last executing test programs: 24m34.451126092s ago: executing program 3 (id=1371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x7, 0x90, 0x0, 0xa}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 24m32.912281495s ago: executing program 3 (id=1373): socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x80480, 0xcd) getdents64(r6, &(0x7f0000000580)=""/166, 0xfe) r7 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r7, 0x0, 0x400c0) 24m31.588003431s ago: executing program 3 (id=1376): epoll_create1(0x80000) r0 = socket$netlink(0x10, 0x3, 0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0xe) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x240080c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt(r6, 0x29, 0x6, 0x0, 0x2000) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x80000008, 0x775a, 0xd25, 0x8000000, 0x6}]}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x4, @none, 0x10}, 0xe) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x2) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r9, &(0x7f0000000640)=@file={0x1}, 0x6e) 24m25.980228818s ago: executing program 3 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @mcast1}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="d3f34746b23800000000000008004500001c0000000000119078ac1e0001ac142faa00004e2000cb62feeb3b0fa717cd236c918b089078"], 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/11]) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$isdn_base(0x22, 0x3, 0x0) accept(r8, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmmsg$inet6(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0xb00}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffff40}, 0x1c, 0x0}}], 0x2, 0x8040) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010004000000000000000a0010000000fd000000000014000500"/48], 0x30}}, 0x0) 24m23.183621602s ago: executing program 3 (id=1390): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb595", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) chown(0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 24m13.861839812s ago: executing program 3 (id=1408): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x7, 0xdf, 0x8, 0x918840743e14dcd}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, 0x0) munlockall() ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000140)={0xb3ef, {"71f99c3bebfc92816305ad69323e01df", "021035850adb71a29c0c50695106ffc6", "e89dc772275d1890285616f548b6f1d5"}, 0xfffffff1, 0x2}) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b37"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) write$dsp(r3, &(0x7f0000000200)="5cba915264e56ba8a400"/20, 0x14) close(r3) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xa, 0x101, 0x0, {0x80000000, 0x7fffffff, 0x2, 0xb}}) 23m57.262816981s ago: executing program 32 (id=1408): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x7, 0xdf, 0x8, 0x918840743e14dcd}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, 0x0) munlockall() ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000140)={0xb3ef, {"71f99c3bebfc92816305ad69323e01df", "021035850adb71a29c0c50695106ffc6", "e89dc772275d1890285616f548b6f1d5"}, 0xfffffff1, 0x2}) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b37"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) write$dsp(r3, &(0x7f0000000200)="5cba915264e56ba8a400"/20, 0x14) close(r3) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000080)={0xa, 0x101, 0x0, {0x80000000, 0x7fffffff, 0x2, 0xb}}) 13m46.182053597s ago: executing program 1 (id=2428): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000060100004005000500330000000a0000000000000000000000000000000000ffff0a0101000000000000000000aa8a282bac5d353078f84ac32605293dacbf0b8275da3cfd60a386f2f24b539d311988c608b0cc07610d"], 0x70}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, r3, 0x0, 0x0, 0x0, 0x2003, 0x0, {0x3}}) io_uring_enter(r4, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r8 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000012c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0x9, [@private=0xa010100, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, @multicast2, @private=0xa010102]}, 0x34) 13m44.967928201s ago: executing program 1 (id=2431): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb595", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) chown(0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 13m41.224846308s ago: executing program 1 (id=2436): r0 = socket(0x10, 0x3, 0x0) capset(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x3, 0x2, 0x8001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00004f0000/0x3000)=nil, 0x3000, 0x17) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x101000d) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6f6e}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000300), {0x3f}, &(0x7f0000000340)=""/123, 0x7b, &(0x7f00000003c0)=""/103, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) capget(&(0x7f0000000580)={0x20071026, r6}, &(0x7f00000005c0)={0x0, 0x2, 0x4, 0x4, 0xfffffffa, 0x3}) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x30, 0xffffffffffffffff, 0x64ef8000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000001240)={0x2020}, 0x2020) ioctl$UFFDIO_MOVE(r8, 0xc028aa05, 0x0) 13m34.358362455s ago: executing program 1 (id=2450): socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x91e) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getrusage(0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x8, 0x6011, r4, 0xffffffffffffc000) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 13m31.848520707s ago: executing program 1 (id=2460): mkdir(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r2, r1, 0x26, 0x0, @void}, 0x10) 13m30.920894283s ago: executing program 1 (id=2462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x23, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_1\x00', 0x10) listen(r5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x89ed, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="f500b8000310883a831006223ad6f2a332a8305ab41f44ba72465a579322c87b94511de471462b931c0ceef68d7c220a3fc1377b7d03ccf42c51f635da866725c0c1d27734ffc19b2f85f3ce452d3339a1debae22003a17211f8ca680e94dc27ba1fad057444b9067550bea7b3653fe0da65cd3628049c6f7405206a7bd82ef56503fefe0742f1f882af3dd5a7e30e43bbe08a038156fae678f671509e839b22f1abc9f7666029fd570eae856f50eeb032b91e2fdb39e5841032d94d15dc9410b06f8f6411d1"], 0xc0) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f00000004c0), 0x4) 13m12.711284696s ago: executing program 33 (id=2462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x23, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='batadv_slave_1\x00', 0x10) listen(r5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x89ed, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="f500b8000310883a831006223ad6f2a332a8305ab41f44ba72465a579322c87b94511de471462b931c0ceef68d7c220a3fc1377b7d03ccf42c51f635da866725c0c1d27734ffc19b2f85f3ce452d3339a1debae22003a17211f8ca680e94dc27ba1fad057444b9067550bea7b3653fe0da65cd3628049c6f7405206a7bd82ef56503fefe0742f1f882af3dd5a7e30e43bbe08a038156fae678f671509e839b22f1abc9f7666029fd570eae856f50eeb032b91e2fdb39e5841032d94d15dc9410b06f8f6411d1"], 0xc0) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f00000004c0), 0x4) 13m0.821812949s ago: executing program 4 (id=2509): r0 = gettid() clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x1000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x168, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd7f}, @CTA_STATUS={0x8}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x504}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x983}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x1000, 0x2, 0x37c, 0x200, 0x3]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xac2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x15b}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x484}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xeb68, 0x59]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4040004}, 0x90) 12m57.128355062s ago: executing program 4 (id=2516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb595", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r4, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) chown(0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 12m54.982935703s ago: executing program 4 (id=2520): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, 0x2e, 0x9, 0x70bda7, 0x0, {0x4}, [@typed={0x48, 0x18, 0x0, 0x0, @binary="4fbb52fa25a3b6668c2659071fb4df57bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317b512fd6c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) openat$cgroup_type(r5, &(0x7f0000000340), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 12m53.562670952s ago: executing program 4 (id=2524): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000180)={0x1, @sliced={0x1ff, [0x4, 0x4, 0xff, 0x4, 0xffff, 0x9, 0x7, 0x62, 0x6, 0x6, 0x0, 0x0, 0xf, 0xfa, 0xff, 0x8, 0x0, 0xac, 0x7f, 0x90, 0x7, 0x62, 0x8, 0xf81, 0x1, 0xfff, 0x9, 0xd, 0x9, 0x3, 0x80, 0x7, 0xf4a, 0x1, 0x6, 0xff, 0x8, 0x5, 0x1, 0x2, 0x400, 0x0, 0xfffb, 0x5, 0xa, 0x7, 0x22, 0x100]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x5, 0x4, 0x2, 0x4, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r7, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) 12m49.98481292s ago: executing program 4 (id=2529): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb595", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r4, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000080), 0x1a1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) chown(0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r5, &(0x7f0000001200)={'#! ', './file0'}, 0xb) r6 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 12m47.998874356s ago: executing program 4 (id=2532): socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$notify(r3, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000000c0)={0x3000000, 0x1, 0x7, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x1, "268100ba7af900010011000000000200", 0x384c4150}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 12m31.878375475s ago: executing program 34 (id=2532): socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x0) getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$notify(r3, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000000c0)={0x3000000, 0x1, 0x7, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x1, "268100ba7af900010011000000000200", 0x384c4150}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 10.296697199s ago: executing program 0 (id=5004): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x0, 0x0, 0x0}, {0x1000, 0x2000, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3}) 7.622210493s ago: executing program 0 (id=5019): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f0000000480)=']%+\x00?