empty, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'rose0\x00', {0xff}, {}, 0x3b, 0x5, 0x4, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xeb, [0x914c, 0xc], 0x3ff, 0x61, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x19}], 0xa}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x67}}}, {{@ipv6={@mcast1, @mcast1, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {0x83dcf73e86c01113}, 0x0, 0x6, 0x1, 0x50}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@loopback, @gre_key=0x8001, @gre_key=0x35}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010102, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, @port=0x4e24, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) io_submit(r3, 0x0, &(0x7f0000000b00)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d0800090003", 0x17}], 0x1}, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x1, r6}) write$FUSE_INIT(r5, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) semop(0x0, &(0x7f0000000040)=[{0x2, 0xd9, 0x3800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x2}], 0x1) r11 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r11, 0xe) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 2m11.618128263s ago: executing program 1 (id=674): io_setup(0x3, &(0x7f0000000a40)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000500), 0x10106, 0x2, 0x0) listxattr(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)=""/164, 0xa4) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r6, 0x407, 0x0) read$FUSE(r5, &(0x7f0000000b40)={0x2020}, 0x2020) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.316343951s ago: executing program 1 (id=680): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x100000000e2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x804, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x80000) timer_create(0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/mtrr\x00', 0x2, 0x41) ioctl(r4, 0xc0104d03, &(0x7f0000000540)) 2m3.489325296s ago: executing program 1 (id=682): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, r0, 0xd6d18000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f00000004c0)=""/102392, 0x18ff8) getpgid(r1) mkdir(&(0x7f00000194c0)='./cgroup/../file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000019500), 0xae, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) stat(&(0x7f0000019540)='./cgroup/../file0\x00', 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000019600), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000019640)=0x79, 0x4) bind$inet(r0, &(0x7f0000019680)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0xa, 0x80002, 0x0) setrlimit(0xd, &(0x7f00000196c0)={0xc800, 0xffffffff}) setreuid(0x0, 0xee01) sendto$inet(r0, 0x0, 0x8b, 0x240467bc, &(0x7f0000019700)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000019740)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) 2m1.734839166s ago: executing program 1 (id=686): syz_io_uring_setup(0x46b7, &(0x7f00000025c0)={0x0, 0xe9be, 0x1000, 0x40000002, 0x3ac}, 0x0, 0x0, &(0x7f0000002640)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000002680)={0x8, 0x80000100008b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000026c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002700)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000002780), 0x0, 0x0) read$msr(r2, &(0x7f00000027c0)=""/102392, 0x18ff8) socket(0x11, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f000001b8c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f000001b900)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) mkdir(&(0x7f000001b800)='dir0\x00', 0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f000001b840)={0x3ffffffffffffdb5, &(0x7f000001b880)=[{0x4, 0x80}, {0x94, 0x3f5b}, {0x56, 0x2}, {0xdac, 0x3}, {0x3ff, 0x2}]}) r6 = socket(0x1, 0x1, 0x0) sendmsg$nl_generic(r6, 0x0, 0x1) 2m0.635809853s ago: executing program 1 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) 1m45.396384644s ago: executing program 32 (id=688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) 1m20.949386468s ago: executing program 0 (id=746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3d0) 1m17.519483495s ago: executing program 0 (id=750): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x2, @mcast1, 0xc}}, 0x0, 0x0, 0x4e, 0x0, "9e0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16efe7c7c1c8ecfcc76b47d9ab75573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) io_setup(0x8, &(0x7f0000000180)=0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x0, 0x318, 0xffffffff, 0xf0, 0xf0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000300), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff, 0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'vxcan1\x00', {}, {}, 0x3a, 0x1, 0x3, 0x12}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010100, @ipv6=@loopback, @gre_key=0x4, @icmp_id=0x66}}}, {{@ipv6={@private1, @empty, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'rose0\x00', {0xff}, {}, 0x3b, 0x5, 0x4, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xeb, [0x914c, 0xc], 0x3ff, 0x61, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x19}], 0xa}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x67}}}, {{@ipv6={@mcast1, @mcast1, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {0x83dcf73e86c01113}, 0x0, 0x6, 0x1, 0x50}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@loopback, @gre_key=0x8001, @gre_key=0x35}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010102, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, @port=0x4e24, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) io_submit(r3, 0x1, &(0x7f0000000b00)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x200, r0, 0x0, 0x0, 0xf6, 0x0, 0x0, r0}]) pipe2(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d0800090003", 0x17}], 0x1}, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x1, r4}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) semop(0x0, &(0x7f0000000040)=[{0x2, 0xd9, 0x3800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x2}], 0x1) r9 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r9, 0xe) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 1m14.212402709s ago: executing program 0 (id=755): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x2, @mcast1, 0xc}}, 0x0, 0x0, 0x4e, 0x0, "9e0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16efe7c7c1c8ecfcc76b47d9ab75573f11"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) io_setup(0x8, &(0x7f0000000180)=0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x1b, 0x5, 0x5f0, 0x0, 0x318, 0xffffffff, 0xf0, 0xf0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, &(0x7f0000000300), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xffffff, 0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'vxcan1\x00', {}, {}, 0x3a, 0x1, 0x3, 0x12}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010100, @ipv6=@loopback, @gre_key=0x4, @icmp_id=0x66}}}, {{@ipv6={@private1, @empty, [0xffffffff, 0xffffffff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'rose0\x00', {0xff}, {}, 0x3b, 0x5, 0x4, 0x2}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xeb, [0x914c, 0xc], 0x3ff, 0x61, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @private0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @dev={0xfe, 0x80, '\x00', 0x19}], 0xa}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x67}}}, {{@ipv6={@mcast1, @mcast1, [0xff000000, 0x0, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {0x83dcf73e86c01113}, 0x0, 0x6, 0x1, 0x50}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@loopback, @gre_key=0x8001, @gre_key=0x35}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010102, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, @port=0x4e24, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) io_submit(r3, 0x1, &(0x7f0000000b00)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x200, r0, 0x0, 0x0, 0xf6, 0x0, 0x0, r0}]) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d0800090003", 0x17}], 0x1}, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x1, r6}) write$FUSE_INIT(r5, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) semop(0x0, &(0x7f0000000040)=[{0x2, 0xd9, 0x3800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x2}], 0x1) r10 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r10, 0xe) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 1m6.773088856s ago: executing program 0 (id=759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9"}, 0x3d0) 1m3.454193722s ago: executing program 0 (id=766): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000019380)={0x2, 0x0, @local}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) open$dir(&(0x7f0000019480)='./file0\x00', 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m1.081767549s ago: executing program 0 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x50, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000780)=0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x45c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xa, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffc4, 0x0, 0x6, 0x6, 0x81, 0x8, 0x3, 0x0, 0x4, 0x3, 0x6, 0x8000000, 0x215, 0x3, 0xc2f1, 0x2c2, 0x8173, 0x8, 0xd, 0xf, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x80000000, 0x6, 0x6, 0x8, 0x9, 0xff, 0x7, 0x8, 0x400, 0x1, 0xffffffff, 0x8, 0xfffff234, 0x7fffffff, 0x80, 0x8, 0x7, 0x7, 0xe39, 0x7, 0x92, 0x9, 0xae27, 0x1, 0x9, 0x8, 0x9, 0x2, 0x1, 0xd, 0x0, 0x2, 0xfff, 0xbb3, 0x7, 0x80, 0x7f, 0x40, 0x0, 0x0, 0x9, 0x63, 0x8, 0x4300, 0xbdc, 0xfffffff8, 0x100, 0x693bb0ee, 0x55, 0x1, 0x9, 0x5, 0x80, 0x2c8a512d, 0x3, 0x3, 0x8001, 0xfffffff8, 0x4, 0x3, 0x762f, 0x8, 0x9, 0x1, 0x81, 0x2cdf, 0xfffffff4, 0x8, 0x80, 0x5, 0xd, 0x1f, 0x6, 0x1, 0x5, 0x6, 0x40, 0x100010, 0xfffff712, 0x43f, 0x9, 0x7, 0xfe, 0x0, 0x4, 0x8, 0x0, 0xd2, 0x7, 0x8, 0x6, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x5, 0xa, 0x3, 0xc4c, 0x8, 0x3, 0x9, 0x10000, 0xc0, 0x5, 0x80000001, 0x0, 0x101, 0x1, 0x2, 0x1, 0x2ae, 0x11e5, 0xffff0001, 0x5, 0x0, 0x6edd, 0xffff, 0x8, 0x0, 0xff, 0x8, 0x6e25, 0x8, 0x1, 0xfffffff8, 0x2, 0x9, 0xfffffff7, 0x4, 0x5, 0x1, 0x8, 0x6, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x0, 0x3, 0x9, 0x5e55, 0x6, 0x5, 0x5, 0x9, 0x4be9, 0x1ff, 0x8001, 0x3, 0xe, 0x800, 0x6, 0x10001, 0x100, 0x5, 0xfffffa93, 0xffffffff, 0x2, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x97, 0x5, 0x81, 0x40, 0x0, 0xfffff801, 0x8, 0x9, 0x6, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x5, 0xfffffffe, 0x9, 0x3, 0xae71, 0x1, 0x6, 0x6, 0x7, 0x1, 0x100, 0x6, 0x28000000, 0x7, 0x7f, 0x3, 0x1, 0x4, 0xa, 0x76a, 0x401, 0xf, 0x2, 0x0, 0x4, 0x7, 0xa0000000, 0x7794, 0x6, 0x9, 0x400, 0xfff, 0xff, 0x8, 0x2, 0x7221, 0x3, 0x7, 0xfffffff8, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x2, 0x5, 0x800, 0x0, 0x7, 0x8001, 0x6, [{0xfffffffb, 0xffff8000, 0x7, 0xffffaa94}]}}]}}]}, 0x45c}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0xa0602, 0x0) writev(r3, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x7, 0x1, 0x2, 0x0, 0x8}) sendfile(r4, r6, 0x0, 0x20000023896) 52.519712413s ago: executing program 4 (id=780): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x22) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mountinfo\x00') read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') fchdir(r2) syz_clone(0x8e024400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fanotify_init(0x40, 0x80000) readv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/220, 0xdc}], 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xa880, 0x97) fanotify_mark(r3, 0x1, 0x40001019, r4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x100000001) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 44.506047603s ago: executing program 33 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x50, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000780)=0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=@newtfilter={0x45c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xa, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x430, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffc4, 0x0, 0x6, 0x6, 0x81, 0x8, 0x3, 0x0, 0x4, 0x3, 0x6, 0x8000000, 0x215, 0x3, 0xc2f1, 0x2c2, 0x8173, 0x8, 0xd, 0xf, 0x3, 0x4, 0x2, 0x1, 0x3ff, 0x8, 0x7, 0x1, 0x0, 0x80000000, 0x6, 0x6, 0x8, 0x9, 0xff, 0x7, 0x8, 0x400, 0x1, 0xffffffff, 0x8, 0xfffff234, 0x7fffffff, 0x80, 0x8, 0x7, 0x7, 0xe39, 0x7, 0x92, 0x9, 0xae27, 0x1, 0x9, 0x8, 0x9, 0x2, 0x1, 0xd, 0x0, 0x2, 0xfff, 0xbb3, 0x7, 0x80, 0x7f, 0x40, 0x0, 0x0, 0x9, 0x63, 0x8, 0x4300, 0xbdc, 0xfffffff8, 0x100, 0x693bb0ee, 0x55, 0x1, 0x9, 0x5, 0x80, 0x2c8a512d, 0x3, 0x3, 0x8001, 0xfffffff8, 0x4, 0x3, 0x762f, 0x8, 0x9, 0x1, 0x81, 0x2cdf, 0xfffffff4, 0x8, 0x80, 0x5, 0xd, 0x1f, 0x6, 0x1, 0x5, 0x6, 0x40, 0x100010, 0xfffff712, 0x43f, 0x9, 0x7, 0xfe, 0x0, 0x4, 0x8, 0x0, 0xd2, 0x7, 0x8, 0x6, 0x8, 0x9, 0x80000000, 0x1, 0x1, 0x6, 0xfffffffe, 0x1ff, 0x10001, 0x5, 0xa, 0x3, 0xc4c, 0x8, 0x3, 0x9, 0x10000, 0xc0, 0x5, 0x80000001, 0x0, 0x101, 0x1, 0x2, 0x1, 0x2ae, 0x11e5, 0xffff0001, 0x5, 0x0, 0x6edd, 0xffff, 0x8, 0x0, 0xff, 0x8, 0x6e25, 0x8, 0x1, 0xfffffff8, 0x2, 0x9, 0xfffffff7, 0x4, 0x5, 0x1, 0x8, 0x6, 0x3, 0x2, 0x3ff, 0x40, 0x40, 0x0, 0x3, 0x9, 0x5e55, 0x6, 0x5, 0x5, 0x9, 0x4be9, 0x1ff, 0x8001, 0x3, 0xe, 0x800, 0x6, 0x10001, 0x100, 0x5, 0xfffffa93, 0xffffffff, 0x2, 0x4, 0x3, 0x2, 0x3, 0xfff, 0x7, 0x97, 0x5, 0x81, 0x40, 0x0, 0xfffff801, 0x8, 0x9, 0x6, 0x5, 0x4, 0x3, 0x1, 0x7, 0x4, 0x5, 0xfffffffe, 0x9, 0x3, 0xae71, 0x1, 0x6, 0x6, 0x7, 0x1, 0x100, 0x6, 0x28000000, 0x7, 0x7f, 0x3, 0x1, 0x4, 0xa, 0x76a, 0x401, 0xf, 0x2, 0x0, 0x4, 0x7, 0xa0000000, 0x7794, 0x6, 0x9, 0x400, 0xfff, 0xff, 0x8, 0x2, 0x7221, 0x3, 0x7, 0xfffffff8, 0x5]}]}, @TCA_U32_SEL={0x24, 0x5, {0x1, 0x2, 0x5, 0x800, 0x0, 0x7, 0x8001, 0x6, [{0xfffffffb, 0xffff8000, 0x7, 0xffffaa94}]}}]}}]}, 0x45c}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0xa0602, 0x0) writev(r3, &(0x7f0000000d40)=[{&(0x7f0000000d80)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x7, 0x1, 0x2, 0x0, 0x8}) sendfile(r4, r6, 0x0, 0x20000023896) 41.315443387s ago: executing program 4 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000019600)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r3 = eventfd2(0xfffffe01, 0x80001) r4 = gettid() timer_create(0x0, &(0x7f0000019cc0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000019d00)) timer_settime(0x0, 0x0, &(0x7f0000019d40)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000580)=""/102392, 0x18ff8) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000019680)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000196c0)={0x0, 0x0, &(0x7f0000019700)={&(0x7f0000019740)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f0000019780)={0x0, 0x0, &(0x7f00000197c0)={&(0x7f0000019800)=@newtfilter={0x474, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6a, 0x1, 0x5, 0x3, 0xff, {0x7, 0x1, 0xfff, 0xf3, 0xed5d, 0x2}, {0x8, 0x0, 0x2, 0x7, 0x1000}, 0x1, 0xbb0, 0x5cd1}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0xb, 0xe59, 0xffff, 0xf, 0x1000, 0x8, 0x474, 0x40, 0xad7, 0x9, 0x6a, 0x9ea, 0x2, 0x4, 0x1a3c, 0x200, 0x0, 0x1, 0x9, 0xffffffff, 0x80, 0x0, 0x5, 0x80000001, 0x8000, 0x1, 0xfffffffa, 0x6, 0x9, 0xb, 0x0, 0x2, 0x6, 0x2, 0x2, 0x5, 0x2, 0x2, 0x8, 0x1, 0x3ff, 0xb2, 0x3, 0xffffffff, 0x4, 0x1, 0x80ba, 0x9, 0x1cb9, 0x8000, 0xfffff453, 0x6, 0x3, 0xffffffff, 0x7fffffff, 0xd84, 0x7, 0x3d3e199f, 0x2, 0x2, 0x8000, 0x7, 0x21, 0x10, 0x4, 0x7, 0xfffc, 0x3f30123b, 0x1, 0x2, 0x4cc4, 0x626d, 0x200, 0x9, 0x0, 0x7, 0x1000, 0x22, 0x7fff, 0x7, 0x8b, 0x4, 0x3, 0x200, 0x6, 0x3, 0x3, 0x0, 0x6, 0x2, 0x2, 0x8e, 0xd3, 0x6, 0xf98, 0xa59, 0x6, 0x3, 0x0, 0x1, 0x3, 0x7, 0x0, 0x5d97, 0x1, 0x10001, 0x9, 0xa29, 0x5, 0x5, 0x400, 0x4, 0xf3d, 0x8, 0xa, 0x6, 0x10, 0xa0000000, 0x3c5, 0x8, 0x1df, 0x1cc, 0x1, 0xb, 0x3, 0x2, 0x3, 0x2, 0x6, 0x2, 0x4, 0x1ff, 0x6, 0x7, 0x2, 0xe0, 0xe115, 0x3, 0x0, 0x6, 0x0, 0x1, 0x8, 0x2, 0xa, 0x0, 0x5, 0x7, 0x1003, 0x2, 0x1, 0x4, 0x9, 0x889, 0xfff, 0x2, 0x1, 0x3, 0x3, 0x1ff, 0x8, 0x8e20, 0x7, 0x1, 0xbe, 0x6, 0x9d7, 0x50, 0x4, 0x4, 0x6, 0x5, 0x7, 0x7, 0x512, 0x5, 0x1, 0x2, 0x1, 0xf0a3, 0x7fffffff, 0x6, 0x17, 0xfffffff5, 0x3, 0x6, 0x1, 0x6, 0x6, 0x3, 0x6, 0xffffffff, 0x2, 0x0, 0xffffffd5, 0x6, 0x101, 0x8, 0x6, 0x2, 0x4, 0x40, 0xfffffffe, 0x10, 0x0, 0x7, 0x384, 0x5, 0x9, 0xf8, 0x91d, 0x6, 0x7, 0x7, 0x100, 0x6ba, 0x1, 0xc, 0x6, 0x7, 0xb, 0x90, 0xffffffff, 0x3, 0x200, 0x2, 0x6, 0x4, 0x6, 0x40, 0x7, 0x74e1, 0x9, 0x0, 0x1, 0x8, 0x5, 0xe, 0x5, 0x3, 0x7, 0x7, 0xe, 0x1000, 0x9, 0xda4, 0x7fff, 0x3, 0x3, 0x7, 0x8c, 0x1, 0x8, 0x9]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000019580)={0xa, 0x4e21, 0xffffffff, @loopback}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000195c0)=0x6, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40084}, 0x4000020) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x64) 38.996870138s ago: executing program 2 (id=796): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d7) umount2(0x0, 0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) prctl$PR_SCHED_CORE(0x3e, 0x0, r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r0) execve(&(0x7f00000196c0)='./file0\x00', 0x0, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x1) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0xd0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='jffs2\x00', 0x800000, 0x0) 37.53307043s ago: executing program 2 (id=797): mount(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./security/ima/policy\x00', 0x1, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000c00)='./security/ima/policy\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000d00)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6a9b}}, 0x18) pipe(&(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01d, 0x5}) socket$inet6_mptcp(0xa, 0x1, 0x106) 34.868415479s ago: executing program 3 (id=799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000e40)=[{&(0x7f00000003c0)="cd89b0b00de0128f2f24957c60b6a0b6519ce76781b8cec79d8d486b204c324233079d3416f27400aa5968ec46bbfc9bd3c3501c39ff9f364126462ac9010caa2d8653212984bb91c11f393a814a887def21bd3b6e17c7a7f9453bfbe37f26c6463f5ad48449838ff5e361e951f3018d371d85162eea3ea2340e05189e889cccfc73b162b6c06881fd5f84be7b8594739f3c2f110f121e53c60daa7b5ffb0052a6a305f31ac2d2545015f20d52bf1c88edb82fbe1ab851f052c14d075b10a1285438728aafe4d7c487ca8ef0be", 0xcd}, {&(0x7f00000004c0)="e1", 0x1}, {&(0x7f0000000500)="4cf825f5dc34d1c845549399009f5b4f304ad3f71d7e22c79cc54334aaef4509c1dc0eba665fed19b48d04aec3be8c9dcf274a9d3fc2084feac053c7a3b0a4f7a5206463ad311cef81f93fbd9cdbe8b1f7aba2751186f7fa5471ee3776e0141139eaead7f7d84ef0f98139a14e619a9734a0917ed6374bcdc2984db8fddbad89286e8f68195fb73c7b85364295b1d25743fedf114445d0139f12bdd97f23fca418b3c2ed3c94d74085b840107917c683440c9afb73b1672841926fa00012d48178c18c16cb6808b3f6f34eb9d4e67e95dde3a14cc371043a3e1622d27baa6ca810d7310977aa0d3c0c813358358dadadc39a", 0xf2}, {&(0x7f0000000ec0)="35494f790835d7d6f5b681d4f0660e0413aa818ef88ece5c39aed118bba6cf0404d3b90b14141d112ba38b944cde169be822be9d9a645166f3ee9e94ad5c2ba532b583fed66e2f5ab23df604d2193a371bcf9f8b9667786d7e31ca4cc5c474d8bd095353e48a8433473ecff232eb4fa09b95645ca97eff2682873cdc13531b3092314430cb47b48387998da3815dead1a00122bd54661a42ae8cbb6a3bfdbf8dafdc18f31c3c87df7d18540f12c57d9e8cb1f160d254f1e01c5713968db46d46a5801efb815313d3ca34ff82e342db21b9db302a4d3c9c265333fe0634534d35", 0xe0}, {&(0x7f0000000700)="fe7e703edb9121edaca48b9a92fe6de7ba64dc6911d57ef0f1946627ecd8945e300e0f6a75baa4db97013d3406e64ee7d716d5324a87576d423d72646d88d22506236c2e0b8c4bbde4370e6ddcae7f32b50c67bac0171fbe4d66a02e2b8ef5757eb923510a95b20856e69eaeecf23a1093a0ffc268cc3ceddbdc96a005c50b8ed28c974964e9707ec271", 0x8a}, {&(0x7f0000000c80)="a9864fa7e67e8a248e966e19c52a09cec2633129a0dd29ee6c8c4818ebceb97b1dabe5d234e5a485a62569b5ee1e9cad67f0eb7b101c0acbe7a632dbcf9eabf0a99f5d1232d9d863c72e10ffb187d7039600000000000000082e91fd8164ac469596159b6b84f153b63cc0cc2a0d799f3523a1756e6168a0146218136d879ec977053a78d3dd5c6c969c6daded401e1034c106efade964eb8bb6cfe063120cf9783d5c8c0d7a97a4", 0xa8}, {&(0x7f0000000d40)="e831fcb0e56d0f8f7947b6d6441f09d02fcf533dcc763cc81955dd40148a2128a18584d1dee0e9be48d8dee2642cbf30957f6f18d938ca01f7b11258dfb742", 0x3f}], 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3d0) 34.505897953s ago: executing program 4 (id=800): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r4 = io_uring_setup(0x42df, &(0x7f0000000000)={0x0, 0x3a2b, 0x2, 0x2, 0x13}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 33.806327584s ago: executing program 2 (id=801): socket$pppl2tp(0x18, 0x1, 0x1) fsopen(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x143102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendto$inet6(r1, &(0x7f0000000480)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000004c0)=0x2100e6d4, 0x4) r2 = socket(0x40000000015, 0x80000, 0x1fffe) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) socket(0x15, 0x5, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000540)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x2e, 0x1, 0x7cc, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) 33.805367151s ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1bf0ffffffff7fa9bd78000000800000000000000a96adcc66cab85beb4b981a811ed6cbd8fdf00b9ed3c0796ecd83ddfa99688c2582ead0ae8db5abdf1021c9a79d0100abbe5ea1da9d8b2b1c17af3632ef58fd634001c347ab1b0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x30, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000a40)="52b60bd67d28cf77565846872bfda50ebf9391157796a1b1f598c2670c54218494bbd902b8394522f76f93edaa0637125eb65eff7b82e103ea1016989d59c7dfa3ca758619e5c3f0db2d451e309fc531f72c22ba343c383b78fa929a8877895f047ea0156cf1cc10a2945c32aece", 0x6e, 0x804, &(0x7f0000000b80)={0x11, 0x9, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0xffff}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="0000520006000500", @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0xc050}, 0x400c090) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r3, 0x0, 0x800) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, &(0x7f0000000340)={&(0x7f0000000280), 0x0, 0x20, 0x7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x240448a4}, 0x8010) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000200)={0x800, 0x28, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) 32.078385192s ago: executing program 5 (id=805): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000004140), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setresuid(0x0, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) select(0x40, &(0x7f00000001c0)={0x7, 0x4, 0x0, 0x5, 0xfffffffffffffffc, 0x1e7, 0xffffffffffffffff, 0x9}, &(0x7f0000000280)={0x9, 0x7, 0x7, 0x1, 0x200000000000000, 0x8, 0x1000, 0x3}, 0x0, &(0x7f00000003c0)) sendto$inet(r4, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x1, 0x0, 0xfffff024}, {0x6}]}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) writev(r0, &(0x7f0000005340)=[{&(0x7f0000004180)="32f998", 0x3}, {&(0x7f0000004200)="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", 0x1000}], 0x2) 31.239215981s ago: executing program 3 (id=806): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18800020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x0, 0x5, 0x80000001}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'dummy0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x17}}) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc4}, &(0x7f0000000700)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000780), 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000880), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000008c0), 0x2, 0x141102) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000940)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mount(&(0x7f0000000980)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000009c0)='./bus\x00', &(0x7f0000000a00)='exfat\x00', 0x8080, &(0x7f0000000a40)='discard') syz_open_dev$sg(&(0x7f0000000a80), 0xa, 0x28102) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000b00)=0x200) write$dsp(r4, &(0x7f0000000b40)="5cba91a4", 0xffffffd9) 30.924596369s ago: executing program 5 (id=808): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x60cf, 0x5}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000003c0)="060000000300010000", 0x9) socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r2, &(0x7f00000010c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000003100)={0x10, 0xfffffffffffffffe, r3}, 0x66) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0xe) sched_setattr(0x0, &(0x7f0000003140)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000031c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000003200)=0xd) r5 = open(&(0x7f0000003240)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000201002) syz_usb_connect(0x0, 0x2d, &(0x7f0000003280)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f00000032c0)=""/220, 0xdc) creat(&(0x7f00000033c0)='./bus\x00', 0xd4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 30.754806315s ago: executing program 4 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.664682286s ago: executing program 2 (id=810): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014104afb4f2102505bfa4f162000000010902240001fe00c0000904eb02027f9c1f000905060220000200020905", @ANYRES16], 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x1, 0x110, r0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f000000a000), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0xc0802, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000440)=0x6100204) r7 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000480)={0x10000000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000540)=0x10) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000640)={r8, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newsa={0x140, 0x10, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040}, 0x80) write(r1, &(0x7f000000a040)='dir ./f', 0x7) 27.582790478s ago: executing program 5 (id=811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000500)={{@my=0x0}, 0x1, 0x0, 0x10001}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 27.461997776s ago: executing program 3 (id=812): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xf}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000004480)={0x0, 0x18, 0xfa00, {0x40000000000104, &(0x7f0000004400), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000004580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000045c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000004600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000004640)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) 27.05928509s ago: executing program 4 (id=813): pipe(&(0x7f0000000040)) 25.024496946s ago: executing program 3 (id=814): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000003cc0)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(r3, 0x8, &(0x7f000001cd00)=0x4000007) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000001c0)={'system_u:object_r:hald_log_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x2}, 0x53) r6 = fsopen(&(0x7f000001cd40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup(r7, &(0x7f000001cd80)='syz0\x00', 0x200002, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000280)={0x4, [[0xf7fdffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xfffffffc, 0xffffffff], [0x39a8, 0xffffffff, 0xfffffffd, 0x3, 0x100, 0xffffffff, 0xfffffff7, 0x7], [0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x32, 0x0, 0x0, 0x1}, {0x1c, 0x21, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1385, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000500)={0x1, 0x80, 0x4, 0x4, 0x2e0, 0x0, 0x4, 0x5, 0x0, 0xea, 0xfffff886, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f00000005c0)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r8, 0x4142, 0x0) 24.612515728s ago: executing program 5 (id=815): getrusage(0xffffffffffffffff, 0x0) 23.663346195s ago: executing program 4 (id=816): write(0xffffffffffffffff, &(0x7f0000000000)="4eecc4d011272cb144e3be6f4349850a", 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000001c0), 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x7e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x20004, r3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 22.386315014s ago: executing program 3 (id=817): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000a80)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000b80)={0x28, 0x0, 0x0, @local}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000bc0)='X', 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000d40)=0x2) syz_ublk_setup_io_uring(0x270d, &(0x7f0000000180)={0x0, 0x3d1a, 0x10, 0x2, 0x6b9}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 22.210014239s ago: executing program 5 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, 0x0, 0x88c80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000380)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000004c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f0000000540)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) sendmmsg(r3, &(0x7f0000000580), 0x400000000000159, 0x40840) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xdc2, 0x0, 0x2}, {0xdc2, 0x0, 0x8}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x7, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa17, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x58], 0x10000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.618680276s ago: executing program 2 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) socket$pppl2tp(0x18, 0x1, 0x1) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000041c0)='*-\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000004280)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000042c0), 0x2, 0x143102) writev(r1, &(0x7f0000004300)=[{&(0x7f0000004340)="94", 0xf000}, {0x0}], 0x1000000000000154) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000004380)=0x100000001, 0x59) connect$inet6(r2, &(0x7f00000043c0)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000004400), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000004440)=@gcm_128={{0x303}, "25fd25990fe381b9", "f51116c280e300", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000004480)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000044c0)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000004500)=0x2100e6d4, 0x4) syz_open_procfs(0x0, &(0x7f0000004540)='setgroups\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000004740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000004780)='./dev\x00', &(0x7f00000047c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004800)='./dev/mapper/control\x00', 0x0, 0x0) 19.150730672s ago: executing program 5 (id=820): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x121040, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x118) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x201000c, &(0x7f0000000200)) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000006c00)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f000001fc00)=0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019f6f5fe1bea02fc2dfd17e5ffff08ee030000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 17.826382795s ago: executing program 2 (id=821): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001cf00)=0x7) r4 = creat(0x0, 0x120) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f000001d080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000400)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x101, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f00000004c0)) syz_open_dev$ublk_chdev(0x0, r12, 0x2) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) 7.917086131s ago: executing program 34 (id=816): write(0xffffffffffffffff, &(0x7f0000000000)="4eecc4d011272cb144e3be6f4349850a", 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f00000001c0), 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2) socket$key(0xf, 0x3, 0x2) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x102) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000004c0)=0x1e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000500)=0x40) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000540)=0x7e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x20004, r3}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 5.912849465s ago: executing program 35 (id=817): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000a80)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000b80)={0x28, 0x0, 0x0, @local}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000bc0)='X', 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000d40)=0x2) syz_ublk_setup_io_uring(0x270d, &(0x7f0000000180)={0x0, 0x3d1a, 0x10, 0x2, 0x6b9}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 2.887599524s ago: executing program 36 (id=820): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x121040, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x118) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x201000c, &(0x7f0000000200)) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000006c00)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f000001fc00)=0x7) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000500)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000580)="390000001300034700bb65e1c3e4ffff0100000001000000560000002500000019f6f5fe1bea02fc2dfd17e5ffff08ee030000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 37 (id=821): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000003f00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001cf00)=0x7) r4 = creat(0x0, 0x120) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2800) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f000001d080), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x4c80, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r12 = syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000400)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x1, 0x101, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f00000004c0)) syz_open_dev$ublk_chdev(0x0, r12, 0x2) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) kernel console output (not intermixed with test programs): mtd0 [ 215.687194][ T7111] ubi0: scanning is finished [ 215.687236][ T7111] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 215.863374][ T31] audit: type=1400 audit(1794092976.976:451): avc: denied { write } for pid=7109 comm="syz.1.315" name="functions" dev="configfs" ino=12505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.003593][ T7111] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 216.303248][ T2292] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.535142][ T2292] usb 3-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 216.545282][ T2292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.545312][ T2292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.545343][ T2292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.563341][ T2292] usb 3-1: config 0 descriptor?? [ 216.715974][ T31] audit: type=1400 audit(1794092977.786:452): avc: denied { execute_no_trans } for pid=7116 comm="syz.1.318" path="/60/file2" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 218.645510][ T7129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.320'. [ 219.105343][ T2292] usbhid 3-1:0.0: can't add hid device: -71 [ 219.105396][ T2292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 219.113476][ T2292] usb 3-1: USB disconnect, device number 8 [ 220.262590][ T2292] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 221.480945][ T2292] usb 1-1: device descriptor read/all, error -71 [ 222.199769][ T7142] batman_adv: batadv0: Adding interface: syzkaller0 [ 222.199781][ T7142] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.200010][ T7142] batman_adv: batadv0: Interface activated: syzkaller0 [ 222.713592][ T7141] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 223.340701][ T7141] batman_adv: batadv0: Removing interface: syzkaller0 [ 223.381654][ T2292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 223.563518][ T2292] usb 5-1: Using ep0 maxpacket: 16 [ 223.564659][ T2292] usb 5-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 223.565823][ T2292] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 223.565855][ T2292] usb 5-1: config 0 has no interface number 0 [ 223.565887][ T2292] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 223.565908][ T2292] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 223.567675][ T2292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.567695][ T2292] usb 5-1: Product: syz [ 223.567709][ T2292] usb 5-1: Manufacturer: syz [ 223.567722][ T2292] usb 5-1: SerialNumber: syz [ 223.645275][ T2292] usb 5-1: config 0 descriptor?? [ 223.647142][ T7147] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.647258][ T7147] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.888612][ T7147] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.888676][ T7147] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.906854][ T2292] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 225.991535][ T2292] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 225.991619][ T2292] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 226.029624][ T2292] asix 5-1:0.34: probe with driver asix failed with error -71 [ 226.045548][ T2292] usb 5-1: USB disconnect, device number 7 [ 226.365354][ T7162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 226.551716][ T31] audit: type=1400 audit(1794092987.496:453): avc: denied { write } for pid=7160 comm="syz.1.327" name="kvm_hv_stimer_cleanup" dev="tracefs" ino=14001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 226.551747][ T31] audit: type=1400 audit(1794092987.506:454): avc: denied { create } for pid=7160 comm="syz.1.327" name="trigger" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 227.701731][ T5738] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.565241][ T5738] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 228.571245][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.571274][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.571305][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.611345][ T5738] usb 1-1: config 0 descriptor?? [ 231.088080][ T5738] usbhid 1-1:0.0: can't add hid device: -71 [ 231.088153][ T5738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.089611][ T5738] usb 1-1: USB disconnect, device number 9 [ 231.256527][ T5829] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.256996][ T31] audit: type=1400 