\xbd\x8b\xb7\xfa\x91h\xa2\x9b\x13\xe4\xf8\xe9W_\x95\xc1\xcd\xf9\xa8\x15\xd8\xf3i\x8b\xf9Q2V\xa6\xd5w.\x13\xef\t\xaff\xbc\xa2=\xb3\xcf=c\xf4\x02\xa1\xa7\x13\x9f\xd06\xe1[`>\xc4W_:\xd7&\x98\x93b\xca\x85\x06\x0f\xed,\x1f{\x90ce\xaa\x99M', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 6.713259417s ago: executing program 5 (id=5023): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, &(0x7f0000000240)) 6.445276679s ago: executing program 0 (id=5026): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3) 6.151678967s ago: executing program 5 (id=5027): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0x40000e9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250b0000000800", @ANYRES32, @ANYBLOB="d0450a00c2608f562bab24b1f4dc5fa3d2c0b6bb98d33d3609330b64bdb592b607e319354f3855170411b654506cc840ae42a2c6f65ec78de1ae53f8b61761a1dc647d445134830599e7884fb1fc1ec82c9e38e92d02faef572cf9ac199be497c5094cc677c3b5ad2b481c310f452b6ea68f1cee3a229a76b89bd3a30cf2663f9e6e643406b9570acdde1debb0ab198ba775a8577bb289ddf67732f42f47a759a52a955661df8f350dad58df23157600f144d82269fd2c68ef01ab7a25b85d9c77db8b59a9d023435319097718483552ce7bccd9e517bd7b542d8d2005ed0c2972000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) r4 = socket(0x23, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, r5, r6) r7 = accept$inet(r4, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000540)=@buf={0x99, &(0x7f0000000480)="c7c9f82770905e16ffc90cf12f192a857f336e1c51b39c63c5142726e0a20f02548975d318a3422d48b708ff87dd338f2ec8ea0b8f0a17bb8f9a25f1be64ce06377b42cb8ca0cf287c612a009a1aa468701480d7e4876d540bf1268031450ea7a258278b2c2dd5f6d0e5eebf091bc16a36486fb7a0ef44351d30b4b57fe5f9272120393213d54892a04dcdf6f670b6ea030d22a992387e11bf"}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x7f, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$BLKRRPART(r8, 0x125f, 0x0) pwritev(r9, &(0x7f0000000880)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}, {&(0x7f00000005c0)="d13ad3fd7dbec813b491aa4bac00a17a43ce5a876cc443eb25810cb0c9266d5fe7ae0a33b27b5ac94d56773c47ba8364bb6c0f96bba65c37b4ead8494fd9254e3a9b2482511c8de06bbd0cdf58b9c2ffe78396e59892a0315e4356993e309fe25d35e6dbf9a5b3c18f64e84991df1592df5cc182fdda2fe8d70f340bb7a6082a7aae6693cfe35d", 0x87}, {0x0}], 0x4, 0x0, 0x0) geteuid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.037809292s ago: executing program 0 (id=5030): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.909892369s ago: executing program 5 (id=5033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000400000004200000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, 0x0, 0x0}, 0xa8) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0xd8e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xedc0, 0x6, 0x5ee, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2e, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x200083, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x2c, 0x3b, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000006c0)=@get={0x1, &(0x7f0000000900)=""/211, 0xb}) ioctl$UI_DEV_CREATE(r5, 0x5501) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) r6 = socket(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) 4.642659528s ago: executing program 2 (id=5034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000060100004005000500330000000a0000000000000000000000000000000000ffff0a0101000000000000000000aa8a282bac5d353078f84ac32605293dacbf0b8275da3cfd60a386f2f24b539d311988c608b0cc07610d"], 0x70}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, r3, 0x0, 0x0, 0x0, 0x2003, 0x0, {0x3}}) io_uring_enter(r4, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000012c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0x9, [@private=0xa010100, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, @multicast2, @private=0xa010102]}, 0x34) 2.541987628s ago: executing program 5 (id=5039): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x41, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.427440164s ago: executing program 6 (id=5041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 2.382079692s ago: executing program 2 (id=5042): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000060100004005000500330000000a0000000000000000000000000000000000ffff0a0101000000000000000000aa8a282bac5d353078f84ac32605293dacbf0b8275da3cfd60a386f2f24b539d311988c608b0cc07610d"], 0x70}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, r3, 0x0, 0x0, 0x0, 0x2003, 0x0, {0x3}}) io_uring_enter(r4, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000012c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0x9, [@private=0xa010100, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, @multicast2, @private=0xa010102]}, 0x34) 2.300524247s ago: executing program 6 (id=5043): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(0x3) 1.849416505s ago: executing program 7 (id=5047): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) read$msr(r2, &(0x7f0000000040)=""/13, 0xd) 1.815022509s ago: executing program 7 (id=5048): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 1.656542889s ago: executing program 7 (id=5049): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2b, &(0x7f0000000100)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.571946848s ago: executing program 0 (id=5050): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000060100004005000500330000000a0000000000000000000000000000000000ffff0a0101000000000000000000aa8a282bac5d353078f84ac32605293dacbf0b8275da3cfd60a386f2f24b539d311988c608b0cc07610d"], 0x70}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, r3, 0x0, 0x0, 0x0, 0x2003, 0x0, {0x3}}) io_uring_enter(r4, 0x1, 0x20, 0x1, 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000840)={r11, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$IMADDTIMER(r9, 0x80044940, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1f, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000012c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0x0, 0x9, [@private=0xa010100, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, @multicast2, @private=0xa010102]}, 0x34) 1.221192745s ago: executing program 2 (id=5051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) 1.132819488s ago: executing program 6 (id=5052): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.061198124s ago: executing program 6 (id=5053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) 1.036337439s ago: executing program 2 (id=5054): syz_usb_connect$midi(0x3, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ca1501014000010203010902200801010d"], 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x61, &(0x7f0000000040)={&(0x7f0000000080)="11212e", 0x34}, 0x1, 0x0, 0x0, 0x24008090}, 0x400c880) recvmmsg(r0, &(0x7f0000000100), 0x1a, 0x40012062, 0x0) write(r0, &(0x7f0000000100)="c0", 0x1) 965.287278ms ago: executing program 7 (id=5055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) 868.2429ms ago: executing program 7 (id=5056): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf271500000008000300", @ANYRES32=r3, @ANYBLOB="2000298014"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) 803.993551ms ago: executing program 6 (id=5057): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 803.665787ms ago: executing program 7 (id=5058): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x10c) socket(0x29, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x211041, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000000c0)='a\x9aC\x91\xf7?\x00/1|\xa4i3\x17u\x1f:m\xbbt\x0e\x94\xda\x15x\xb9\x97\xbe\xd3S\xf8\xad\x14f\xeb\xf3C0y\xa0', &(0x7f0000000480)=']%+\x00?\xbd\x8b\xb7\xfa\x91h\xa2\x9b\x13\xe4\xf8\xe9W_\x95\xc1\xcd\xf9\xa8\x15\xd8\xf3i\x8b\xf9Q2V\xa6\xd5w.