audit(1794092992.516:455): avc: denied { read } for pid=7215 comm="syz.0.340" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 232.257045][ T31] audit: type=1400 audit(1794092992.516:456): avc: denied { open } for pid=7215 comm="syz.0.340" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 232.446891][ T5829] usb 2-1: device descriptor read/all, error -71 [ 232.631979][ T5738] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 232.783285][ T5738] usb 4-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 232.794146][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.794179][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.794211][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.833418][ T5738] usb 4-1: config 0 descriptor?? [ 234.551026][ T7229] ubi0: attaching mtd0 [ 234.563513][ T7229] ubi0: scanning is finished [ 234.563729][ T7229] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 235.022975][ T7229] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 235.250122][ T5738] usbhid 4-1:0.0: can't add hid device: -71 [ 235.250173][ T5738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.268357][ T5738] usb 4-1: USB disconnect, device number 5 [ 235.436569][ T31] audit: type=1400 audit(1794092996.546:457): avc: denied { setattr } for pid=7230 comm="syz.4.345" name="midiC2D0" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 238.671159][ T7265] JFS: charset not found [ 240.215756][ T5730] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.431828][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 240.437161][ T5730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.437196][ T5730] usb 1-1: New USB device found: idVendor=13d8, idProduct=0021, bcdDevice=c4.49 [ 240.438143][ T5730] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 240.438156][ T5730] usb 1-1: config 0 has no interface number 0 [ 240.438177][ T5730] usb 1-1: config 0 interface 223 has no altsetting 0 [ 240.489563][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.489585][ T5730] usb 1-1: Product: syz [ 240.489598][ T5730] usb 1-1: Manufacturer: syz [ 240.489610][ T5730] usb 1-1: SerialNumber: syz [ 240.504462][ T5730] usb 1-1: config 0 descriptor?? [ 241.149982][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 241.265018][ T7284] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 241.273525][ T7284] tipc: Enabled bearer , priority 10 [ 241.693087][ T31] audit: type=1400 audit(1794093002.806:458): avc: denied { mount } for pid=7286 comm="syz.3.357" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 241.720407][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 241.720424][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 241.779710][ T7287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.852869][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.877715][ T7290] bond1: (slave bond0): making interface the new active one [ 241.893117][ T7290] bond1: (slave bond0): Enslaving as an active interface with an up link [ 241.933221][ T7293] bond1 (unregistering): (slave bond0): Releasing active interface [ 241.941528][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.002073][ T7293] bond1 (unregistering): Released all slaves [ 242.065098][ T5730] usb 1-1: selecting invalid altsetting 3 [ 242.065121][ T5730] comedi comedi5: could not set alternate setting 3 in high speed [ 242.065135][ T5730] usbduxsigma 1-1:0.223: driver 'usbduxsigma' failed to auto-configure device. [ 243.002409][ T5730] usbduxsigma 1-1:0.223: probe with driver usbduxsigma failed with error -22 [ 243.042425][ T5730] usb 1-1: USB disconnect, device number 10 [ 243.200629][ T31] audit: type=1400 audit(1794093004.306:459): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 244.619149][ T5730] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.612255][ T5730] usb 4-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 245.625029][ T5730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.625057][ T5730] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.627242][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.627255][ T5730] usb 4-1: Product: syz [ 245.627262][ T5730] usb 4-1: Manufacturer: syz [ 245.675938][ T5730] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 247.554302][ T5730] mos7840 4-1:1.0: probe with driver mos7840 failed with error -71 [ 247.592043][ T5730] usb 4-1: USB disconnect, device number 6 [ 248.546199][ T7337] jffs2: notice: (7337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 248.716069][ T31] audit: type=1400 audit(1794093009.646:460): avc: denied { mounton } for pid=7334 comm="syz.3.369" path="/78/file0" dev="tmpfs" ino=449 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.031889][ T7342] lo speed is unknown, defaulting to 1000 [ 249.033498][ T7342] lo speed is unknown, defaulting to 1000 [ 249.046287][ T7342] lo speed is unknown, defaulting to 1000 [ 249.055467][ T7342] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 249.055925][ T7342] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 249.056002][ T7342] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 249.714915][ T31] audit: type=1400 audit(1794093010.056:461): avc: denied { map } for pid=7336 comm="syz.4.359" path="socket:[14212]" dev="sockfs" ino=14212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 249.745624][ T7342] lo speed is unknown, defaulting to 1000 [ 249.746339][ T7342] lo speed is unknown, defaulting to 1000 [ 249.746951][ T7342] lo speed is unknown, defaulting to 1000 [ 249.747607][ T7342] lo speed is unknown, defaulting to 1000 [ 249.748218][ T7342] lo speed is unknown, defaulting to 1000 [ 249.988493][ T7344] raw_sendmsg: syz.1.370 forgot to set AF_INET. Fix it! [ 250.216489][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.216535][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.751771][ T7363] evm: overlay not supported [ 253.423980][ T31] audit: type=1400 audit(1794093013.876:462): avc: denied { rename } for pid=7354 comm="syz.0.365" name="file0" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 253.787304][ T7367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.726655][ T31] audit: type=1400 audit(1794093016.406:463): avc: denied { ioctl } for pid=7370 comm="syz.3.378" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x84009422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 255.909042][ T31] audit: type=1400 audit(1794093017.016:464): avc: denied { allowed } for pid=7374 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 256.150413][ T7390] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 257.194016][ T31] audit: type=1400 audit(1794093018.306:465): avc: denied { cmd } for pid=7379 comm="iou-wrk-7384" path="socket:[15215]" dev="sockfs" ino=15215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.238053][ T5994] rtrs_client L1784: : Resolving route failed, err: -ENODEV [ 257.391791][ T7390] rtrs_client L2654: : init_conns() failed: err=-ERESTARTSYS path=@ip:127.0.0.1 [:0] [ 257.727893][ T31] audit: type=1400 audit(1794093018.826:466): avc: denied { wake_alarm } for pid=7398 comm="syz.0.384" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.752726][ T4937] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.873320][ T31] audit: type=1400 audit(1794093020.946:467): avc: denied { read } for pid=7408 comm="syz.4.387" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.873667][ T31] audit: type=1400 audit(1794093020.956:468): avc: denied { open } for pid=7408 comm="syz.4.387" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.991674][ T31] audit: type=1400 audit(1794093021.016:469): avc: denied { write } for pid=7408 comm="syz.4.387" name="core" dev="configfs" ino=3659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.991853][ T31] audit: type=1400 audit(1794093021.016:470): avc: denied { write } for pid=7408 comm="syz.4.387" name="core" dev="configfs" ino=3659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.991979][ T31] audit: type=1400 audit(1794093021.016:471): avc: denied { remove_name } for pid=7408 comm="syz.4.387" name="rd_mcp_0" dev="configfs" ino=15261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.992174][ T31] audit: type=1400 audit(1794093021.016:472): avc: denied { rmdir } for pid=7408 comm="syz.4.387" name="rd_mcp_0" dev="configfs" ino=15261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.775582][ T7414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.775643][ T7414] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.952279][ T7414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.959581][ T7414] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.972888][ T7414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.974534][ T7414] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 261.157630][ T7419] No buffer was provided with the request [ 261.488951][ T7414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.490192][ T7414] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 261.521004][ T7414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.521063][ T7414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.543365][ T7414] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 261.837157][ T7427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.451693][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 263.713006][ T4937] Bluetooth: hci0: command 0x0406 tx timeout [ 263.713053][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 263.713078][ T4937] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.713201][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 264.518139][ T31] audit: type=1400 audit(1794093025.626:473): avc: denied { append } for pid=7441 comm="syz.3.383" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.541744][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 266.614344][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 266.614378][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 266.614412][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.614422][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 268.246823][ T7468] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 268.246844][ T7468] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 268.285021][ T31] audit: type=1400 audit(1794093029.396:474): avc: denied { name_connect } for pid=7466 comm="syz.2.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 268.308024][ T31] audit: type=1400 audit(1794093029.416:475): avc: denied { listen } for pid=7466 comm="syz.2.403" laddr=::ffff:10.128.0.42 lport=41501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.337052][ T31] audit: type=1400 audit(1794093029.446:476): avc: denied { accept } for pid=7466 comm="syz.2.403" laddr=::ffff:10.128.0.42 lport=41501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 268.338843][ T31] audit: type=1400 audit(1794093029.446:477): avc: denied { setopt } for pid=7466 comm="syz.2.403" laddr=::ffff:10.128.0.42 lport=41501 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 268.361770][ T7468] Bluetooth: MGMT ver 1.23 [ 269.291538][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.534947][ T31] audit: type=1400 audit(1794093031.346:478): avc: denied { read write } for pid=7478 comm="syz.2.406" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 270.534996][ T31] audit: type=1400 audit(1794093031.346:479): avc: denied { open } for pid=7478 comm="syz.2.406" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 271.694914][ T31] audit: type=1400 audit(1794093032.806:480): avc: denied { checkpoint_restore } for pid=7488 comm="syz.3.399" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.191693][ T31] audit: type=1400 audit(1794093034.246:481): avc: denied { sqpoll } for pid=7497 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 274.527299][ T7514] bridge2: entered promiscuous mode [ 274.534891][ T31] audit: type=1400 audit(1794093035.606:482): avc: denied { cmd } for pid=7505 comm="syz.2.410" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 276.913897][ T31] audit: type=1400 audit(1794093038.026:483): avc: denied { name_bind } for pid=7522 comm="syz.4.416" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 277.595099][ T62] IPVS: starting estimator thread 0... [ 277.691795][ T7555] IPVS: using max 42 ests per chain, 100800 per kthread [ 279.579961][ T7567] can0: slcan on ttyS3. [ 280.193233][ T7560] can0 (unregistered): slcan off ttyS3. [ 280.247782][ T31] audit: type=1400 audit(1794093041.356:484): avc: denied { write } for pid=7570 comm="syz.3.417" name="sg0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.248309][ T31] audit: type=1400 audit(1794093041.356:485): avc: denied { open } for pid=7570 comm="syz.3.417" path="/dev/sg0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.348146][ T31] audit: type=1800 audit(1794093041.456:486): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.426" name=08 dev="sda1" ino=2050 res=0 errno=-22 [ 281.308605][ T53] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 281.936164][ T7585] ima: policy update failed [ 282.311745][ T31] audit: type=1807 audit(1794093042.896:487): UNKNOWN=a res=0 [ 282.311788][ T31] audit: type=1802 audit(1794093042.896:488): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.2.429" res=0 errno=-22 [ 282.311822][ T31] audit: type=1802 audit(1794093043.046:489): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.2.429" res=0 errno=-22 [ 284.436430][ T31] audit: type=1400 audit(1794093045.546:490): avc: denied { setopt } for pid=7608 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.645095][ T31] audit: type=1400 audit(1794093045.726:491): avc: denied { shutdown } for pid=7608 comm="syz.0.434" lport=33222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.034990][ T31] audit: type=1400 audit(1794093048.126:492): avc: denied { bind } for pid=7622 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 288.289237][ T7628] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.459971][ T7628] lo speed is unknown, defaulting to 1000 [ 289.137717][ T7637] siw: device registration error -23 [ 292.476606][ T31] audit: type=1400 audit(1794093053.576:493): avc: denied { bind } for pid=7654 comm="syz.1.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.182093][ T7661] cgroup: No subsys list or none specified [ 293.811928][ T5740] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 293.955028][ T7673] jffs2: notice: (7673) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 293.976145][ T5740] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 293.978600][ T5740] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.978645][ T5740] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.978665][ T5740] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.978685][ T5740] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.978720][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.155616][ T31] audit: type=1400 audit(1794093055.266:494): avc: denied { append } for pid=7672 comm="syz.1.449" name="sg0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.202950][ T31] audit: type=1400 audit(1794093055.316:495): avc: denied { ioctl } for pid=7672 comm="syz.1.449" path="/dev/sg0" dev="devtmpfs" ino=1061 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.359431][ T5740] usb 1-1: USB disconnect, device number 11 [ 297.109853][ T7694] ======================================================= [ 297.109853][ T7694] WARNING: The mand mount option has been deprecated and [ 297.109853][ T7694] and is ignored by this kernel. Remove the mand [ 297.109853][ T7694] option from the mount to silence this warning. [ 297.109853][ T7694] ======================================================= [ 297.453948][ T31] audit: type=1400 audit(1794093058.556:496): avc: denied { write } for pid=7696 comm="syz.3.446" name="core" dev="configfs" ino=3659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 297.468481][ T31] audit: type=1400 audit(1794093058.576:497): avc: denied { write } for pid=7696 comm="syz.3.446" name="core" dev="configfs" ino=3659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 298.395818][ T7699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.395921][ T7699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.419510][ T7699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.423907][ T7699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.447290][ T7699] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.454282][ T7699] hwrng_fill thread creation failed [ 299.069056][ T7694] FAULT_INJECTION: forcing a failure. [ 299.069056][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 299.069085][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.4.455 Not tainted syzkaller #0 PREEMPT(full) [ 299.069108][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 299.069119][ T7694] Call Trace: [ 299.069125][ T7694] [ 299.069133][ T7694] dump_stack_lvl+0x100/0x190 [ 299.069168][ T7694] should_fail_ex.cold+0x5/0xa [ 299.069201][ T7694] should_failslab+0xc2/0x120 [ 299.069223][ T7694] __kmalloc_noprof+0xfc/0x840 [ 299.069253][ T7694] ? hash_netportnet6_add+0x1537/0x3110 [ 299.069282][ T7694] hash_netportnet6_add+0x1537/0x3110 [ 299.069326][ T7694] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 299.069358][ T7694] hash_netportnet6_uadt+0xd60/0x12a0 [ 299.069383][ T7694] ? __pfx_hash_netportnet6_add+0x10/0x10 [ 299.069409][ T7694] ? __pfx_hash_netportnet6_uadt+0x10/0x10 [ 299.069435][ T7694] ? lock_acquire+0x1d1/0x380 [ 299.069472][ T7694] call_ad.isra.0+0x171/0x950 [ 299.069497][ T7694] ? __pfx_hash_netportnet6_resize+0x10/0x10 [ 299.069523][ T7694] ? __pfx_call_ad.isra.0+0x10/0x10 [ 299.069546][ T7694] ? __pfx___nla_validate_parse+0x10/0x10 [ 299.069580][ T7694] ? __nla_parse+0x40/0x60 [ 299.069605][ T7694] ip_set_ad.isra.0+0x3f1/0x8b0 [ 299.069635][ T7694] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 299.069658][ T7694] ? trace_contention_end+0x126/0x160 [ 299.069709][ T7694] ? find_held_lock+0x2b/0x80 [ 299.069736][ T7694] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 299.069765][ T7694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 299.069788][ T7694] ? __lock_acquire+0x5c0/0x1f40 [ 299.069846][ T7694] ? avc_has_perm_noaudit+0x145/0x470 [ 299.069877][ T7694] netlink_rcv_skb+0x159/0x420 [ 299.069903][ T7694] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 299.069925][ T7694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.069964][ T7694] ? ns_capable+0xcd/0xf0 [ 299.069988][ T7694] nfnetlink_rcv+0x1b3/0x440 [ 299.070008][ T7694] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 299.070026][ T7694] ? netlink_deliver_tap+0x1ae/0xb50 [ 299.070055][ T7694] netlink_unicast+0x668/0x950 [ 299.070084][ T7694] ? __pfx_netlink_unicast+0x10/0x10 [ 299.070116][ T7694] netlink_sendmsg+0x9ac/0x10c0 [ 299.070146][ T7694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.070178][ T7694] ? selinux_socket_sendmsg+0x198/0x2f0 [ 299.070210][ T7694] ? ____sys_sendmsg+0xa99/0xc30 [ 299.070236][ T7694] ____sys_sendmsg+0xa99/0xc30 [ 299.070262][ T7694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.070291][ T7694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.070332][ T7694] ___sys_sendmsg+0x190/0x1e0 [ 299.070364][ T7694] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.070393][ T7694] ? futex_wait+0x11e/0x370 [ 299.070431][ T7694] ? find_held_lock+0x2b/0x80 [ 299.070472][ T7694] __sys_sendmsg+0x160/0x210 [ 299.070496][ T7694] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.070537][ T7694] do_syscall_64+0x123/0x790 [ 299.070563][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.070584][ T7694] RIP: 0033:0x7f752079fb19 [ 299.070600][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.070618][ T7694] RSP: 002b:00007f75216a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.070637][ T7694] RAX: ffffffffffffffda RBX: 00007f7520a25fa0 RCX: 00007f752079fb19 [ 299.070650][ T7694] RDX: 0000000020000040 RSI: 0000200000000100 RDI: 0000000000000004 [ 299.070663][ T7694] RBP: 00007f7520837b70 R08: 0000000000000000 R09: 0000000000000000 [ 299.070674][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.070685][ T7694] R13: 00007f7520a26038 R14: 00007f7520a25fa0 R15: 00007ffde038c758 [ 299.070713][ T7694] [ 299.503542][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 299.580275][ T7707] 9pnet_fd: p9_fd_create_unix (7707): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 300.451718][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 300.451752][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 300.451773][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 300.451823][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 301.486704][ T7724] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 302.351632][ T5740] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 302.799871][ T5740] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 302.845017][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.845060][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.845092][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.315135][ T5740] usb 1-1: config 0 descriptor?? [ 304.794724][ T5740] usbhid 1-1:0.0: can't add hid device: -71 [ 304.794805][ T5740] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 304.821806][ T5740] usb 1-1: USB disconnect, device number 12 [ 304.837986][ T31] audit: type=1400 audit(1794093065.946:498): avc: denied { audit_write } for pid=7741 comm="syz.4.465" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 304.863354][ T31] audit: type=1326 audit(1794093065.976:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.863419][ T31] audit: type=1326 audit(1794093065.976:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.863761][ T31] audit: type=1326 audit(1794093065.976:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.863853][ T31] audit: type=1326 audit(1794093065.976:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.871438][ T31] audit: type=1326 audit(1794093065.976:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.901654][ T31] audit: type=1326 audit(1794093065.986:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.901694][ T31] audit: type=1326 audit(1794093065.986:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.901727][ T31] audit: type=1326 audit(1794093066.016:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 304.901758][ T31] audit: type=1326 audit(1794093066.016:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.4.465" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752079fb19 code=0x7ffc0000 [ 311.760888][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.760938][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.848934][ T7803] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 312.933511][ T5730] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 312.933768][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 312.933780][ T31] audit: type=1400 audit(1794093073.956:533): avc: denied { mounton } for pid=7798 comm="syz.0.480" path="/95/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 313.274858][ T5730] usb 3-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 313.292636][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.292662][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.292690][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.327064][ T5730] usb 3-1: config 0 descriptor?? [ 314.483169][ T5618] Bluetooth: hci5: command 0x1003 tx timeout [ 314.483266][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.461987][ T5829] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 315.566151][ T5730] usbhid 3-1:0.0: can't add hid device: -71 [ 315.566226][ T5730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 315.570604][ T5730] usb 3-1: USB disconnect, device number 9 [ 316.709292][ T7815] comedi comedi0: Minor 2208 is invalid! [ 316.711519][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.711664][ T5829] usb 1-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 316.715834][ T5829] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 316.715859][ T5829] usb 1-1: can't read configurations, error -71 [ 318.725026][ T31] audit: type=1400 audit(1794093079.286:534): avc: denied { write } for pid=7828 comm="syz.2.488" name="subsystems" dev="configfs" ino=3655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 318.725075][ T31] audit: type=1400 audit(1794093079.336:535): avc: denied { write } for pid=7828 comm="syz.2.488" name="subsystems" dev="configfs" ino=3655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.075942][ T31] audit: type=1400 audit(1794093081.126:536): avc: denied { read } for pid=7839 comm="syz.0.491" name="md0" dev="tmpfs" ino=579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 320.154019][ T7844] md: invalid raid superblock magic on ram0 [ 320.154036][ T7844] md: ram0 does not have a valid v0.0 superblock, not importing! [ 320.154112][ T7844] md: md_import_device returned -22 [ 320.202027][ T7845] md: could not open device unknown-block(1,1). [ 320.202078][ T7845] md: error, md_import_device() returned -16 [ 322.220155][ T5618] Bluetooth: hci5: command 0x1003 tx timeout [ 322.220233][ T5625] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 322.223907][ T31] audit: type=1400 audit(1794093082.946:537): avc: denied { ioctl } for pid=7849 comm="syz.0.492" path="socket:[16215]" dev="sockfs" ino=16215 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 324.222597][ T7865] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 324.222626][ T7865] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 324.223282][ T7865] vhci_hcd vhci_hcd.0: Device attached [ 324.693403][ T1629] usb 40-1: SetAddress Request (2) to port 0 [ 324.693799][ T1629] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 324.773375][ T7867] vhci_hcd: connection reset by peer [ 324.784245][ T44] vhci_hcd vhci_hcd.3: stop threads [ 324.784618][ T44] vhci_hcd vhci_hcd.3: release socket [ 324.802425][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 325.271424][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.496'. [ 326.672714][ T31] audit: type=1400 audit(1794093087.776:538): avc: denied { write } for pid=7880 comm="syz.4.498" name="nullb" dev="configfs" ino=3646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 326.709512][ T31] audit: type=1400 audit(1794093087.816:539): avc: denied { map } for pid=7881 comm="syz.1.499" path="/dev/ublkc1" dev="devtmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.834433][ T31] audit: type=1400 audit(1794093087.946:540): avc: denied { connect } for pid=7880 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.877035][ T31] audit: type=1400 audit(1794093087.986:541): avc: denied { read } for pid=7880 comm="syz.4.498" laddr=fe80::dcd0:20ff:febb:286d lport=29878 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 327.063793][ T31] audit: type=1400 audit(1794093088.176:542): avc: denied { read } for pid=7880 comm="syz.4.498" name="power" dev="configfs" ino=16255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 327.674123][ T7885] null_blk: disk my_zoned_dev created [ 327.696009][ T31] audit: type=1400 audit(1794093088.806:543): avc: denied { execute } for pid=7871 comm="syz.2.497" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 327.729747][ T31] audit: type=1400 audit(1794093088.836:544): avc: denied { write } for pid=7871 comm="syz.2.497" name="functions" dev="configfs" ino=12505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 327.754945][ T31] audit: type=1400 audit(1794093088.866:545): avc: denied { write } for pid=7871 comm="syz.2.497" name="ep.0" dev="configfs" ino=16321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 329.477645][ T31] audit: type=1400 audit(1794093090.586:546): avc: denied { read } for pid=7911 comm="syz.2.504" name="sg0" dev="devtmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 329.630205][ T7915] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 329.650671][ T31] audit: type=1400 audit(1794093090.736:547): avc: denied { write } for pid=7914 comm="syz.0.503" name="cluster" dev="configfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 329.852498][ T7917] xt_hashlimit: size too large, truncated to 1048576 [ 330.194298][ T1629] usb 40-1: device descriptor read/8, error -110 [ 330.711807][ T1629] usb usb40-port1: attempt power cycle [ 331.483897][ T1629] usb usb40-port1: unable to enumerate USB device [ 331.691095][ T7939] tipc: Cannot configure node identity twice [ 334.559910][ T7947] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 334.601466][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 334.601476][ T31] audit: type=1326 audit(1794093095.706:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.601499][ T31] audit: type=1326 audit(1794093095.706:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.634419][ T31] audit: type=1326 audit(1794093095.716:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.634462][ T31] audit: type=1326 audit(1794093095.746:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.634485][ T31] audit: type=1326 audit(1794093095.746:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.634504][ T31] audit: type=1326 audit(1794093095.746:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37c256034e code=0x7ffc0000 [ 334.796312][ T31] audit: type=1326 audit(1794093095.896:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7962 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 334.890258][ T31] audit: type=1400 audit(1794093095.996:558): avc: denied { read } for pid=7964 comm="syz.4.516" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 334.890423][ T31] audit: type=1400 audit(1794093095.996:559): avc: denied { open } for pid=7964 comm="syz.4.516" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 334.928274][ T31] audit: type=1326 audit(1794093096.026:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7960 comm="syz.0.515" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f37c259fb19 code=0x7ffc0000 [ 336.825291][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 342.941905][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 342.941929][ T31] audit: type=1400 audit(1794093103.516:579): avc: denied { create } for pid=7993 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 344.981699][ T8005] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 346.538758][ T8012] can0: slcan on ttyS3. [ 347.064150][ T8001] can0 (unregistered): slcan off ttyS3. [ 350.129815][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 351.300896][ T8033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 353.438041][ T1629] hid-sensor-hub 0003:1234:5678.0007: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 354.476632][ T8047] clocksource: Switched to clocksource acpi_pm [ 354.984907][ T8044] fido_id[8044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 355.051770][ T31] audit: type=1400 audit(1794093116.157:580): avc: denied { shutdown } for pid=8051 comm="syz.2.531" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 356.091657][ T8061] tipc: Started in network mode [ 356.091681][ T8061] tipc: Node identity 7f000001, cluster identity 4711 [ 356.091867][ T8061] tipc: Enabling of bearer rejected, failed to enable media [ 356.126536][ T8061] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 356.126859][ T8061] tipc: Enabled bearer , priority 10 [ 356.879742][ T8075] ubi0: attaching mtd0 [ 357.158724][ T5730] tipc: Node number set to 2130706433 [ 357.304137][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 357.348395][ T8075] ubi0: scanning is finished [ 357.348624][ T8075] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 357.399332][ T31] audit: type=1400 audit(1794093118.407:581): avc: denied { write } for pid=8073 comm="syz.4.541" name="interface.ncm" dev="configfs" ino=13813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.508352][ T25] usb 2-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 357.559439][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.559517][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.559702][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.716121][ T25] usb 2-1: config 0 descriptor?? [ 357.827065][ T8072] FAULT_INJECTION: forcing a failure. [ 357.827065][ T8072] name failslab, interval 1, probability 0, space 0, times 0 [ 357.827112][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.3.542 Not tainted syzkaller #0 PREEMPT(full) [ 357.827138][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 357.827152][ T8072] Call Trace: [ 357.827158][ T8072] [ 357.827165][ T8072] dump_stack_lvl+0x100/0x190 [ 357.827199][ T8072] should_fail_ex.cold+0x5/0xa [ 357.827228][ T8072] should_failslab+0xc2/0x120 [ 357.827252][ T8072] __kmalloc_noprof+0xfc/0x840 [ 357.827280][ T8072] ? apply_wqattrs_prepare+0xf8/0x980 [ 357.827310][ T8072] apply_wqattrs_prepare+0xf8/0x980 [ 357.827338][ T8072] __alloc_workqueue+0xdae/0x1900 [ 357.827374][ T8072] alloc_workqueue_noprof+0xc7/0x130 [ 357.827399][ T8072] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 357.827430][ T8072] ? __ceph_monc_want_map+0x189/0x360 [ 357.827454][ T8072] ? ceph_get_tree+0x399/0x2020 [ 357.827480][ T8072] ceph_get_tree+0x3fa/0x2020 [ 357.827503][ T8072] ? security_capable+0x80/0x260 [ 357.827530][ T8072] vfs_get_tree+0x92/0x320 [ 357.827558][ T8072] path_mount+0x7d0/0x2850 [ 357.827591][ T8072] ? __pfx_path_mount+0x10/0x10 [ 357.827617][ T8072] ? lockdep_hardirqs_on+0x7d/0x110 [ 357.827641][ T8072] ? putname+0xb1/0x110 [ 357.827669][ T8072] ? kmem_cache_free+0x127/0x6c0 [ 357.827703][ T8072] ? __x64_sys_mount+0x293/0x310 [ 357.827730][ T8072] __x64_sys_mount+0x293/0x310 [ 357.827757][ T8072] ? __pfx___x64_sys_mount+0x10/0x10 [ 357.827781][ T8072] ? __might_fault+0x111/0x140 [ 357.827806][ T8072] ? syscall_user_dispatch+0x89/0x140 [ 357.827833][ T8072] do_syscall_64+0x123/0x790 [ 357.827858][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.827876][ T8072] RIP: 0033:0x7f19e139fb19 [ 357.827893][ T8072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.827910][ T8072] RSP: 002b:00007f19e2345028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.827929][ T8072] RAX: ffffffffffffffda RBX: 00007f19e1625fa0 RCX: 00007f19e139fb19 [ 357.827940][ T8072] RDX: 0000200000025e00 RSI: 0000200000025dc0 RDI: 0000200000025d80 [ 357.827951][ T8072] RBP: 00007f19e1437b70 R08: 0000000000000000 R09: 0000000000000000 [ 357.827961][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.827970][ T8072] R13: 00007f19e1626038 R14: 00007f19e1625fa0 R15: 00007ffd1fcb93e8 [ 357.827996][ T8072] [ 358.226210][ T8075] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 358.276048][ T31] audit: type=1400 audit(1794093119.387:582): avc: denied { listen } for pid=8085 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 358.315447][ T31] audit: type=1400 audit(1794093119.427:583): avc: denied { setopt } for pid=8087 comm="syz.3.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 359.711835][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 359.711934][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 359.739700][ T25] usb 2-1: USB disconnect, device number 10 [ 360.774329][ T8117] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 360.776837][ T8117] CIFS: Attempting to mount //127.0.0.1/share [ 360.845680][ T8117] CIFS: VFS: Error connecting to socket. Aborting operation. [ 360.846228][ T8117] CIFS: VFS: cifs_mount failed w/return code = -111 [ 363.812875][ T31] audit: type=1400 audit(1794093124.917:584): avc: denied { write } for pid=8098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.907314][ T31] audit: type=1400 audit(1794093125.017:585): avc: denied { write } for pid=8136 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.195909][ T8140] xt_hashlimit: size too large, truncated to 1048576 [ 365.647924][ T31] audit: type=1400 audit(1794093126.737:586): avc: denied { write } for pid=8146 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.853549][ T31] audit: type=1400 audit(1794093126.967:587): avc: denied { connect } for pid=8146 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 365.891459][ T31] audit: type=1400 audit(1794093126.997:588): avc: denied { write } for pid=8146 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.621772][ T31] audit: type=1400 audit(1794093127.717:589): avc: denied { read write } for pid=8151 comm="syz.1.556" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 366.621822][ T31] audit: type=1400 audit(1794093127.717:590): avc: denied { open } for pid=8151 comm="syz.1.556" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 366.621858][ T31] audit: type=1326 audit(1794093127.717:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5816da4cba code=0x7ffc0000 [ 366.621896][ T31] audit: type=1326 audit(1794093127.717:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5815f9fb19 code=0x7ffc0000 [ 366.621934][ T31] audit: type=1326 audit(1794093127.717:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.1.556" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5816da4cba code=0x7ffc0000 [ 368.754929][ T8173] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 368.754982][ T8173] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 369.033602][ T8171] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 369.147595][ T8172] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.673876][ T8172] lo speed is unknown, defaulting to 1000 [ 369.925067][ T6477] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 370.139757][ T6477] usb 2-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 370.293657][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.293891][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.294548][ T6477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.358653][ T6477] usb 2-1: config 0 descriptor?? [ 373.878492][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.878539][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.902629][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 373.902643][ T31] audit: type=1400 audit(1794093133.297:598): avc: denied { create } for pid=8198 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.902740][ T31] audit: type=1400 audit(1794093133.487:599): avc: denied { accept } for pid=8198 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 374.107494][ T6477] usbhid 2-1:0.0: can't add hid device: -71 [ 374.107598][ T6477] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 374.136009][ T6477] usb 2-1: USB disconnect, device number 11 [ 375.423881][ T6477] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 375.631582][ T31] audit: type=1400 audit(1794093135.715:600): avc: denied { read } for pid=8226 comm="syz.1.573" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 375.631638][ T31] audit: type=1400 audit(1794093135.715:601): avc: denied { open } for pid=8226 comm="syz.1.573" path="/107/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 375.982125][ T6477] usb 3-1: Using ep0 maxpacket: 16 [ 375.988612][ T6477] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.988644][ T6477] usb 3-1: New USB device found: idVendor=064b, idProduct=7825, bcdDevice=88.5f [ 375.989864][ T6477] usb 3-1: config 2 has an invalid interface number: 132 but max is 0 [ 375.989881][ T6477] usb 3-1: config 2 has no interface number 0 [ 375.989903][ T6477] usb 3-1: config 2 interface 132 has no altsetting 0 [ 375.995281][ T6477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.995299][ T6477] usb 3-1: Product: syz [ 375.995311][ T6477] usb 3-1: Manufacturer: syz [ 375.995322][ T6477] usb 3-1: SerialNumber: syz [ 376.633505][ T6477] upd78f0730 3-1:2.132: upd78f0730 converter detected [ 376.640585][ T6477] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 376.648812][ T6477] usb 3-1: USB disconnect, device number 10 [ 376.663747][ T6477] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 376.664174][ T6477] upd78f0730 3-1:2.132: device disconnected [ 376.916120][ T8236] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 376.916229][ T8236] Error validating options; rc = [-22] [ 376.926575][ T8236] vlan0: entered promiscuous mode [ 379.192115][ T8244] jffs2: notice: (8244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 379.331704][ T31] audit: type=1400 audit(1794093139.415:602): avc: denied { write } for pid=8242 comm="syz.1.576" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.331956][ T31] audit: type=1400 audit(1794093139.415:603): avc: denied { add_name } for pid=8242 comm="syz.1.576" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.332240][ T31] audit: type=1400 audit(1794093139.425:604): avc: denied { create } for pid=8242 comm="syz.1.576" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 380.027944][ T31] audit: type=1400 audit(1794093140.135:605): avc: denied { read write open } for pid=8242 comm="syz.1.576" path="/109/mnt/fillfile" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 380.198470][ T8257] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 382.166653][ T8264] ceph: No mds server is up or the cluster is laggy [ 382.589075][ T1629] libceph: connect (1)[c::]:6789 error -101 [ 382.589255][ T1629] libceph: mon0 (1)[c::]:6789 connect error [ 383.026911][ T8271] gadgetfs: bound to dummy_udc driver [ 383.271581][ T1629] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 383.271937][ C0] gadgetfs: connected [ 383.273641][ T1629] gadgetfs: disconnected [ 383.441992][ C0] gadgetfs: connected [ 383.446098][ T1629] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 383.449566][ T1629] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 383.451321][ T1629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.491246][ C0] gadgetfs: configuration #1 [ 383.687256][ T1629] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 383.900819][ T8269] gadgetfs: suspended from state 3 [ 383.900970][ T8269] gadgetfs: disconnected [ 383.909831][ T1629] usb 4-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 383.919511][ T11] usb 1-1: USB disconnect, device number 15 [ 384.010216][ T1629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.010269][ T1629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.010386][ T1629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.189434][ T1629] usb 4-1: config 0 descriptor?? [ 384.340819][ T31] audit: type=1400 audit(1794093144.444:606): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 384.856643][ T31] audit: type=1804 audit(1794093144.924:607): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.585" name="/newroot/112/file0" dev="tmpfs" ino=644 res=1 errno=0 [ 386.990625][ T1629] usbhid 4-1:0.0: can't add hid device: -71 [ 386.990898][ T1629] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 387.123597][ T1629] usb 4-1: USB disconnect, device number 7 [ 387.505481][ T8287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.586'. [ 387.659278][ T31] audit: type=1400 audit(1794093147.754:608): avc: denied { mounton } for pid=8286 comm="syz.0.586" path="/proc/447/task" dev="proc" ino=18147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 391.709046][ T31] audit: type=1400 audit(1794093151.344:609): avc: denied { append } for pid=8293 comm="syz.2.588" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 391.709093][ T31] audit: type=1400 audit(1794093151.354:610): avc: denied { map } for pid=8293 comm="syz.2.588" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 391.709126][ T31] audit: type=1400 audit(1794093151.364:611): avc: denied { write execute } for pid=8293 comm="syz.2.588" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 393.231600][ T5829] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 393.381981][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 393.382805][ T5829] usb 5-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 393.385855][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.385877][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.387888][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.387907][ T5829] usb 5-1: Product: syz [ 393.387920][ T5829] usb 5-1: Manufacturer: syz [ 393.387932][ T5829] usb 5-1: SerialNumber: syz [ 393.709394][ T31] audit: type=1400 audit(1794093153.814:612): avc: denied { write } for pid=8309 comm="syz.4.592" name="functions" dev="configfs" ino=12505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 393.739771][ T31] audit: type=1400 audit(1794093153.854:613): avc: denied { write } for pid=8309 comm="syz.4.592" name="configs" dev="configfs" ino=12506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 393.815471][ T8319] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 393.815487][ T8319] device-mapper: ioctl: error adding target to table [ 393.865623][ T31] audit: type=1400 audit(1794093153.964:614): avc: denied { write } for pid=8309 comm="syz.4.592" name="c.1" dev="configfs" ino=18273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 393.865950][ T31] audit: type=1400 audit(1794093153.974:615): avc: denied { create } for pid=8309 comm="syz.4.592" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 393.941807][ T31] audit: type=1400 audit(1794093154.044:616): avc: denied { write } for pid=8309 comm="syz.4.592" name="c.1" dev="configfs" ino=18273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 394.125232][ T5829] usb 5-1: USB disconnect, device number 8 [ 394.216905][ T8234] udevd[8234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.456301][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 398.810403][ T5730] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 399.027113][ T31] audit: type=1400 audit(1794093159.134:617): avc: denied { bind } for pid=8348 comm="syz.2.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 399.085659][ T5730] usb 5-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 399.313147][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.313268][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.313642][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.465308][ T5730] usb 5-1: config 0 descriptor?? [ 399.924673][ T5730] usb 5-1: can't set config #0, error -71 [ 399.968557][ T5730] usb 5-1: USB disconnect, device number 9 [ 400.737346][ T8360] FAULT_INJECTION: forcing a failure. [ 400.737346][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 400.737364][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.3.605 Not tainted syzkaller #0 PREEMPT(full) [ 400.737375][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 400.737382][ T8360] Call Trace: [ 400.737385][ T8360] [ 400.737390][ T8360] dump_stack_lvl+0x100/0x190 [ 400.737411][ T8360] should_fail_ex.cold+0x5/0xa [ 400.737428][ T8360] should_failslab+0xc2/0x120 [ 400.737442][ T8360] __kmalloc_cache_noprof+0x91/0x6d0 [ 400.737457][ T8360] ? sctp_auth_shkey_create+0x9e/0x210 [ 400.737471][ T8360] sctp_auth_shkey_create+0x9e/0x210 [ 400.737482][ T8360] sctp_endpoint_new+0x589/0xb20 [ 400.737494][ T8360] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 400.737504][ T8360] ? lock_acquire+0x1d1/0x380 [ 400.737520][ T8360] ? lockdep_init_map_type+0x5c/0x250 [ 400.737536][ T8360] sctp_init_sock+0xe2b/0x1300 [ 400.737546][ T8360] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 400.737556][ T8360] sctp_v6_init_sock+0x16/0x70 [ 400.737565][ T8360] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 400.737575][ T8360] inet6_create+0xb1a/0x12b0 [ 400.737592][ T8360] ? inet6_create+0x7f/0x12b0 [ 400.737609][ T8360] __sock_create+0x339/0x860 [ 400.737628][ T8360] __sys_socket+0x14d/0x260 [ 400.737637][ T8360] ? __pfx___sys_socket+0x10/0x10 [ 400.737647][ T8360] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 400.737664][ T8360] __x64_sys_socket+0x72/0xb0 [ 400.737673][ T8360] ? lockdep_hardirqs_on+0x7d/0x110 [ 400.737689][ T8360] do_syscall_64+0x123/0x790 [ 400.737704][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.737715][ T8360] RIP: 0033:0x7f19e139fb19 [ 400.737725][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.737734][ T8360] RSP: 002b:00007f19e2345028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 400.737747][ T8360] RAX: ffffffffffffffda RBX: 00007f19e1625fa0 RCX: 00007f19e139fb19 [ 400.737754][ T8360] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 400.737759][ T8360] RBP: 00007f19e1437b70 R08: 0000000000000000 R09: 0000000000000000 [ 400.737765][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.737771][ T8360] R13: 00007f19e1626038 R14: 00007f19e1625fa0 R15: 00007ffd1fcb93e8 [ 400.737785][ T8360] [ 402.178165][ T8375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.595'. [ 402.382618][ T31] audit: type=1400 audit(1794093162.484:618): avc: denied { mount } for pid=8376 comm="syz.3.607" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 402.571540][ T5829] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 402.588330][ T8378] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.607'. [ 402.988764][ T5829] usb 3-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 403.058874][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.058906][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.058938][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.425448][ T5829] usb 3-1: config 0 descriptor?? [ 403.617842][ T31] audit: type=1400 audit(1794093163.724:619): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 404.917939][ T31] audit: type=1400 audit(1794093164.164:620): avc: denied { module_request } for pid=8379 comm="syz.3.609" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 405.042024][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 405.042087][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 405.045985][ T5829] usb 3-1: USB disconnect, device number 11 [ 409.305164][ T8418] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 409.441656][ T31] audit: type=1400 audit(1794093169.404:621): avc: denied { map } for pid=8411 comm="syz.0.617" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 409.680263][ T31] audit: type=1400 audit(1794093169.784:622): avc: denied { ioctl } for pid=8407 comm="syz.4.606" path="socket:[18975]" dev="sockfs" ino=18975 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.504845][ T8429] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 413.921906][ T8445] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 413.987243][ T8446] veth1_vlan: entered allmulticast mode [ 414.006348][ T31] audit: type=1400 audit(1794093174.114:623): avc: denied { ioctl } for pid=8442 comm="syz.4.623" path="/126/debug/tracing/events/sched/sched_switch/enable" dev="tracefs" ino=19680823 ioctlcmd=0x40043d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 414.315046][ T31] audit: type=1400 audit(1794093174.404:624): avc: denied { bind } for pid=8450 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 414.757449][ T8453] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 414.757469][ T8453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 414.757512][ T8453] vhci_hcd vhci_hcd.0: Device attached [ 414.760103][ T8455] vhci_hcd: connection closed [ 414.787646][ T62] vhci_hcd vhci_hcd.0: stop threads [ 414.787667][ T62] vhci_hcd vhci_hcd.0: release socket [ 414.787696][ T62] vhci_hcd vhci_hcd.0: disconnect device [ 417.003545][ T31] audit: type=1400 audit(1794093176.694:625): avc: denied { create } for pid=8463 comm="syz.3.629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.003381][ T31] audit: type=1400 audit(1794093180.584:626): avc: denied { ioctl } for pid=8500 comm="syz.4.640" path="socket:[19721]" dev="sockfs" ino=19721 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.003431][ T31] audit: type=1400 audit(1794093180.594:627): avc: denied { write } for pid=8500 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.175729][ T8542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.856848][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 428.211523][ T31] audit: type=1400 audit(1794093188.224:628): avc: denied { mount } for pid=8537 comm="syz.2.648" name="/" dev="rpc_pipefs" ino=19800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 429.041846][ T8550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.180700][ T8563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 431.180716][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 431.198618][ T8563] vhci_hcd vhci_hcd.0: Device attached [ 431.358717][ T8566] FAULT_INJECTION: forcing a failure. [ 431.358717][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 431.358742][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.0.652 Not tainted syzkaller #0 PREEMPT(full) [ 431.358761][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 431.358771][ T8566] Call Trace: [ 431.358776][ T8566] [ 431.358782][ T8566] dump_stack_lvl+0x100/0x190 [ 431.358815][ T8566] should_fail_ex.cold+0x5/0xa [ 431.358838][ T8566] should_failslab+0xc2/0x120 [ 431.358859][ T8566] __kmalloc_noprof+0xfc/0x840 [ 431.358885][ T8566] ? security_inode_init_security+0x113/0x370 [ 431.358914][ T8566] security_inode_init_security+0x113/0x370 [ 431.358935][ T8566] ? __pfx_shmem_initxattrs+0x10/0x10 [ 431.358967][ T8566] ? __pfx_security_inode_init_security+0x10/0x10 [ 431.358989][ T8566] ? may_create+0x280/0x430 [ 431.359008][ T8566] shmem_mknod+0x2ce/0x480 [ 431.359032][ T8566] ? __pfx_shmem_mknod+0x10/0x10 [ 431.359056][ T8566] ? bpf_lsm_inode_mknod+0x9/0x10 [ 431.359080][ T8566] vfs_mknod+0x3ae/0x840 [ 431.359100][ T8566] filename_mknodat+0x5d5/0x830 [ 431.359124][ T8566] ? __pfx_filename_mknodat+0x10/0x10 [ 431.359144][ T8566] ? strncpy_from_user+0x19d/0x2d0 [ 431.359172][ T8566] ? do_getname+0x191/0x390 [ 431.359196][ T8566] __x64_sys_mknodat+0xb5/0xf0 [ 431.359216][ T8566] do_syscall_64+0x123/0x790 [ 431.359240][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.359258][ T8566] RIP: 0033:0x7f37c259fb19 [ 431.359273][ T8566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.359291][ T8566] RSP: 002b:00007f37c341a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 431.359308][ T8566] RAX: ffffffffffffffda RBX: 00007f37c2825fa0 RCX: 00007f37c259fb19 [ 431.359320][ T8566] RDX: 0000000000006180 RSI: 00002000000008c0 RDI: ffffffffffffff9c [ 431.359332][ T8566] RBP: 00007f37c2637b70 R08: 0000000000000000 R09: 0000000000000000 [ 431.359344][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.359356][ T8566] R13: 00007f37c2826038 R14: 00007f37c2825fa0 R15: 00007ffc98554cc8 [ 431.359380][ T8566] [ 432.907110][ T5738] usb 42-1: SetAddress Request (2) to port 0 [ 432.907165][ T5738] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 432.941240][ T8567] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 432.970628][ T8565] vhci_hcd: connection closed [ 432.992602][ T5994] vhci_hcd vhci_hcd.4: stop threads [ 432.992616][ T5994] vhci_hcd vhci_hcd.4: release socket [ 432.992654][ T5994] vhci_hcd vhci_hcd.4: disconnect device [ 433.338744][ T5618] Bluetooth: hci1: ISO packet for unknown connection handle 201 [ 434.893235][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.893287][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.085821][ T8594] tmpfs: Using encoding : utf8-12.1.0 [ 437.398851][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 438.189783][ T5738] usb 42-1: device descriptor read/8, error -110 [ 438.583088][ T5738] usb usb42-port1: attempt power cycle [ 439.117597][ T13] IPVS: starting estimator thread 0... [ 439.234775][ T8630] IPVS: using max 13 ests per chain, 31200 per kthread [ 439.721407][ T6477] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 439.899876][ T5738] usb usb42-port1: unable to enumerate USB device [ 440.068245][ T6477] usb 2-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 440.141526][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.141557][ T6477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.141589][ T6477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.208353][ T6477] usb 2-1: config 0 descriptor?? [ 440.791472][ T5738] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 440.951464][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 440.954916][ T5738] usb 5-1: New USB device found: idVendor=046d, idProduct=c537, bcdDevice=0.00 [ 440.967659][ T5738] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 440.967674][ T5738] usb 5-1: config 0 has no interface number 0 [ 440.967692][ T5738] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.967740][ T5738] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.967752][ T5738] usb 5-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.967772][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.025808][ T5738] usb 5-1: config 0 descriptor?? [ 441.088704][ T6477] usbhid 2-1:0.0: can't add hid device: -71 [ 441.088840][ T6477] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 441.107808][ T6477] usb 2-1: USB disconnect, device number 12 [ 441.135377][ T31] audit: type=1400 audit(1794093201.244:629): avc: denied { getopt } for pid=8648 comm="syz.2.670" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.371016][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.375701][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.375778][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.376272][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.376772][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.377757][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.378200][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.379201][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 441.379509][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 442.285710][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285737][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285749][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285761][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285774][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285786][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.285798][ T5738] logitech-djreceiver 0003:046D:C537.0008: unknown main item tag 0x0 [ 442.866369][ T5738] logitech-djreceiver 0003:046D:C537.0008: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.4-1/input4 [ 444.070999][ T8666] __nla_validate_parse: 11 callbacks suppressed [ 444.071040][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 445.212752][ T5730] usb 5-1: USB disconnect, device number 10 [ 448.506538][ T8683] tipc: Started in network mode [ 448.506769][ T8683] tipc: Node identity 4, cluster identity 4711 [ 448.506844][ T8683] tipc: Node number set to 4 [ 449.893284][ T31] audit: type=1400 audit(1794093209.814:630): avc: denied { read write } for pid=8688 comm="syz.1.680" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 449.893318][ T31] audit: type=1400 audit(1794093209.814:631): avc: denied { open } for pid=8688 comm="syz.1.680" path="/126/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 449.893340][ T31] audit: type=1400 audit(1794093209.814:632): avc: denied { ioctl } for pid=8688 comm="syz.1.680" path="/126/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0xc0104d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 454.011470][ T5738] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 454.161998][ T5738] usb 5-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 454.163262][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.163289][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.163317][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.164542][ T5738] usb 5-1: config 0 descriptor?? [ 454.371737][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 456.870449][ T5738] usbhid 5-1:0.0: can't add hid device: -71 [ 456.870524][ T5738] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.893832][ T5738] usb 5-1: USB disconnect, device number 11 [ 460.210598][ T31] audit: type=1326 audit(1794093220.314:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 460.241884][ T31] audit: type=1326 audit(1794093220.354:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 460.243570][ T31] audit: type=1326 audit(1794093220.354:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 460.246779][ T31] audit: type=1326 audit(1794093220.354:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 460.246952][ T31] audit: type=1326 audit(1794093220.354:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 460.248302][ T31] audit: type=1326 audit(1794093220.354:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 460.297399][ T31] audit: type=1326 audit(1794093220.404:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 460.297560][ T31] audit: type=1326 audit(1794093220.404:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 460.297710][ T31] audit: type=1326 audit(1794093220.404:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19e139f882 code=0x7ffc0000 [ 460.297944][ T31] audit: type=1326 audit(1794093220.404:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.3.