\x13\xef\t\xaff\xbc\xa2=\xb3\xcf=c\xf4\x02\xa1\xa7\x13\x9f\xd06\xe1[`>\xc4W_:\xd7&\x98\x93b\xca\x85\x06\x0f\xed,\x1f{\x90ce\xaa\x99M', &(0x7f00000003c0)='+[@-\x00']}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f00000047c0)) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x20}}, 0x0) 643.080109ms ago: executing program 5 (id=5059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c5}, 0x404c880) 126.234538ms ago: executing program 5 (id=5060): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x5) 104.666246ms ago: executing program 0 (id=5061): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001b80)={0xf4, 0x1, 0x1, {0x9, @pix_mp={0x3, 0x8, 0x8292a086, 0x3, 0x0, [{0x1, 0x101}, {0x5, 0xfc8}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x7}, {0x1000, 0x40}, {0x1, 0x1}, {0xebbfa9c6, 0xaab}], 0x2, 0x9, 0x5, 0x2, 0x2}}, 0x6}) 104.256929ms ago: executing program 2 (id=5062): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x1c, r1, 0xe07, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000) 20.539941ms ago: executing program 6 (id=5063): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x6, 0x80000) 0s ago: executing program 2 (id=5064): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket(0x80000000000000a, 0x2, 0x0) rseq(0xfffffffffffffffc, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x3404c0d0c0e69e44}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x4}}, 0x34, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mq_unlink(&(0x7f00000000c0)='nat\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1, 0x3}}}, 0x134) close(r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000040)=[0x4, 0x9]) kernel console output (not intermixed with test programs): us mode [ 1836.791948][T23694] syzkaller0: entered allmulticast mode [ 1837.651346][T23712] syzkaller0: entered promiscuous mode [ 1837.658587][T23712] syzkaller0: entered allmulticast mode [ 1837.966359][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1838.209842][T23729] overlayfs: failed to clone lowerpath [ 1838.427074][T23735] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4108'. [ 1840.572129][T19207] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1840.833813][T19207] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1840.847223][T19207] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1840.858363][T19207] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1840.896837][T19207] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1840.906687][T19207] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1840.916983][T19207] usb 6-1: Product: syz [ 1840.921381][T19207] usb 6-1: Manufacturer: syz [ 1840.926431][T19207] usb 6-1: SerialNumber: syz [ 1840.945455][T19207] usb 6-1: config 0 descriptor?? [ 1840.954748][T19207] hub 6-1:0.0: bad descriptor, ignoring hub [ 1840.965237][T19207] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1841.103170][T19207] usb 6-1: selecting invalid altsetting 0 [ 1841.845125][T23759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1841.912693][T23744] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 1842.567121][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4119'. [ 1844.716289][T19207] usb 6-1: USB disconnect, device number 42 [ 1844.918855][T23800] sp0: Synchronizing with TNC [ 1844.954970][T23804] sp0: Found TNC [ 1849.087111][T23844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 1849.217140][T23845] input: syz0 as /devices/virtual/input/input72 [ 1851.312911][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1852.041323][ T29] audit: type=1400 audit(1776124693.531:1310): avc: denied { map } for pid=23863 comm="syz.5.4141" path="/proc/1920/maps" dev="proc" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1852.273938][ T29] audit: type=1400 audit(1776124693.531:1311): avc: denied { execute } for pid=23863 comm="syz.5.4141" path="/proc/1920/maps" dev="proc" ino=80876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1852.961136][T23878] tipc: Enabling of bearer rejected, failed to enable media [ 1855.457698][T23899] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4147'. [ 1858.789271][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1859.824024][T23933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4157'. [ 1859.979060][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4158'. [ 1860.216979][T23944] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1860.401222][T23947] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4161'. [ 1860.683032][T23953] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1860.926755][T23961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1861.054972][ T977] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1861.147184][T23964] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 1861.181864][T23964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1861.236622][ T977] usb 6-1: Using ep0 maxpacket: 32 [ 1861.248365][T23964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1861.255313][T23964] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1861.266069][T23964] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1861.470267][ T977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1861.481490][ T977] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1861.493095][ T977] usb 6-1: can't read configurations, error -71 [ 1863.481860][T23989] syzkaller0: entered promiscuous mode [ 1863.508955][T23989] syzkaller0: entered allmulticast mode [ 1863.618981][T23989] tipc: Started in network mode [ 1863.624077][T23989] tipc: Node identity 5a104cfcfa04, cluster identity 4711 [ 1863.649068][T23989] tipc: Enabled bearer , priority 0 [ 1863.762912][T23988] tipc: Resetting bearer [ 1863.822074][T23988] tipc: Disabling bearer [ 1866.663241][T24019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4182'. [ 1866.831493][T24022] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4183'. [ 1867.440761][ T29] audit: type=1400 audit(1776124707.942:1312): avc: denied { write } for pid=24029 comm="syz.6.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1868.375192][T24045] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4189'. [ 1869.870669][ T793] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1870.076702][ T793] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1870.096721][ T793] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1870.133341][ T793] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1870.154887][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.190284][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4195'. [ 1870.200664][T24073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1870.207909][T24073] IPv6: NLM_F_CREATE should be set when creating new route [ 1870.503965][ T793] usb 6-1: usb_control_msg returned -32 [ 1870.510659][ T793] usbtmc 6-1:16.0: can't read capabilities [ 1871.596663][T19207] usb 6-1: USB disconnect, device number 45 [ 1871.970790][T24086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1872.018600][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1872.048523][T24088] netlink: 'syz.2.4200': attribute type 4 has an invalid length. [ 1872.073845][T24088] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1872.105372][T24086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.141191][T24086] bond2: (slave bond0): making interface the new active one [ 1872.175890][T24086] bond2: (slave bond0): Enslaving as an active interface with an up link [ 1872.221620][T24088] wlan1: mtu less than device minimum [ 1873.416461][T24108] /dev/nullb0: Can't lookup blockdev [ 1874.348425][T24108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4199'. [ 1874.357472][T24108] openvswitch: netlink: Flow actions attr not present in new flow. [ 1874.754648][T24105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4203'. [ 1874.888473][T24093] syzkaller0: entered promiscuous mode [ 1874.900724][T24093] syzkaller0: entered allmulticast mode [ 1875.673851][ T977] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1876.027693][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.073193][ T977] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1876.130021][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.176431][ T977] usb 6-1: config 0 descriptor?? [ 1876.201457][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 1876.655486][ T977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1876.679288][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 1876.693216][ T977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1876.720434][ T977] pwc: recv_control_msg error -32 req 04 val 1000 [ 1876.748067][ T977] pwc: recv_control_msg error -32 req 04 val 1300 [ 1876.759094][ T977] pwc: recv_control_msg error -32 req 04 val 1400 [ 1876.786625][ T977] pwc: recv_control_msg error -32 req 02 val 2000 [ 1876.815358][ T977] pwc: recv_control_msg error -32 req 02 val 2100 [ 1876.827509][ T977] pwc: recv_control_msg error -32 req 04 val 1500 [ 1876.853562][ T977] pwc: recv_control_msg error -32 req 02 val 2500 [ 1876.867517][ T977] pwc: recv_control_msg error -32 req 02 val 2400 [ 1876.883778][ T977] pwc: recv_control_msg error -32 req 02 val 2600 [ 1876.897446][ T977] pwc: recv_control_msg error -32 req 02 val 2900 [ 1876.935725][ T977] pwc: recv_control_msg error -32 req 02 val 2800 [ 1876.970456][ T977] pwc: recv_control_msg error -32 req 04 val 1100 [ 1876.990641][ T977] pwc: Registered as video103. [ 1877.013751][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input73 [ 1877.290626][ T793] usb 6-1: USB disconnect, device number 46 [ 1879.606998][T24204] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4216'. [ 1879.823617][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1879.835100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1882.080567][ T977] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1882.279887][ T977] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1882.291148][ T977] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1882.320399][ T977] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1882.339587][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.361525][T24215] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1882.372708][ T977] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1882.621541][T13512] usb 6-1: USB disconnect, device number 47 [ 1884.141183][ T29] audit: type=1400 audit(1776124723.570:1313): avc: denied { shutdown } for pid=24230 comm="syz.6.