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f19e139f917 code=0x7ffc0000 [ 468.021486][ T5730] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 468.198936][ T5730] usb 5-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 468.200029][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.200052][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.200071][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.243951][ T5730] usb 5-1: config 0 descriptor?? [ 471.557910][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 471.558014][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.586080][ T5730] usb 5-1: USB disconnect, device number 12 [ 472.092169][ T8808] gadgetfs: bound to dummy_udc driver [ 472.390019][ T11] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 472.541917][ T5829] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 472.542415][ C0] gadgetfs: connected [ 472.544238][ T5829] gadgetfs: disconnected [ 472.563078][ T11] usb 1-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=1.00 [ 472.584965][ T11] usb 1-1: config 0 has no interfaces? [ 472.585174][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.747313][ T11] usb 1-1: config 0 descriptor?? [ 472.767038][ C0] gadgetfs: connected [ 472.820456][ T5829] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00 [ 472.833568][ T5829] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 472.833660][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.001058][ C0] gadgetfs: configuration #1 [ 473.041555][ T8803] gadgetfs: suspended from state 3 [ 473.041670][ T8803] gadgetfs: disconnected [ 473.124231][ T5829] usb 2-1: USB disconnect, device number 13 [ 473.524612][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.529669][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.537725][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.552226][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.552809][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.564221][ T31] kauditd_printk_skb: 184 callbacks suppressed [ 473.564235][ T31] audit: type=1400 audit(1794093233.663:827): avc: denied { mounton } for pid=8813 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 473.575962][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 473.633725][ T5730] usb 1-1: USB disconnect, device number 16 [ 473.934045][ T8821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.023586][ T5829] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 475.171659][ T8813] rxe_eth0 speed is unknown, defaulting to 1000 [ 475.176046][ T5829] usb 5-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 475.182597][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.182635][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 475.182658][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 475.182680][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 475.182702][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 475.182719][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 148, setting to 64 [ 475.182739][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.196831][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.196849][ T5829] usb 5-1: Product: syz [ 475.196860][ T5829] usb 5-1: Manufacturer: syz [ 475.196871][ T5829] usb 5-1: SerialNumber: syz [ 475.211931][ T5829] usb 5-1: config 0 descriptor?? [ 475.215357][ T8824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.215477][ T8824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.651617][ T53] Bluetooth: hci0: command tx timeout [ 475.691080][ T31] audit: type=1400 audit(1794093235.793:828): avc: denied { bind } for pid=8823 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.933482][ T31] audit: type=1400 audit(1794093236.043:829): avc: denied { read append } for pid=8834 comm="syz.0.720" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 475.934312][ T31] audit: type=1400 audit(1794093236.043:830): avc: denied { open } for pid=8834 comm="syz.0.720" path="/dev/cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 476.797117][ T31] audit: type=1400 audit(1794093236.263:831): avc: denied { ioctl } for pid=8834 comm="syz.0.720" path="/dev/cachefiles" dev="devtmpfs" ino=82 ioctlcmd=0x9000aecf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 476.921018][ T8813] lo speed is unknown, defaulting to 1000 [ 477.115233][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'. [ 477.731303][ T53] Bluetooth: hci0: command tx timeout [ 477.914031][ T8845] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 477.914055][ T8845] block device autoloading is deprecated and will be removed. [ 478.092041][ T5829] rc_core: IR keymap rc-snapstream-firefly not found [ 478.092058][ T5829] Registered IR keymap rc-empty [ 478.109460][ T5829] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 478.116799][ T5829] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 478.161680][ T5829] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 478.249635][ T5829] usb 5-1: USB disconnect, device number 13 [ 478.249717][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 478.272485][ T4971] ati_remote 5-1:0.0: ati_remote_open: usb_submit_urb failed! [ 479.339840][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.343009][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.343106][ T8813] bridge_slave_0: entered allmulticast mode [ 479.346095][ T8813] bridge_slave_0: entered promiscuous mode [ 479.352972][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.354645][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.354730][ T8813] bridge_slave_1: entered allmulticast mode [ 479.357035][ T8813] bridge_slave_1: entered promiscuous mode [ 479.811473][ T53] Bluetooth: hci0: command tx timeout [ 480.032725][ T5829] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 481.039418][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.074772][ T5829] usb 5-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 481.124845][ T5829] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 481.124893][ T5829] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 481.124936][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.124980][ T5829] usb 5-1: config 0 has no interface number 0 [ 481.125221][ T5829] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 481.125269][ T5829] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12408, setting to 64 [ 481.125314][ T5829] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 481.125483][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.285719][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.370013][ T5829] usb 5-1: config 0 descriptor?? [ 481.404379][ T8813] team0: Port device team_slave_0 added [ 481.406487][ T8813] team0: Port device team_slave_1 added [ 481.424159][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.424170][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.424187][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.425406][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.425415][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.425432][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.452797][ T8813] hsr_slave_0: entered promiscuous mode [ 481.453373][ T8813] hsr_slave_1: entered promiscuous mode [ 481.453780][ T8813] debugfs: 'hsr0' already exists in 'hsr' [ 481.453791][ T8813] Cannot create hsr debugfs directory [ 481.503657][ T5829] usb 5-1: can't set config #0, error -71 [ 481.505946][ T5829] usb 5-1: USB disconnect, device number 14 [ 481.994146][ T53] Bluetooth: hci0: command tx timeout [ 483.796872][ T8891] overlayfs: failed to resolve './file0': -2 [ 483.915218][ T31] audit: type=1400 audit(1794093244.023:832): avc: denied { append } for pid=8893 comm="syz.3.725" name="video8" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 483.948278][ T31] audit: type=1400 audit(1794093244.053:833): avc: denied { write } for pid=8893 comm="syz.3.725" name="nullb" dev="configfs" ino=3646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 484.025636][ T8813] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.058988][ T8813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.064315][ T8813] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.098720][ T8813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.106519][ T8813] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.143983][ T8813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.147962][ T8813] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.200311][ T8894] null_blk: disk nullb1 created [ 484.228943][ T8813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.129656][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.150586][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.327326][ T8813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.327361][ T8813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.864766][ T31] audit: type=1326 audit(1794093245.973:834): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8911 comm="syz.3.729" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x0 [ 486.274717][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.274804][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.285084][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.285158][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.982382][ T31] audit: type=1400 audit(1794093247.083:835): avc: denied { connect } for pid=8926 comm="syz.3.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 488.152153][ T8934] ip_tables: iptables: counters copy to user failed while replacing table [ 488.178517][ T31] audit: type=1400 audit(1794093248.283:836): avc: denied { setopt } for pid=8937 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 488.596501][ T8950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 489.128377][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.164250][ T31] audit: type=1326 audit(1794093249.263:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8957 comm="syz.4.735" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f75216abcba code=0x0 [ 490.960307][ T8813] veth0_vlan: entered promiscuous mode [ 491.052232][ T8813] veth1_vlan: entered promiscuous mode [ 491.342300][ T8987] jffs2: notice: (8987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 491.846591][ T8813] veth0_macvtap: entered promiscuous mode [ 491.871077][ T8813] veth1_macvtap: entered promiscuous mode [ 491.909261][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.943516][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.151049][ T31] audit: type=1400 audit(1794093252.253:838): avc: denied { connect } for pid=8988 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 492.292114][ T1408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.293611][ T1408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.293815][ T1408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.294205][ T1408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.549626][ T31] audit: type=1400 audit(1794093252.653:839): avc: denied { getopt } for pid=8994 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 494.658187][ T9005] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 495.223357][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.223370][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.612516][ T1408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.612550][ T1408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.981332][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.981442][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.310160][ T31] audit: type=1400 audit(1794093256.403:840): avc: denied { mounton } for pid=8813 comm="syz-executor" path="/root/syzkaller.iYefoz/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 497.426342][ T31] audit: type=1400 audit(1794093257.533:841): avc: denied { mounton } for pid=8813 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 498.256852][ T31] audit: type=1400 audit(1794093258.363:842): avc: denied { write } for pid=9000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.696663][ T5740] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 499.764759][ T9039] 9p: Bad value for 'wfdno' [ 500.264187][ T5740] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 500.268221][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.268248][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.268279][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.270481][ T5740] usb 1-1: config 0 descriptor?? [ 500.463678][ T31] audit: type=1400 audit(1794093260.573:843): avc: denied { write } for pid=9044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.552085][ T5740] usbhid 1-1:0.0: can't add hid device: -71 [ 500.552178][ T5740] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 500.576926][ T5740] usb 1-1: USB disconnect, device number 17 [ 500.730939][ T31] audit: type=1400 audit(1794093260.833:844): avc: denied { append } for pid=9047 comm="syz.2.754" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.817161][ T9053] loop6: detected capacity change from 0 to 2640 [ 500.843386][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.843920][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.844394][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.844469][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.845060][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.847793][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.856300][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.856741][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.856852][ T9053] ldm_validate_partition_table(): Disk read failed. [ 500.857220][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.857659][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 500.858464][ T9053] Dev loop6: unable to read RDB block 0 [ 500.860762][ T9053] loop6: unable to read partition table [ 500.864693][ T9053] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 503.399205][ T31] audit: type=1400 audit(1794093263.503:845): avc: denied { write } for pid=9058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.497155][ T31] audit: type=1400 audit(1794093263.603:846): avc: denied { write } for pid=9078 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.913189][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 503.913515][ T31] audit: type=1400 audit(1794093264.023:847): avc: denied { write } for pid=9082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.001374][ T5740] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 504.036430][ T31] audit: type=1400 audit(1794093264.143:848): avc: denied { write } for pid=9093 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.062660][ T5829] usb 3-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 504.066540][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.066565][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.066592][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.078028][ T5829] usb 3-1: config 0 descriptor?? [ 504.153458][ T5740] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 504.159513][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.159585][ T5740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.159614][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.183307][ T5740] usb 1-1: config 0 descriptor?? [ 508.039275][ T5740] usbhid 1-1:0.0: can't add hid device: -71 [ 508.039417][ T5740] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 508.053337][ T5740] usb 1-1: USB disconnect, device number 18 [ 508.074747][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 508.074840][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 508.099797][ T5829] usb 3-1: USB disconnect, device number 12 [ 508.976426][ T9111] input: syz1 as /devices/virtual/input/input15 [ 513.454225][ T5829] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 513.557973][ T9137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 513.602084][ T5829] usb 3-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 513.603090][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.603116][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.603145][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.625033][ T5829] usb 3-1: config 0 descriptor?? [ 514.144264][ T9147] FAULT_INJECTION: forcing a failure. [ 514.144264][ T9147] name fail_futex, interval 1, probability 0, space 0, times 1 [ 514.144291][ T9147] CPU: 1 UID: 0 PID: 9147 Comm: syz.3.767 Not