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1885.179884][T16550] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1886.981203][T24265] fuse: Bad value for 'fd' [ 1887.046662][T24267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4231'. [ 1887.776621][T24262] kvm: kvm [24261]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1888.112212][T24282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4234'. [ 1891.074073][T24313] lo speed is unknown, defaulting to 1000 [ 1891.777894][T24309] syzkaller0: entered promiscuous mode [ 1892.481734][T24309] syzkaller0: entered allmulticast mode [ 1892.816521][T24321] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1892.937067][T24321] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4245'. [ 1897.312457][T13512] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1897.371899][T24386] MTD: Couldn't look up '/dev/loop7': -13 [ 1897.386133][T24386] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4260'. [ 1897.516529][T13512] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1897.546987][T13512] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.620686][T24394] netlink: 'syz.0.4261': attribute type 4 has an invalid length. [ 1897.629568][T24394] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1897.873403][T13512] usb 7-1: Product: syz [ 1897.877573][T13512] usb 7-1: Manufacturer: syz [ 1897.889541][T13512] usb 7-1: SerialNumber: syz [ 1897.932981][T13512] usb 7-1: config 0 descriptor?? [ 1898.030029][T24401] MTD: Couldn't look up '/dev/loop7': -13 [ 1898.154736][T24401] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4265'. [ 1898.170192][T13512] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1899.956480][T24416] kvm: kvm [24414]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfffffff20000ead6 [ 1899.966544][T24416] kvm: kvm [24414]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1900.423782][T24426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4270'. [ 1902.014699][T13512] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1902.087432][T13512] usb 7-1: USB disconnect, device number 27 [ 1902.219914][T24437] MTD: Couldn't look up '/dev/loop7': -13 [ 1902.250702][T24437] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4275'. [ 1904.648355][T24471] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1905.821564][T24471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1906.352305][T24486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1906.447701][T24486] bond0: left promiscuous mode [ 1906.452720][T24486] bond2: left promiscuous mode [ 1907.571035][T16140] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1908.671192][T24509] lo speed is unknown, defaulting to 1000 [ 1908.943794][T24502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1910.550119][T24523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1910.685376][T24525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24525 comm=syz.2.4292 [ 1910.756753][T24525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1912.432527][T24539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1913.781318][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1915.114642][T24565] tipc: Enabling of bearer rejected, failed to enable media [ 1916.161620][T24574] lo speed is unknown, defaulting to 1000 [ 1920.003575][T16565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1920.261258][T24595] lo speed is unknown, defaulting to 1000 [ 1920.925907][T24615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4309'. [ 1922.517998][ T29] audit: type=1400 audit(1776124759.477:1314): avc: denied { append } for pid=24622 comm="syz.0.4312" name="event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1930.575349][T24710] netlink: 'syz.7.4332': attribute type 1 has an invalid length. [ 1930.599265][T24710] netlink: 2096 bytes leftover after parsing attributes in process `syz.7.4332'. [ 1930.664971][T24710] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4332'. [ 1937.669567][T24781] input: syz0 as /devices/virtual/input/input74 [ 1941.932249][ T29] audit: type=1326 audit(1776124777.650:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24805 comm="syz.6.4353" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfc259c819 code=0x0 [ 1943.294294][T24828] lo speed is unknown, defaulting to 1000 [ 1943.669575][T16140] Bluetooth: hci0: command 0x0c1a tx timeout [ 1945.429532][T24840] vlan0: entered promiscuous mode [ 1945.434828][T24840] vlan0: entered allmulticast mode [ 1945.439924][T24840] hsr_slave_1: entered allmulticast mode [ 1945.477905][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1945.484239][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1945.938014][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout [ 1948.387023][T24861] input: syz0 as /devices/virtual/input/input75 [ 1951.230965][T24879] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.4371'. [ 1952.341340][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1953.919663][T16140] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1953.962455][T24164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1955.708069][T24923] netlink: 'syz.7.4382': attribute type 10 has an invalid length. [ 1955.718457][T24923] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4382'. [ 1955.728708][T24923] batman_adv: batadv0: Adding interface: vlan1 [ 1955.734915][T24923] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1955.760309][T24923] batman_adv: batadv0: Interface activated: vlan1 [ 1956.407718][T24931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1956.666822][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4386'. [ 1958.025928][ T29] audit: type=1400 audit(1776124792.707:1316): avc: denied { create } for pid=24948 comm="syz.5.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1958.078720][ T29] audit: type=1400 audit(1776124792.707:1317): avc: denied { write } for pid=24948 comm="syz.5.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1958.682936][ T29] audit: type=1400 audit(1776124792.707:1318): avc: denied { module_request } for pid=24948 comm="syz.5.4390" kmod="xfrm-type-10-255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1958.806317][ T29] audit: type=1400 audit(1776124792.847:1319): avc: denied { read } for pid=24948 comm="syz.5.4390" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1958.963237][ T29] audit: type=1400 audit(1776124792.847:1320): avc: denied { open } for pid=24948 comm="syz.5.4390" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1959.226372][ T29] audit: type=1400 audit(1776124792.913:1321): avc: denied { allowed } for pid=24948 comm="syz.5.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1959.251638][T24970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4395'. [ 1959.318480][T24953] netlink: 'syz.6.4389': attribute type 21 has an invalid length. [ 1959.335812][ T29] audit: type=1400 audit(1776124792.922:1322): avc: denied { create } for pid=24948 comm="syz.5.4390" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1959.368795][T24953] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4389'. [ 1959.387806][T24954] netlink: 'syz.6.4389': attribute type 21 has an invalid length. [ 1959.414348][T24954] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4389'. [ 1959.440287][ T29] audit: type=1400 audit(1776124792.978:1323): avc: denied { read } for pid=24948 comm="syz.5.4390" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.593009][ T29] audit: type=1400 audit(1776124792.978:1324): avc: denied { open } for pid=24948 comm="syz.5.4390" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.687564][ T29] audit: type=1400 audit(1776124792.988:1325): avc: denied { create } for pid=24948 comm="syz.5.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1960.340573][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4400'. [ 1962.996995][T25010] overlayfs: failed to clone lowerpath [ 1963.232099][T25017] netlink: 'syz.6.4408': attribute type 1 has an invalid length. [ 1963.337293][T25017] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1963.438840][T25019] bond2: (slave geneve2): making interface the new active one [ 1963.476763][T25019] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1963.624776][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 1963.624787][ T29] audit: type=1400 audit(1776125053.947:1390): avc: denied { read } for pid=25016 comm="syz.6.4408" name="binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1963.668633][ T29] audit: type=1400 audit(1776125053.984:1391): avc: denied { open } for pid=25016 comm="syz.6.4408" path="/dev/binderfs/binder0" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1963.700557][ T29] audit: type=1400 audit(1776125053.993:1392): avc: denied { write } for pid=25016 comm="syz.6.4408" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1963.951209][ T5955] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1964.010270][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4409'. [ 1964.487396][ T29] audit: type=1400 audit(1776125054.761:1393): avc: denied { write } for pid=25029 comm="syz.2.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1964.825341][ T29] audit: type=1400 audit(1776125055.070:1394): avc: denied { create } for pid=25036 comm="syz.2.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1964.947435][T25042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1965.340778][T25045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1965.457554][T25045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1966.248997][ T29] audit: type=1400 audit(1776125055.697:1395): avc: denied { shutdown } for pid=25036 comm="syz.2.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1966.273401][ T29] audit: type=1400 audit(1776125055.716:1396): avc: denied { read } for pid=25043 comm="syz.5.4415" dev="nsfs" ino=4026533961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1966.299205][ T29] audit: type=1400 audit(1776125055.716:1397): avc: denied { open } for pid=25043 comm="syz.5.4415" path="net:[4026533961]" dev="nsfs" ino=4026533961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1966.564327][ T29] audit: type=1400 audit(1776125056.699:1398): avc: denied { map } for pid=25051 comm="syz.6.4416" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1967.643146][ T29] audit: type=1400 audit(1776125056.699:1399): avc: denied { read write } for pid=25051 comm="syz.6.4416" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=84895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1969.014184][ C0] Adjusting tsc more than 11% (4779333 vs 6650445) [ 1969.274829][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1969.274848][ T29] audit: type=1400 audit(1776125059.200:1408): avc: denied { sys_module } for pid=25056 comm="syz.0.4427" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1969.602880][T25087] overlayfs: failed to clone lowerpath [ 1969.705850][ T29] audit: type=1400 audit(1776125059.551:1409): avc: denied { create } for pid=25090 comm="syz.5.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1969.979044][T25095] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1970.073529][T16140] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 1970.349464][ T29] audit: type=1400 audit(1776125059.759:1410): avc: denied { create } for pid=25090 comm="syz.5.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1970.519417][ T29] audit: type=1400 audit(1776125059.759:1411): avc: denied { write } for pid=25090 comm="syz.5.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1971.669421][ T29] audit: type=1326 audit(1776125059.767:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1971.895351][ T29] audit: type=1326 audit(1776125059.783:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1971.921224][ T29] audit: type=1326 audit(1776125059.783:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1972.022636][ T29] audit: type=1326 audit(1776125059.783:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1972.214455][ T29] audit: type=1326 audit(1776125059.783:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1972.282506][ T29] audit: type=1326 audit(1776125059.783:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25090 comm="syz.5.4424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 1972.804214][T16140] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1974.283338][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1974.292427][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1974.819923][T16140] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1974.830842][T16140] Bluetooth: hci5: Injecting HCI hardware error event [ 1974.843831][T16140] Bluetooth: hci5: hardware error 0x00 [ 1975.110676][T25140] sp0: Synchronizing with TNC [ 1975.152628][T25141] sp0: Found TNC [ 1975.165854][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1975.165871][ T29] audit: type=1400 audit(1776125064.210:1451): avc: denied { mount } for pid=25138 comm="syz.0.4436" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1975.260954][ T29] audit: type=1400 audit(1776125064.290:1452): avc: denied { audit_control } for pid=25138 comm="syz.0.4436" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1975.285414][ T29] audit: type=1400 audit(1776125064.308:1453): avc: denied { read } for pid=25138 comm="syz.0.4436" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1977.146504][T25154] overlayfs: failed to clone lowerpath [ 1977.194041][T16140] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1977.236316][ T29] audit: type=1400 audit(1776125066.058:1454): avc: denied { append } for pid=25155 comm="syz.5.4440" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1977.485479][ T29] audit: type=1400 audit(1776125066.294:1455): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1977.941848][ T29] audit: type=1400 audit(1776125066.312:1456): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1979.735283][T25179] fuse: Unknown parameter '00000000000000000000' [ 1980.208592][ T29] audit: type=1400 audit(1776125068.769:1457): avc: denied { write } for pid=25165 comm="syz.0.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1980.256588][ T29] audit: type=1400 audit(1776125068.769:1458): avc: denied { nlmsg_write } for pid=25165 comm="syz.0.4442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1982.657652][T25203] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1983.718898][T25202] sp0: Synchronizing with TNC [ 1983.727268][T25206] sp0: Found TNC [ 1983.789513][ T29] audit: type=1400 audit(1776125072.052:1459): avc: denied { read write } for pid=25207 comm="syz.5.4450" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1983.832537][ T29] audit: type=1400 audit(1776125072.070:1460): avc: denied { open } for pid=25207 comm="syz.5.4450" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1983.859877][ T29] audit: type=1400 audit(1776125072.088:1461): avc: denied { bind } for pid=25207 comm="syz.5.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1984.110929][T25213] sp0: Synchronizing with TNC [ 1984.122566][T25213] sp0: Found TNC [ 1984.274744][T25223] vivid-000: disconnect [ 1984.825195][T25226] lo speed is unknown, defaulting to 1000 [ 1986.475400][T25219] vivid-000: reconnect [ 1988.532643][ T5955] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1989.560378][ T29] audit: type=1400 audit(1776125077.366:1462): avc: denied { create } for pid=25248 comm="syz.5.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1989.643289][T25250] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1989.883003][ T5955] usb 7-1: device descriptor read/all, error -71 [ 1989.892789][ T29] audit: type=1400 audit(1776125077.670:1463): avc: denied { connect } for pid=25248 comm="syz.5.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1989.914274][ T29] audit: type=1400 audit(1776125077.698:1464): avc: denied { create } for pid=25248 comm="syz.5.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1990.170215][ T29] audit: type=1400 audit(1776125077.910:1465): avc: denied { setopt } for pid=25248 comm="syz.5.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1990.367353][ T29] audit: type=1800 audit(1776125077.919:1466): pid=25252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.4463" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=86297 res=0 errno=0 [ 1990.784978][T25263] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4464'. [ 1992.724051][ T29] audit: type=1400 audit(1776125080.280:1467): avc: denied { read write } for pid=25272 comm="syz.5.4470" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1993.706066][ T793] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1993.713879][ T29] audit: type=1400 audit(1776125080.280:1468): avc: denied { open } for pid=25272 comm="syz.5.4470" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1993.739350][ T29] audit: type=1400 audit(1776125080.547:1469): avc: denied { ioctl } for pid=25269 comm="syz.6.4469" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x4dfd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1994.073065][ T29] audit: type=1400 audit(1776125080.667:1470): avc: denied { getopt } for pid=25272 comm="syz.5.4470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1994.116923][ T793] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1994.126686][ T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1994.158813][ T793] usb 1-1: config 0 has no interface number 0 [ 1994.169740][ T29] audit: type=1400 audit(1776125080.750:1471): avc: denied { mount } for pid=25272 comm="syz.5.4470" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1994.222673][ T793] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1994.242679][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.261976][ T793] usb 1-1: Product: syz [ 1994.273488][ T793] usb 1-1: Manufacturer: syz [ 1994.297372][ T793] usb 1-1: SerialNumber: syz [ 1994.393031][ T793] usb 1-1: config 0 descriptor?? [ 1994.454066][ T793] hub 1-1:0.31: bad descriptor, ignoring hub [ 1994.518559][ T793] hub 1-1:0.31: probe with driver hub failed with error -5 [ 1994.607366][ T793] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1994.652797][ T793] uvcvideo 1-1:0.31: No valid video chain found. [ 1995.492827][T25286] EXT4-fs (nbd0): unable to read superblock [ 1995.545367][T25284] tipc: Can't bind to reserved service type 2 [ 1995.714943][T25284] No such timeout policy "syz0" [ 1995.740090][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1995.740108][ T29] audit: type=1400 audit(1776125082.826:1478): avc: denied { mounton } for pid=25266 comm="syz.0.4468" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1995.815271][ T29] audit: type=1400 audit(1776125082.890:1479): avc: denied { bind } for pid=25279 comm="syz.7.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1995.848987][ T29] audit: type=1400 audit(1776125083.167:1480): avc: denied { setopt } for pid=25289 comm="syz.7.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1995.923929][T13512] usb 1-1: USB disconnect, device number 74 [ 1996.899417][T25300] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1997.132603][ T29] audit: type=1400 audit(1776125084.348:1481): avc: denied { listen } for pid=25289 comm="syz.7.