tainted syzkaller #0 PREEMPT(full) [ 514.144312][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 514.144322][ T9147] Call Trace: [ 514.144330][ T9147] [ 514.144338][ T9147] dump_stack_lvl+0x100/0x190 [ 514.144373][ T9147] should_fail_ex.cold+0x5/0xa [ 514.144400][ T9147] get_futex_key+0x1c9/0x13e0 [ 514.144422][ T9147] ? __pfx_get_futex_key+0x10/0x10 [ 514.144446][ T9147] futex_wait_setup+0x91/0x540 [ 514.144479][ T9147] __futex_wait+0x19f/0x360 [ 514.144506][ T9147] ? __pfx___futex_wait+0x10/0x10 [ 514.144529][ T9147] ? __pfx_try_to_wake_up+0x10/0x10 [ 514.144553][ T9147] ? futex_hash+0x311/0x400 [ 514.144573][ T9147] ? __pfx_futex_wake_mark+0x10/0x10 [ 514.144602][ T9147] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 514.144636][ T9147] futex_wait+0xe6/0x370 [ 514.144662][ T9147] ? __pfx_futex_wait+0x10/0x10 [ 514.144692][ T9147] ? __might_fault+0xc5/0x140 [ 514.144713][ T9147] ? find_held_lock+0x2b/0x80 [ 514.144731][ T9147] ? __might_fault+0xc5/0x140 [ 514.144752][ T9147] do_futex+0x265/0x440 [ 514.144772][ T9147] ? __pfx_do_futex+0x10/0x10 [ 514.144792][ T9147] ? _copy_to_user+0xaf/0xd0 [ 514.144819][ T9147] __x64_sys_futex+0x34f/0x4d0 [ 514.144844][ T9147] ? __pfx___x64_sys_futex+0x10/0x10 [ 514.144867][ T9147] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 514.144898][ T9147] do_syscall_64+0x123/0x790 [ 514.144920][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.144937][ T9147] RIP: 0033:0x7f19e139fb19 [ 514.144953][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.144970][ T9147] RSP: 002b:00007f19e23030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 514.144989][ T9147] RAX: ffffffffffffffda RBX: 00007f19e1626188 RCX: 00007f19e139fb19 [ 514.145000][ T9147] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19e1626188 [ 514.145011][ T9147] RBP: 00007f19e1626180 R08: 0000000000000000 R09: 0000000000000000 [ 514.145022][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.145033][ T9147] R13: 00007f19e1626218 R14: 00007ffd1fcb9300 R15: 00007ffd1fcb93e8 [ 514.145057][ T9147] [ 515.027051][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 515.027140][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 515.193081][ T5829] usb 3-1: USB disconnect, device number 13 [ 516.003431][ T5829] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 516.076628][ T5730] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 516.206866][ T5829] usb 6-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 516.343493][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.343639][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.343838][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.456641][ T5730] usb 4-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.00 [ 516.502558][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.502589][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.502620][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.607996][ T5829] usb 6-1: config 0 descriptor?? [ 516.915777][ T5730] usb 4-1: config 0 descriptor?? [ 518.974473][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 518.974853][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 518.992117][ T5730] usb 4-1: USB disconnect, device number 8 [ 519.522389][ T5829] usbhid 6-1:0.0: can't add hid device: -71 [ 519.522487][ T5829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 519.529779][ T5829] usb 6-1: USB disconnect, device number 2 [ 522.708553][ T31] audit: type=1400 audit(1794093282.793:849): avc: denied { create } for pid=9183 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 525.191215][ T9204] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 525.383779][ T31] audit: type=1326 audit(1794093285.473:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.5.782" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0aa6890cba code=0x7ffc0000 [ 525.384317][ T31] audit: type=1326 audit(1794093285.473:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.5.782" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa599fb19 code=0x7ffc0000 [ 525.384777][ T31] audit: type=1326 audit(1794093285.483:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.5.782" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa599fb19 code=0x7ffc0000 [ 526.159308][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159326][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159913][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159934][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159952][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159970][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.159989][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.160007][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.160025][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.160043][ T30] hid-sensor-hub 0003:1234:5678.0009: unknown main item tag 0x0 [ 526.160112][ T30] hid-sensor-hub 0003:1234:5678.0009: unbalanced collection at end of report description [ 526.263417][ T30] hid-sensor-hub 0003:1234:5678.0009: parse failed [ 526.263475][ T30] hid-sensor-hub 0003:1234:5678.0009: probe with driver hid-sensor-hub failed with error -22 [ 526.885872][ T9218] jffs2: notice: (9218) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 530.583199][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 530.585428][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 530.586101][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 530.586795][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 530.587260][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.177886][ T53] Bluetooth: hci5: command tx timeout [ 533.640609][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.558271][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.694399][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.896620][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.284079][ T53] Bluetooth: hci5: command tx timeout [ 535.710822][ T31] audit: type=1326 audit(1794093295.813:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 535.711030][ T31] audit: type=1326 audit(1794093295.813:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 535.711528][ T31] audit: type=1326 audit(1794093295.823:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 535.849351][ T31] audit: type=1326 audit(1794093295.953:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 535.849569][ T31] audit: type=1326 audit(1794093295.953:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 535.849768][ T31] audit: type=1326 audit(1794093295.953:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 535.850290][ T31] audit: type=1326 audit(1794093295.953:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 535.850506][ T31] audit: type=1326 audit(1794093295.953:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 535.881792][ T31] audit: type=1326 audit(1794093295.993:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f19e234ccba code=0x7ffc0000 [ 535.881990][ T31] audit: type=1326 audit(1794093295.993:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9259 comm="syz.3.795" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19e139fb19 code=0x7ffc0000 [ 536.694084][ T9279] jffs2: notice: (9279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 537.161139][ T9279] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 537.331301][ T53] Bluetooth: hci5: command tx timeout [ 537.362606][ T9228] rxe_eth0 speed is unknown, defaulting to 1000 [ 537.515357][ T44] bridge_slave_1: left allmulticast mode [ 537.515386][ T44] bridge_slave_1: left promiscuous mode [ 537.516279][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.442551][ T53] Bluetooth: hci5: command tx timeout [ 539.795231][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.928404][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.969098][ T44] bond0 (unregistering): Released all slaves [ 539.984994][ T44] bond1 (unregistering): Released all slaves [ 540.049810][ T9228] lo speed is unknown, defaulting to 1000 [ 541.126957][ T44] tipc: Left network mode [ 541.725566][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 543.609897][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 543.609913][ T31] audit: type=1400 audit(1794093303.712:876): avc: denied { search } for pid=9303 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.661158][ T31] audit: type=1400 audit(1794093303.742:877): avc: denied { read } for pid=5621 comm="syz-executor" name="loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.661202][ T31] audit: type=1400 audit(1794093303.742:878): avc: denied { open } for pid=5621 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.661239][ T31] audit: type=1400 audit(1794093303.752:879): avc: denied { ioctl } for pid=5621 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 543.735256][ T31] audit: type=1400 audit(1794093303.832:880): avc: denied { getattr } for pid=9303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.739264][ T31] audit: type=1400 audit(1794093303.832:881): avc: denied { write } for pid=9303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.739298][ T31] audit: type=1400 audit(1794093303.842:882): avc: denied { add_name } for pid=9303 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.739327][ T31] audit: type=1400 audit(1794093303.842:883): avc: denied { create } for pid=9303 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.740217][ T31] audit: type=1400 audit(1794093303.842:884): avc: denied { write open } for pid=9303 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 543.740251][ T31] audit: type=1400 audit(1794093303.842:885): avc: denied { append } for pid=9303 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2787 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 544.175817][ T9342] Bluetooth: MGMT ver 1.23 [ 546.299024][ T53] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 547.296796][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 547.471383][ T9100] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 547.636329][ T9100] usb 3-1: Using ep0 maxpacket: 16 [ 547.731360][ T53] Bluetooth: hci0: command 0x0c3a tx timeout [ 548.885565][ T31] kauditd_printk_skb: 72 callbacks suppressed [ 548.885582][ T31] audit: type=1400 audit(1794093308.992:958): avc: denied { ioctl } for pid=9356 comm="syz.2.810" path="socket:[22506]" dev="sockfs" ino=22506 ioctlcmd=0x400448cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 548.902266][ T31] audit: type=1400 audit(1794093309.012:959): avc: denied { read write } for pid=9369 comm="syz.3.812" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 548.902587][ T31] audit: type=1400 audit(1794093309.012:960): avc: denied { open } for pid=9369 comm="syz.3.812" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 549.037283][ T31] audit: type=1400 audit(1794093309.142:961): avc: denied { create } for pid=9356 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 549.726645][ T31] audit: type=1400 audit(1794093309.252:962): avc: denied { map_create } for pid=9369 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 549.834795][ T31] audit: type=1400 audit(1794093309.942:963): avc: denied { create } for pid=9356 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 549.837071][ T31] audit: type=1400 audit(1794093309.942:964): avc: denied { setopt } for pid=9356 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 549.838662][ T31] audit: type=1400 audit(1794093309.942:965): avc: denied { bind } for pid=9356 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 549.862115][ T31] audit: type=1400 audit(1794093309.962:966): avc: denied { name_bind } for pid=9356 comm="syz.2.810" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 549.932903][ T31] audit: type=1400 audit(1794093310.012:967): avc: denied { node_bind } for pid=9356 comm="syz.2.810" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 552.735688][ T9100] usb 3-1: unable to get BOS descriptor or descriptor too short [ 552.736075][ T9100] usb 3-1: New USB device found: idVendor=0525, idProduct=a4bf, bcdDevice=62.f1 [ 552.747373][ T9100] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 552.747432][ T9100] usb 3-1: chopping to 0 config(s) [ 552.748490][ T9100] usb 3-1: can't read configurations, error -32 [ 552.881197][ T9100] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 552.977141][ T9357] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.022135][ T9100] usb 3-1: device descriptor read/64, error -32 [ 553.133029][ T9100] usb usb3-port1: attempt power cycle [ 553.421582][ T44] hsr_slave_0: left promiscuous mode [ 553.700725][ T44] hsr_slave_1: left promiscuous mode [ 553.759725][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.759836][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.887916][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.887939][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.032842][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 555.032858][ T31] audit: type=1400 audit(1794093315.142:984): avc: denied { create } for pid=9393 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 555.334590][ T31] audit: type=1400 audit(1794093315.442:985): avc: denied { mounton } for pid=9393 comm="syz.2.819" path="/166/dev" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 555.339917][ T31] audit: type=1400 audit(1794093315.442:986): avc: denied { mount } for pid=9393 comm="syz.2.819" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 555.361162][ T31] audit: type=1400 audit(1794093315.452:987): avc: denied { read } for pid=9393 comm="syz.2.819" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.361199][ T31] audit: type=1400 audit(1794093315.452:988): avc: denied { open } for pid=9393 comm="syz.2.819" path="/166/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 555.644462][ T44] veth1_macvtap: left promiscuous mode [ 555.644510][ T44] veth0_macvtap: left promiscuous mode [ 555.644592][ T44] veth1_vlan: left promiscuous mode [ 555.644663][ T44] veth0_vlan: left promiscuous mode [ 555.706822][ T31] audit: type=1400 audit(1794093315.812:989): avc: denied { write } for pid=9364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.815573][ T9406] No control pipe specified [ 556.534779][ T9411] netlink: 25 bytes leftover after parsing attributes in process `syz.5.820'. [ 556.587130][ T9408] netlink: 'syz.5.820': attribute type 4 has an invalid length. [ 556.628773][ T31] audit: type=1400 audit(1794093316.732:990): avc: denied { write } for pid=9407 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.004751][ T31] audit: type=1400 audit(1794093317.112:992): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 557.007750][ T31] audit: type=1400 audit(1794093317.112:991): avc: denied { create } for pid=9413 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 557.059624][ T44] team0 (unregistering): Port device team_slave_1 removed [ 558.053578][ T31] audit: type=1400 audit(1794093317.762:993): avc: denied { read } for pid=9415 comm="syz.2.821" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 558.055567][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.056610][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.336961][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 577.336977][ T31] audit: type=1400 audit(1794093337.452:1001): avc: denied { read write } for pid=9427 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 577.337564][ T31] audit: type=1400 audit(1794093337.452:1002): avc: denied { open } for pid=9427 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 598.681286][ C0] sched: DL replenish lagged too much [ 618.855835][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.855886][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.951831][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 680.294617][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.294666][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.950920][ T33] INFO: task kworker/u8:12:5995 blocked for more than 145 seconds. [ 698.950943][ T33] Not tainted syzkaller #0 [ 698.950952][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ** replaying previous printk message ** [ 698.950952][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.960738][ T33] task:kworker/u8:12 state:D stack:22200 pid:5995 tgid:5995 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 698.960787][ T33] Workqueue: events_unbound linkwatch_event [ 698.960809][ T33] Call Trace: [ 698.960814][ T33] [ 698.960824][ T33] __schedule+0x125e/0x6990 [ 698.960843][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.960878][ T33] ? __pfx___schedule+0x10/0x10 [ 698.960891][ T33] ? find_held_lock+0x2b/0x80 [ 698.960908][ T33] ? schedule+0x225/0x2c0 [ 698.960927][ T33] schedule+0xdd/0x2c0 [ 698.960943][ T33] schedule_preempt_disabled+0x13/0x30 [ 698.960959][ T33] __mutex_lock+0xcca/0x1c10 [ 698.960977][ T33] ? linkwatch_event+0x51/0xc0 [ 698.960998][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 698.961033][ T33] ? linkwatch_event+0x51/0xc0 [ 698.961047][ T33] ? rtnl_lock+0x9/0x20 [ 698.961061][ T33] linkwatch_event+0x51/0xc0 [ 698.961076][ T33] ? __pfx_linkwatch_event+0x10/0x10 [ 698.961092][ T33] ? rcu_is_watching+0x13/0xc0 [ 698.961109][ T33] process_one_work+0xac7/0x1b10 [ 698.961137][ T33] ? __pfx_process_one_work+0x10/0x10 [ 698.961155][ T33] ? lock_acquire+0x1d1/0x380 [ 698.961181][ T33] ? __pfx_linkwatch_event+0x10/0x10 [ 698.961198][ T33] worker_thread+0x5ef/0xe50 [ 698.961222][ T33] ? __pfx_worker_thread+0x10/0x10 [ 698.961240][ T33] ? kthread+0x13a/0x450 [ 698.961254][ T33] ? __pfx_worker_thread+0x10/0x10 [ 698.961269][ T33] kthread+0x373/0x450 [ 698.961284][ T33] ? __pfx_kthread+0x10/0x10 [ 698.961300][ T33] ret_from_fork+0x730/0xd60 [ 698.961322][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 698.961342][ T33] ? __switch_to+0x800/0x10e0 [ 698.961357][ T33] ? __pfx_kthread+0x10/0x10 [ 698.961374][ T33] ret_from_fork_asm+0x1a/0x30 [ 698.961404][ T33] [ 698.961427][ T33] INFO: task syz-executor:9228 blocked for more than 145 seconds. [ 698.961438][ T33] Not tainted syzkaller #0 [ 698.961446][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.961452][ T33] task:syz-executor state:D stack:23064 pid:9228 tgid:9228 ppid:1 task_flags:0x400140 flags:0x00080002 [ 698.961491][ T33] Call Trace: [ 698.961496][ T33] [ 698.961504][ T33] __schedule+0x125e/0x6990 [ 698.961521][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.961552][ T33] ? __pfx___schedule+0x10/0x10 [ 698.961567][ T33] ? find_held_lock+0x2b/0x80 [ 698.961584][ T33] ? schedule+0x225/0x2c0 [ 698.961602][ T33] schedule+0xdd/0x2c0 [ 698.961618][ T33] schedule_preempt_disabled+0x13/0x30 [ 698.961633][ T33] __mutex_lock+0xcca/0x1c10 [ 698.961650][ T33] ? rtnl_newlink+0xac3/0x2620 [ 698.961671][ T33] ? hook_capable+0x1bc/0x500 [ 698.961694][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 698.961711][ T33] ? rcu_is_watching+0x13/0xc0 [ 698.961728][ T33] ? cap_capable+0x107/0x430 [ 698.961753][ T33] ? ns_capable+0xcd/0xf0 [ 698.961776][ T33] ? netlink_ns_capable+0xfa/0x130 [ 698.961797][ T33] ? rtnl_newlink+0xac3/0x2620 [ 698.961816][ T33] rtnl_newlink+0xac3/0x2620 [ 698.961839][ T33] ? is_bpf_text_address+0x21/0x1a0 [ 698.961862][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 698.961881][ T33] ? avc_has_perm_noaudit+0x56/0x470 [ 698.961900][ T33] ? find_held_lock+0x2b/0x80 [ 698.961915][ T33] ? avc_has_perm_noaudit+0x11e/0x470 [ 698.961932][ T33] ? avc_has_perm_noaudit+0x11e/0x470 [ 698.961962][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.962065][ T33] ? hook_capable+0x1bc/0x500 [ 698.962092][ T33] ? lock_acquire+0x1d1/0x380 [ 698.962111][ T33] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 698.962131][ T33] ? find_held_lock+0x2b/0x80 [ 698.962146][ T33] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 698.962166][ T33] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 698.962188][ T33] ? __pfx_rtnl_newlink+0x10/0x10 [ 698.962209][ T33] rtnetlink_rcv_msg+0x95e/0xe90 [ 698.962232][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 698.962256][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.962282][ T33] netlink_rcv_skb+0x159/0x420 [ 698.962301][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 698.962323][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.962351][ T33] ? netlink_deliver_tap+0x1ae/0xb50 [ 698.962374][ T33] netlink_unicast+0x668/0x950 [ 698.962397][ T33] ? __pfx_netlink_unicast+0x10/0x10 [ 698.962423][ T33] netlink_sendmsg+0x9ac/0x10c0 [ 698.962446][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.962471][ T33] ? selinux_socket_sendmsg+0x198/0x2f0 [ 698.962495][ T33] ? __sys_sendto+0x492/0x4e0 [ 698.962510][ T33] __sys_sendto+0x492/0x4e0 [ 698.962525][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.962545][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 698.962560][ T33] ? __fput+0x68a/0xb50 [ 698.962584][ T33] ? __fput+0x68f/0xb50 [ 698.962619][ T33] __x64_sys_sendto+0xe0/0x1c0 [ 698.962635][ T33] ? do_syscall_64+0xae/0x790 [ 698.962653][ T33] ? lockdep_hardirqs_on+0x7d/0x110 [ 698.962671][ T33] do_syscall_64+0x123/0x790 [ 698.962691][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.962707][ T33] RIP: 0033:0x7f8aba56034e [ 698.962719][ T33] RSP: 002b:00007ffcb6842158 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.962734][ T33] RAX: ffffffffffffffda RBX: 000055556745f500 RCX: 00007f8aba56034e [ 698.962744][ T33] RDX: 0000000000000028 RSI: 00007f8abb354670 RDI: 0000000000000003 [ 698.962754][ T33] RBP: 0000000000000001 R08: 00007ffcb68421d4 R09: 000000000000000c [ 698.962767][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 698.962776][ T33] R13: 0000000000000000 R14: 00007f8abb354670 R15: 0000000000000000 [ 698.962798][ T33] [ 698.962807][ T33] INFO: task syz.4.816:9388 blocked for more than 145 seconds. [ 698.962817][ T33] Not tainted syzkaller #0 [ 698.962824][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.962829][ T33] task:syz.4.816 state:D stack:25112 pid:9388 tgid:9383 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 698.962871][ T33] Call Trace: [ 698.962876][ T33] [ 698.962884][ T33] __schedule+0x125e/0x6990 [ 698.962900][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.962932][ T33] ? __pfx___schedule+0x10/0x10 [ 698.962946][ T33] ? find_held_lock+0x2b/0x80 [ 698.962963][ T33] ? schedule+0x225/0x2c0 [ 698.962982][ T33] schedule+0xdd/0x2c0 [ 698.962998][ T33] schedule_preempt_disabled+0x13/0x30 [ 698.963013][ T33] __mutex_lock+0xcca/0x1c10 [ 698.963031][ T33] ? ethnl_default_set_doit+0x3c2/0x1010 [ 698.963051][ T33] ? ethnl_parse_header_dev_get+0x35c/0x930 [ 698.963072][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 698.963102][ T33] ? ethnl_default_parse+0x17e/0x2f0 [ 698.963123][ T33] ? ethnl_default_set_doit+0x3c2/0x1010 [ 698.963141][ T33] ethnl_default_set_doit+0x3c2/0x1010 [ 698.963164][ T33] genl_family_rcv_msg_doit+0x214/0x300 [ 698.963188][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 698.963217][ T33] ? bpf_lsm_capable+0x9/0x10 [ 698.963232][ T33] ? security_capable+0x80/0x260 [ 698.963252][ T33] ? ns_capable+0xcd/0xf0 [ 698.963271][ T33] genl_rcv_msg+0x560/0x800 [ 698.963295][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.963315][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 698.963335][ T33] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 698.963363][ T33] netlink_rcv_skb+0x159/0x420 [ 698.963381][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.963404][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.963422][ T33] ? rcu_is_watching+0x13/0xc0 [ 698.963445][ T33] ? __rcu_read_unlock+0x26a/0x5a0 [ 698.966572][ T33] ? rcu_is_watching+0x13/0xc0 [ 698.966598][ T33] genl_rcv+0x28/0x40 [ 698.966618][ T33] netlink_unicast+0x668/0x950 [ 698.966641][ T33] ? __pfx_netlink_unicast+0x10/0x10 [ 698.966667][ T33] netlink_sendmsg+0x9ac/0x10c0 [ 698.966690][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.966716][ T33] ? selinux_socket_sendmsg+0x198/0x2f0 [ 698.966740][ T33] ? ____sys_sendmsg+0xa99/0xc30 [ 698.966766][ T33] ____sys_sendmsg+0xa99/0xc30 [ 698.966786][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.966808][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 698.966840][ T33] ___sys_sendmsg+0x190/0x1e0 [ 698.966864][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.966897][ T33] ? __rcu_read_unlock+0x26a/0x5a0 [ 698.966935][ T33] __sys_sendmsg+0x160/0x210 [ 698.966953][ T33] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.966984][ T33] do_syscall_64+0x123/0x790 [ 698.967004][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.967020][ T33] RIP: 0033:0x7f752079fb19 [ 698.967032][ T33] RSP: 002b:00007f7521683028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.967046][ T33] RAX: ffffffffffffffda RBX: 00007f7520a26090 RCX: 00007f752079fb19 [ 698.967057][ T33] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000009 [ 698.967066][ T33] RBP: 00007f7520837b70 R08: 0000000000000000 R09: 0000000000000000 [ 698.967075][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.967085][ T33] R13: 00007f7520a26128 R14: 00007f7520a26090 R15: 00007ffde038c758 [ 698.967107][ T33] [ 698.967126][ T33] [ 698.967126][ T33] Showing all locks held in the system: [ 698.967135][ T33] locks held by pr/ttyS0/32: 2, last CPU#0: [ 698.967146][ T33] #0: ffffffff8ffd7198 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 698.967189][ T33] #1: ffffffff9cf52fd8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 698.967230][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 698.967241][ T33] #0: ffffffff8ffeafe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 698.967284][ T33] locks held by kworker/u8:2/44: 6, on CPU#0: [ 698.967295][ T33] #0: ffff88801dec8948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.967330][ T33] #1: ffffc90000b57d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.967366][ T33] #2: ffffffff91f186a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 698.967405][ T33] #3: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x92/0x890 [ 698.967445][ T33] #4: ffff88801deaf2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x49/0x120 [ 698.967484][ T33] #5: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x51/0x120 [ 698.967522][ T33] locks held by kworker/u8:4/62: 2, last CPU#1: [ 698.967532][ T33] #0: ffff888035cda148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.967568][ T33] #1: ffffc9000203fd08 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.967614][ T33] locks held by kworker/u8:8/1408: 5, last CPU#1: [ 698.967624][ T33] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.967659][ T33] #1: ffffc90005c57d08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.967694][ T33] #2: ffffffff8fe7a370 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 698.967731][ T33] #3: ffffffff9014d140 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 698.967772][ T33] #4: ffffffff8fe9af00 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 698.967809][ T33] locks held by kworker/u8:9/1440: 3, last CPU#1: [ 698.967820][ T33] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.967855][ T33] #1: ffffc900053c7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.967891][ T33] #2: ffff88807f748258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 698.967946][ T33] locks held by dhcpcd/5281: 1, on CPU#1: [ 698.967956][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x1bd/0x1f10 [ 698.972555][ T33] locks held by getty/5375: 2, on CPU#0: [ 698.972566][ T33] #0: ffff888036a5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 698.972607][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 698.972647][ T33] locks held by kworker/u9:2/5618: 5, on CPU#1: [ 698.972658][ T33] #0: ffff8880352b7948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.972694][ T33] #1: ffffc9000361fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.972730][ T33] #2: ffff8880419a8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x180/0x4c0 [ 698.972776][ T33] #3: ffff8880419a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xbf0 [ 698.972811][ T33] #4: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_find_and_get_ns+0x2f/0x70 [ 698.972851][ T33] locks held by kworker/u8:12/5995: 3, on CPU#1: [ 698.972862][ T33] #0: ffff88813ff74148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.972897][ T33] #1: ffffc90004d77d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.972932][ T33] #2: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 698.972970][ T33] locks held by kworker/u8:3/9042: 3, on CPU#0: [ 698.972981][ T33] #0: ffff88801f75b148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 698.973016][ T33] #1: ffffc900020afd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 698.973053][ T33] #2: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 698.973089][ T33] locks held by syz-executor/9228: 1, on CPU#0: [ 698.973099][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 698.973138][ T33] locks held by syz.4.816/9388: 2, on CPU#0: [ 698.973148][ T33] #0: ffffffff91fcfb48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 698.973186][ T33] #1: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x3c2/0x1010 [ 698.973225][ T33] locks held by syz.5.820/9406: 1, on CPU#0: [ 698.973235][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x105/0x3310 [ 698.973274][ T33] locks held by syz.5.820/9408: 1, on CPU#0: [ 698.973285][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4fc/0xaf0 [ 698.973322][ T33] locks held by syz.5.820/9410: 1, on CPU#1: [ 698.973333][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x105/0x3310 [ 698.973370][ T33] locks held by syz.5.820/9411: 1, on CPU#1: [ 698.973380][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4fc/0xaf0 [ 698.973418][ T33] locks held by syz.3.817/9422: 1, on CPU#1: [ 698.973428][ T33] #0: ffffffff91f318e0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x23d/0x4940 [ 698.973467][ T33] locks held by syz.2.821/9416: 1, last CPU#0: [ 698.973477][ T33] #0: ffffffff8ffeafe0 (rcu_read_lock){....}-{1:3}, at: xa_find+0xde/0x3d0 [ 698.973514][ T33] locks held by syz.2.821/9417: 2, last CPU#0: [ 698.973524][ T33] #0: ffff88807aaeb3a0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0x107/0x480 [ 698.973564][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.973598][ T33] locks held by iou-wrk-9416/9420: 2, on CPU#0: [ 698.973608][ T33] #0: ffffffff91098140 (ublk_ctl_mutex){+.+.}-{4:4}, at: ublk_ctrl_add_dev+0x49a/0x1eb0 [ 698.973644][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.973680][ T33] locks held by syz-executor/9427: 2, on CPU#0: [ 698.973690][ T33] #0: ffff88803854d110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.973729][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.973768][ T33] locks held by syz-executor/9428: 2, on CPU#1: [ 698.973778][ T33] #0: ffff88803615a110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.973815][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.973850][ T33] locks held by syz-executor/9429: 2, on CPU#1: [ 698.973860][ T33] #0: ffff888036158110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.973896][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.973930][ T33] locks held by syz-executor/9430: 2, on CPU#0: [ 698.973940][ T33] #0: ffff88805326c110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.977973][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978008][ T33] locks held by syz-executor/9432: 2, on CPU#1: [ 698.978019][ T33] #0: ffff88807d963910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978055][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978089][ T33] locks held by syz-executor/9436: 2, on CPU#1: [ 698.978100][ T33] #0: ffff8880541bd110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978136][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978171][ T33] locks held by syz-executor/9437: 2, on CPU#1: [ 698.978181][ T33] #0: ffff88805565f110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978219][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978262][ T33] locks held by syz-executor/9439: 2, on CPU#1: [ 698.978273][ T33] #0: ffff888053715910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978309][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978344][ T33] locks held by syz-executor/9440: 2, on CPU#1: [ 698.978354][ T33] #0: ffff88807e479110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978391][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978426][ T33] locks held by syz-executor/9443: 2, on CPU#0: [ 698.978436][ T33] #0: ffff88805418e110 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978472][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978506][ T33] locks held by syz-executor/9447: 2, on CPU#0: [ 698.978516][ T33] #0: ffff88801d767910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978553][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978587][ T33] locks held by syz-executor/9448: 2, on CPU#1: [ 698.978598][ T33] #0: ffff888032a16910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978634][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978669][ T33] locks held by syz-executor/9449: 2, on CPU#0: [ 698.978679][ T33] #0: ffff888027bb3910 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2c1/0x4a0 [ 698.978715][ T33] #1: ffff88801deaf180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x39/0xb40 [ 698.978750][ T33] [ 698.978754][ T33] ============================================= [ 698.978754][ T33] [ 698.978764][ T33] NMI backtrace for cpu 1 [ 698.978773][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 698.978790][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 698.978798][ T33] Call Trace: [ 698.978803][ T33] [ 698.978809][ T33] dump_stack_lvl+0x100/0x190 [ 698.978833][ T33] nmi_cpu_backtrace.cold+0x12d/0x151 [ 698.978850][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 698.978870][ T33] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 698.978888][ T33] sys_info+0x141/0x190 [ 698.978907][ T33] watchdog+0xd0f/0x10c0 [ 698.978928][ T33] ? __pfx_watchdog+0x10/0x10 [ 698.978943][ T33] ? __kthread_parkme+0x18f/0x230 [ 698.978966][ T33] ? kthread+0x13a/0x450 [ 698.978979][ T33] ? __pfx_watchdog+0x10/0x10 [ 698.978992][ T33] kthread+0x373/0x450 [ 698.979005][ T33] ? __pfx_kthread+0x10/0x10 [ 698.979021][ T33] ret_from_fork+0x730/0xd60 [ 698.979041][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 698.979061][ T33] ? __switch_to+0x800/0x10e0 [ 698.979076][ T33] ? __pfx_kthread+0x10/0x10 [ 698.979092][ T33] ret_from_fork_asm+0x1a/0x30 [ 698.979120][ T33] [ 698.979126][ T33] Sending NMI from CPU 1 to CPUs 0: [ 698.979142][ C0] NMI backtrace for cpu 0 [ 698.979152][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 698.979167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 698.979174][ C0] RIP: 0010:io_serial_out+0x8f/0xb0 [ 698.979188][ C0] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d e9 56 51 2f 06 e8 81 9e c5 fc eb a0 e8 0a 9f c5 [ 698.979201][ C0] RSP: 0018:ffffc90000a879d8 EFLAGS: 00000002 [ 698.979212][ C0] RAX: 000000000000006d RBX: 00000000000003f8 RCX: 0000000000000000 [ 698.979220][ C0] RDX: 00000000000003f8 RSI: ffffffff85c34755 RDI: ffffffff9cf53000 [ 698.979229][ C0] RBP: ffffffff9cf52fc0 R08: 000000000000001f R09: 0000000000000000 [ 698.979237][ C0] R10: 0000000000000003 R11: 205d333354202020 R12: 0000000000000000 [ 698.979245][ C0] R13: 000000000000006d R14: 000000000000000e R15: ffffc90000a87da8 [ 698.979254][ C0] FS: 0000000000000000(0000) GS:ffff888122475000(0000) knlGS:0000000000000000 [ 698.979272][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 698.979281][ C0] CR2: 00007f344cdf42fc CR3: 000000002e93c000 CR4: 00000000003526f0 [ 698.979290][ C0] Call Trace: [ 698.979294][ C0] [ 698.979301][ C0] __serial8250_console_fifo_write+0xd6/0x290 [ 698.979316][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 698.979330][ C0] serial8250_console_write+0x1108/0x14f0 [ 698.979349][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 698.979366][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 698.979385][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 698.979404][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 698.979422][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 698.979438][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 698.979453][ C0] ? do_raw_spin_lock+0x30/0x260 [ 698.979468][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 698.979480][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 698.979495][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 698.979510][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 698.979528][ C0] nbcon_kthread_func+0x5ef/0x7f0 [ 698.979546][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 698.979564][ C0] ? __kthread_parkme+0x18f/0x230 [ 698.979582][ C0] ? kthread+0x13a/0x450 [ 698.979593][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 698.979609][ C0] kthread+0x373/0x450 [ 698.979620][ C0] ? __pfx_kthread+0x10/0x10 [ 698.979633][ C0] ret_from_fork+0x730/0xd60 [ 698.979648][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 698.979665][ C0] ? __switch_to+0x800/0x10e0 [ 698.979677][ C0] ? __pfx_kthread+0x10/0x10 [ 698.979690][ C0] ret_from_fork_asm+0x1a/0x30 [ 698.979709][ C0] [ 698.982427][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 701.175766][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 701.184857][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 701.194901][ T33] Call Trace: [ 701.198164][ T33] [ 701.201079][ T33] dump_stack_lvl+0x100/0x190 [ 701.205755][ T33] vpanic+0x2dc/0x6f8 [ 701.209724][ T33] panic+0xd1/0xe0 [ 701.213427][ T33] ? __pfx_panic+0x10/0x10 [ 701.217831][ T33] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 701.223969][ T33] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 701.230105][ T33] ? watchdog.cold+0x20/0x26d [ 701.234774][ T33] watchdog.cold+0x31/0x26d [ 701.239268][ T33] ? __pfx_watchdog+0x10/0x10 [ 701.243932][ T33] ? __kthread_parkme+0x18f/0x230 [ 701.248953][ T33] ? kthread+0x13a/0x450 [ 701.253181][ T33] ? __pfx_watchdog+0x10/0x10 [ 701.257841][ T33] kthread+0x373/0x450 [ 701.261895][ T33] ? __pfx_kthread+0x10/0x10 [ 701.266471][ T33] ret_from_fork+0x730/0xd60 [ 701.271054][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 701.276157][ T33] ? __switch_to+0x800/0x10e0 [ 701.280818][ T33] ? __pfx_kthread+0x10/0x10 [ 701.285392][ T33] ret_from_fork_asm+0x1a/0x30 [ 701.290157][ T33] [ 701.293370][ T33] Kernel Offset: disabled [ 701.297685][ T33] Rebooting in 86400 seconds..