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1997.256932][T25297] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4475'. [ 1998.839922][ T29] audit: type=1400 audit(1776125084.385:1482): avc: denied { accept } for pid=25289 comm="syz.7.4474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1999.102569][ T29] audit: type=1400 audit(1776125086.166:1483): avc: denied { create } for pid=25325 comm="syz.5.4476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1999.220547][ T29] audit: type=1400 audit(1776125086.166:1484): avc: denied { append } for pid=25325 comm="syz.5.4476" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1999.320710][T25338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4477'. [ 1999.527717][T25342] input: syz0 as /devices/virtual/input/input76 [ 1999.681499][ T29] audit: type=1400 audit(1776125086.553:1485): avc: denied { read write } for pid=25332 comm="syz.0.4478" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2001.429726][ T29] audit: type=1400 audit(1776125086.553:1486): avc: denied { open } for pid=25332 comm="syz.0.4478" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2001.569672][ T29] audit: type=1400 audit(1776125086.553:1487): avc: denied { ioctl } for pid=25332 comm="syz.0.4478" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2001.597481][ T29] audit: type=1400 audit(1776125086.682:1488): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=4601 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.119353][ T29] audit: type=1400 audit(1776125086.682:1489): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4601 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.168293][ T29] audit: type=1400 audit(1776125086.691:1490): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4601 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2002.261551][T25351] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4479'. [ 2002.784907][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4482'. [ 2003.558906][ T29] audit: type=1400 audit(1776125090.281:1491): avc: denied { ioctl } for pid=25360 comm="syz.0.4484" path="socket:[87398]" dev="sockfs" ino=87398 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2003.981629][ T977] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2004.171298][ T977] usb 1-1: config 2 has an invalid interface number: 228 but max is 0 [ 2004.197099][ T977] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.262125][ T977] usb 1-1: config 2 has no interface number 0 [ 2004.293660][ T977] usb 1-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.371714][ T977] usb 1-1: config 2 interface 228 has no altsetting 0 [ 2004.401609][ T977] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 2004.426221][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.452243][ T977] usb 1-1: Product: syz [ 2004.461286][ T977] usb 1-1: Manufacturer: syz [ 2004.474753][ T977] usb 1-1: SerialNumber: syz [ 2004.871274][ T29] audit: type=1400 audit(1776125091.305:1492): avc: denied { create } for pid=25366 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2004.966458][ T977] ims_pcu 1-1:2.228: probe with driver ims_pcu failed with error -22 [ 2004.990379][ T29] audit: type=1400 audit(1776125091.323:1493): avc: denied { bind } for pid=25366 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2005.022048][ T977] usb 1-1: USB disconnect, device number 75 [ 2005.070356][ T29] audit: type=1400 audit(1776125091.323:1494): avc: denied { setopt } for pid=25366 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2005.125395][ T29] audit: type=1400 audit(1776125091.333:1495): avc: denied { accept } for pid=25366 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2005.211587][T25373] overlayfs: failed to clone lowerpath [ 2005.580595][T13512] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 2005.749472][T13512] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2006.059113][T13512] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2006.087431][T13512] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2006.171310][T13512] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2006.312156][T13512] usb 6-1: Product: syz [ 2006.323045][T13512] usb 6-1: Manufacturer: syz [ 2006.334404][T13512] usb 6-1: SerialNumber: syz [ 2007.286381][ T5987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2007.408539][T13512] usb 6-1: config 0 descriptor?? [ 2007.441285][T13512] usb 6-1: selecting invalid altsetting 0 [ 2007.936074][T25399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 2008.044174][T25401] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 2008.466304][T20875] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 2008.770312][T20875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2008.782775][T20875] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 2008.805505][T20875] usb 1-1: string descriptor 0 read error: -22 [ 2008.833661][T20875] usb 1-1: New USB device found, idVendor=0944, idProduct=0204, bcdDevice= 0.40 [ 2008.845123][T20875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.081947][T25396] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2010.092802][T13512] usb 6-1: USB disconnect, device number 48 [ 2010.800312][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2010.800324][ T29] audit: type=1400 audit(1776125095.792:1500): avc: denied { setopt } for pid=25394 comm="syz.0.4494" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2010.827789][T20875] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2010.847756][ T29] audit: type=1400 audit(1776125095.802:1501): avc: denied { bind } for pid=25394 comm="syz.0.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2010.880014][ T29] audit: type=1400 audit(1776125095.811:1502): avc: denied { node_bind } for pid=25394 comm="syz.0.4494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2010.912581][T20875] usb 1-1: MIDIStreaming interface descriptor not found [ 2011.027030][ T29] audit: type=1400 audit(1776125095.820:1503): avc: denied { write } for pid=25394 comm="syz.0.4494" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2011.374003][T20875] usb 1-1: USB disconnect, device number 76 [ 2012.385784][ T29] audit: type=1400 audit(1776125096.263:1504): avc: denied { wake_alarm } for pid=25421 comm="syz.5.4499" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2012.407353][ T29] audit: type=1400 audit(1776125096.374:1505): avc: denied { mount } for pid=25421 comm="syz.5.4499" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2012.407984][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2012.429531][ T29] audit: type=1400 audit(1776125096.752:1506): avc: denied { ioctl } for pid=25417 comm="syz.2.4498" path="socket:[87498]" dev="sockfs" ino=87498 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2012.461496][ T29] audit: type=1400 audit(1776125097.426:1507): avc: denied { unmount } for pid=12589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2012.503393][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2012.690776][T25442] sp0: Synchronizing with TNC [ 2012.708727][T25443] kAFS: unable to lookup cell 'ÿ' [ 2012.715897][T25442] sp0: Found TNC [ 2014.149446][T25439] @ÿ: renamed from bond_slave_0 (while UP) [ 2014.214870][T25439] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4502'. [ 2014.925319][T25457] sp0: Synchronizing with TNC [ 2015.515877][T25460] lo speed is unknown, defaulting to 1000 [ 2016.538200][T25466] sp1: Synchronizing with TNC [ 2017.037764][T25470] lo speed is unknown, defaulting to 1000 [ 2019.088645][T25482] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 2019.097499][T25482] PKCS7: Only support pkcs7_signedData type [ 2019.935793][ T29] audit: type=1400 audit(1776125104.392:1508): avc: denied { accept } for pid=25495 comm="syz.6.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2020.384745][T25498] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4513'. [ 2021.389544][ T29] audit: type=1400 audit(1776125105.389:1509): avc: denied { ioctl } for pid=25499 comm="syz.5.4514" path="socket:[87796]" dev="sockfs" ino=87796 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2021.592422][T25508] sp0: Synchronizing with TNC [ 2021.664490][T25509] sp0: Found TNC [ 2021.986168][T25514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4518'. [ 2022.974522][ T29] audit: type=1400 audit(1776125107.188:1510): avc: denied { name_bind } for pid=25522 comm="syz.5.4519" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2023.647170][ T29] audit: type=1400 audit(1776125107.612:1511): avc: denied { listen } for pid=25530 comm="syz.0.4522" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2024.422867][T25540] sp0: Synchronizing with TNC [ 2024.458499][T25542] sp0: Found TNC [ 2024.827469][T25546] sp1: Synchronizing with TNC [ 2025.326063][T25548] lo speed is unknown, defaulting to 1000 [ 2026.358745][ T29] audit: type=1326 audit(1776125110.325:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2026.416025][ T29] audit: type=1326 audit(1776125110.325:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.055613][ T29] audit: type=1326 audit(1776125110.325:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.080996][ T29] audit: type=1326 audit(1776125110.325:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.311819][ T29] audit: type=1326 audit(1776125110.325:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.415860][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4530'. [ 2027.789316][ T29] audit: type=1326 audit(1776125110.343:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.814324][ T29] audit: type=1326 audit(1776125110.343:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.838358][ T29] audit: type=1326 audit(1776125110.343:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.911543][ T29] audit: type=1326 audit(1776125110.343:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25552 comm="syz.5.4528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f57ccb9c819 code=0x7ffc0000 [ 2027.977869][ T29] audit: type=1400 audit(1776125111.054:1521): avc: denied { create } for pid=25560 comm="syz.0.4529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2029.149234][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4533'. [ 2029.158405][T25582] netlink: 'syz.2.4533': attribute type 30 has an invalid length. [ 2029.170967][T11679] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2029.181922][T11679] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2029.192512][T11679] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2029.221249][T11679] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2030.007752][T25598] overlayfs: failed to clone upperpath [ 2031.003688][T25613] sp0: Synchronizing with TNC [ 2031.889208][T25617] lo speed is unknown, defaulting to 1000 [ 2033.582206][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2033.582224][ T29] audit: type=1400 audit(1776125116.987:1524): avc: denied { setopt } for pid=25623 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2034.334677][ T29] audit: type=1400 audit(1776125117.670:1525): avc: denied { sqpoll } for pid=25623 comm="syz.6.4542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2035.416610][ T29] audit: type=1400 audit(1776125118.279:1526): avc: denied { read } for pid=25636 comm="syz.5.4546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2035.457846][ T29] audit: type=1400 audit(1776125118.343:1527): avc: denied { write } for pid=25636 comm="syz.5.4546" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2035.751164][ T29] audit: type=1400 audit(1776125118.961:1528): avc: denied { kexec_image_load } for pid=25641 comm="syz.0.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2036.350255][T25665] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4551'. [ 2036.359345][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4551'. [ 2036.369882][T25665] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4551'. [ 2036.379016][T25665] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4551'. [ 2037.912499][ T29] audit: type=1400 audit(1776125120.982:1529): avc: denied { write } for pid=25673 comm="syz.5.4554" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2037.950847][ T29] audit: type=1400 audit(1776125121.010:1530): avc: denied { ioctl } for pid=25673 comm="syz.5.4554" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2038.258271][T16428] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2039.117727][ T29] audit: type=1400 audit(1776125121.656:1531): avc: denied { write } for pid=25679 comm="syz.2.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2039.254046][T16428] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.283763][ T29] audit: type=1400 audit(1776125121.656:1532): avc: denied { read } for pid=25679 comm="syz.2.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2039.534255][T16428] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2039.596262][ T29] audit: type=1400 audit(1776125122.532:1533): avc: denied { watch } for pid=25688 comm="syz.2.4559" path="/999/file1" dev="tmpfs" ino=5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2039.831593][T16428] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2039.860417][ T29] audit: type=1400 audit(1776125122.532:1534): avc: denied { watch_sb watch_reads } for pid=25688 comm="syz.2.4559" path="/999/file1" dev="tmpfs" ino=5450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2039.898801][T16428] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2039.918394][T16428] usb 6-1: Product: syz [ 2039.924303][T16428] usb 6-1: Manufacturer: syz [ 2039.940984][T16428] usb 6-1: SerialNumber: syz [ 2039.949823][T16428] usb 6-1: config 0 descriptor?? [ 2039.991813][ T29] audit: type=1400 audit(1776125122.883:1535): avc: denied { block_suspend } for pid=25689 comm="syz.7.4558" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.537778][T25707] NILFS (nullb0): couldn't find nilfs on the device [ 2040.986545][ T977] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 2041.293036][ T977] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 2041.756162][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.807505][ T977] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2041.837246][ T977] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2041.860331][ T977] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2041.884087][ T977] usb 7-1: Manufacturer: syz [ 2041.895460][ T977] usb 7-1: config 0 descriptor?? [ 2041.912368][ T977] igorplugusb 7-1:0.0: incorrect number of endpoints [ 2042.210292][T25698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2042.243588][ T29] audit: type=1800 audit(1776125124.968:1536): pid=25721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.4566" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 2042.277024][T25698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2042.285427][T16428] usb 6-1: USB disconnect, device number 49 [ 2043.390486][T24174] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2043.510518][T10460] usb 7-1: USB disconnect, device number 31 [ 2043.648623][ T29] audit: type=1400 audit(1776125126.269:1537): avc: denied { name_connect } for pid=25734 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2043.778717][T25735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4571'. [ 2043.788677][T25735] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4571'. [ 2044.350159][T25737] sch_tbf: burst 6281 is lower than device lo mtu (9230) ! [ 2044.456747][T25735] netlink: 'syz.2.4571': attribute type 6 has an invalid length. [ 2044.458322][ T29] audit: type=1400 audit(1776125126.971:1538): avc: denied { getopt } for pid=25732 comm="syz.0.4570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2044.464843][T25735] netlink: 'syz.2.4571': attribute type 5 has an invalid length. [ 2044.509841][T25735] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4571'. [ 2044.652108][T25745] 9pnet_virtio: no channels available for device syz [ 2044.755266][T25745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2046.119711][ T29] audit: type=1400 audit(1776125128.502:1539): avc: denied { create } for pid=25743 comm="syz.5.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2046.147432][ T29] audit: type=1400 audit(1776125128.521:1540): avc: denied { ioctl } for pid=25743 comm="syz.5.4573" path="socket:[88362]" dev="sockfs" ino=88362 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2047.336373][ T29] audit: type=1400 audit(1776125129.665:1541): avc: denied { ioctl } for pid=25747 comm="syz.7.4574" path="socket:[88352]" dev="sockfs" ino=88352 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2048.681278][ T29] audit: type=1400 audit(1776125130.643:1542): avc: denied { create } for pid=25757 comm="syz.5.4578" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2048.731140][ T29] audit: type=1400 audit(1776125130.652:1543): avc: denied { write } for pid=25757 comm="syz.5.4578" name="file0" dev="tmpfs" ino=3263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2048.769635][ T29] audit: type=1400 audit(1776125130.652:1544): avc: denied { open } for pid=25757 comm="syz.5.4578" path="/604/file0" dev="tmpfs" ino=3263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2048.794974][ T29] audit: type=1400 audit(1776125130.652:1545): avc: denied { ioctl } for pid=25757 comm="syz.5.4578" path="/604/file0" dev="tmpfs" ino=3263 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2049.849651][ T29] audit: type=1400 audit(1776125131.972:1546): avc: denied { unlink } for pid=12589 comm="syz-executor" name="file0" dev="tmpfs" ino=3263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2050.688806][T25780] kAFS: unable to lookup cell 'Þ({^ú@' [ 2053.777437][ T29] audit: type=1400 audit(1776125134.694:1547): avc: denied { write } for pid=25781 comm="syz.0.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2054.486788][T25810] fuse: Bad value for 'fd' [ 2055.084370][ T29] audit: type=1400 audit(1776125136.816:1548): avc: denied { map } for pid=25812 comm="syz.5.4587" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2055.418677][ T29] audit: type=1400 audit(1776125137.129:1549): avc: denied { mount } for pid=25819 comm="syz.2.4589" name="/" dev="ramfs" ino=88510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2055.488072][T25820] pim6reg: entered allmulticast mode [ 2055.528744][ T29] audit: type=1400 audit(1776125137.222:1550): avc: denied { open } for pid=25815 comm="syz.6.4588" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2055.986869][T25831] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4590'. [ 2056.532238][ T29] audit: type=1400 audit(1776125138.052:1551): avc: denied { name_bind } for pid=25828 comm="syz.0.4591" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2058.194294][T25847] bridge0: entered promiscuous mode [ 2058.231126][ T29] audit: type=1400 audit(1776125139.731:1552): avc: denied { remount } for pid=25848 comm="syz.2.4595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2058.251662][T25847] bridge0: entered allmulticast mode [ 2058.274845][T16140] Bluetooth: hci6: unexpected event for opcode 0x2042 [ 2061.246326][T25872] lo speed is unknown, defaulting to 1000 [ 2061.552547][T25873] 9pnet_fd: p9_fd_create_tcp (25873): problem connecting socket to 127.0.0.1 [ 2062.435872][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4603'. [ 2063.126980][T25883] netlink: 'syz.2.4602': attribute type 2 has an invalid length. [ 2063.224859][T25883] !: entered promiscuous mode [ 2063.380116][T25883] netlink: 'syz.2.4602': attribute type 2 has an invalid length. [ 2063.590981][T25896] veth1: Caught tx_queue_len zero misconfig [ 2063.911846][T25894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4605'. [ 2063.957246][ T29] audit: type=1400 audit(1776125144.972:1553): avc: denied { create } for pid=25889 comm="syz.0.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2065.420747][ T29] audit: type=1400 audit(1776125144.972:1554): avc: denied { write } for pid=25889 comm="syz.0.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2066.160416][ T29] audit: type=1400 audit(1776125147.039:1555): avc: denied { read write } for pid=25909 comm="syz.0.4610" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2066.640833][ T29] audit: type=1400 audit(1776125147.039:1556): avc: denied { open } for pid=25909 comm="syz.0.4610" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2067.219605][ T29] audit: type=1400 audit(1776125147.962:1557): avc: denied { read } for pid=25919 comm="syz.0.4611" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2067.324262][ T29] audit: type=1400 audit(1776125148.100:1558): avc: denied { open } for pid=25919 comm="syz.0.4611" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2067.875827][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4615'. [ 2068.028076][ T29] audit: type=1400 audit(1776125148.368:1559): avc: denied { ioctl } for pid=25929 comm="syz.5.4614" path="socket:[88891]" dev="sockfs" ino=88891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2068.254872][ T29] audit: type=1400 audit(1776125148.368:1560): avc: denied { bind } for pid=25929 comm="syz.5.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2068.426264][ T29] audit: type=1400 audit(1776125148.368:1561): avc: denied { write } for pid=25929 comm="syz.5.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2070.299273][T25959] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4619'. [ 2071.735905][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4621'. [ 2072.530489][T25979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4622'. [ 2072.544266][ T29] audit: type=1400 audit(1776125152.935:1562): avc: denied { read } for pid=25969 comm="syz.0.4622" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2072.630331][ T29] audit: type=1400 audit(1776125152.963:1563): avc: denied { open } for pid=25969 comm="syz.0.4622" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2072.659386][T25979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2072.665425][T25979] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2072.671477][T25973] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2072.688483][T25973] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2073.143585][ T29] audit: type=1400 audit(1776125153.231:1564): avc: denied { listen } for pid=25977 comm="syz.5.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2073.268687][T25973] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2073.299382][T25973] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2073.682162][ T29] audit: type=1400 audit(1776125153.950:1565): avc: denied { read } for pid=25991 comm="syz.2.4626" lport=41268 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2074.407285][T25973] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2074.432908][T25973] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2074.727271][T26003] overlayfs: failed to clone lowerpath [ 2074.735690][ T29] audit: type=1400 audit(1776125154.947:1566): avc: denied { mount } for pid=25998 comm="syz.2.4629" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2076.201624][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4625'. [ 2077.384406][T25986] : entered promiscuous mode [ 2077.572422][ T977] libceph: connect (1)[c::]:6789 error -13 [ 2077.594772][T26015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2077.629411][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 2077.761511][T26012] ceph: No mds server is up or the cluster is laggy [ 2077.792685][ T29] audit: type=1400 audit(1776125157.660:1567): avc: denied { ioctl } for pid=26020 comm="syz.7.4633" path="socket:[90163]" dev="sockfs" ino=90163 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2078.054978][ T977] libceph: connect (1)[c::]:6789 error -13 [ 2078.314829][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 2078.718737][ T29] audit: type=1400 audit(1776125158.472:1568): avc: denied { setopt } for pid=26022 comm="syz.5.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2078.876304][ T29] audit: type=1400 audit(1776125158.472:1569): avc: denied { write } for pid=26022 comm="syz.5.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2078.959019][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2079.046779][T26037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4635'. [ 2079.423479][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2080.690475][ T29] audit: type=1326 audit(1776125160.455:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2080.719351][ T29] audit: type=1326 audit(1776125160.455:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2081.791968][ T29] audit: type=1326 audit(1776125160.455:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2082.729776][ T29] audit: type=1326 audit(1776125160.455:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2082.754316][ T29] audit: type=1326 audit(1776125160.455:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2082.791453][ T29] audit: type=1326 audit(1776125160.455:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2082.978870][ T29] audit: type=1326 audit(1776125160.455:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2083.300742][ T977] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2083.327593][ T29] audit: type=1326 audit(1776125160.455:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26048 comm="syz.0.4640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508db9c819 code=0x7ffc0000 [ 2083.614419][ T977] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 2083.686854][ T977] usb 1-1: config 0 has no interface number 0 [ 2084.157102][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2084.157121][ T29] audit: type=1400 audit(1776125163.353:1579): avc: denied { mount } for pid=26071 comm="syz.6.4645" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2084.213873][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2084.223529][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.239561][ T977] usb 1-1: config 0 descriptor?? [ 2084.247799][ T977] usb 1-1: can't set config #0, error -71 [ 2084.272387][ T977] usb 1-1: USB disconnect, device number 77 [ 2084.354951][T26079] overlayfs: failed to clone lowerpath [ 2084.797012][ T29] audit: type=1400 audit(1776125164.174:1580): avc: denied { ioctl } for pid=26080 comm="syz.0.4647" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2085.049318][T26094] netlink: 'syz.2.4649': attribute type 10 has an invalid length. [ 2085.058244][T26094] batadv0: left allmulticast mode [ 2085.063355][T26094] batadv0: left promiscuous mode [ 2085.069105][T26094] bridge0: port 3(batadv0) entered disabled state [ 2085.646271][T26094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2085.655678][T26094] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2086.008486][ T29] audit: type=1400 audit(1776125165.133:1581): avc: denied { read write } for pid=26092 comm="syz.0.4650" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2086.156479][T26103] No such timeout policy "syz0" [ 2086.176655][ T29] audit: type=1400 audit(1776125165.133:1582): avc: denied { open } for pid=26092 comm="syz.0.4650" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2086.274584][T26107] netlink: 'syz.2.4652': attribute type 6 has an invalid length. [ 2086.285182][T26107] netlink: 'syz.2.4652': attribute type 6 has an invalid length. [ 2086.306960][ T29] audit: type=1400 audit(1776125165.512:1583): avc: denied { ioctl } for pid=26084 comm="syz.6.4648" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2086.561172][ T29] audit: type=1400 audit(1776125165.512:1584): avc: denied { write } for pid=26084 comm="syz.6.4648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2086.688470][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4653'. [ 2088.203990][ T29] audit: type=1400 audit(1776125167.385:1585): avc: denied { ioctl } for pid=26119 comm="syz.0.4655" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2090.248637][T26140] 9p: Bad value for 'rfdno' [ 2090.453202][ T29] audit: type=1400 audit(1776125169.452:1586): avc: denied { execute } for pid=26141 comm="syz.0.4659" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2091.329007][T26158] 9p: Bad value for 'wfdno' [ 2091.830179][T26160] No such timeout policy "syz1" [ 2091.862677][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4665'. [ 2091.874464][ T29] audit: type=1326 audit(1776125170.771:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26152 comm="syz.7.4665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff59ed9c819 code=0x0 [ 2092.202190][T26166] o2cb: This node has not been configured. [ 2092.209046][T26166] o2cb: Cluster check failed. Fix errors before retrying. [ 2092.216435][T26166] (syz.5.4663,26166,1):user_dlm_register:674 ERROR: status = -22 [ 2092.224282][T26166] (syz.5.4663,26166,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2092.342518][ T29] audit: type=1400 audit(1776125171.048:1588): avc: denied { mount } for pid=26161 comm="syz.5.4663" name="/" dev="ocfs2_dlmfs" ino=90548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2092.368048][ T29] audit: type=1400 audit(1776125171.076:1589): avc: denied { add_name } for pid=26161 comm="syz.5.4663" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2092.419058][ T29] audit: type=1400 audit(1776125171.076:1590): avc: denied { create } for pid=26161 comm="syz.5.4663" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 2092.513513][ T29] audit: type=1400 audit(1776125171.076:1591): avc: denied { associate } for pid=26161 comm="syz.5.4663" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2092.537318][ T29] audit: type=1400 audit(1776125171.112:1592): avc: denied { shutdown } for pid=26161 comm="syz.5.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2092.576430][ T29] audit: type=1400 audit(1776125171.399:1593): avc: denied { getopt } for pid=26167 comm="syz.2.4667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2092.704367][T26164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2092.840225][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4666'. [ 2093.551354][ T29] audit: type=1400 audit(1776125172.211:1594): avc: denied { audit_write } for pid=26175 comm="syz.5.4669" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2093.927018][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4670'. [ 2094.121560][T26190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4672'. [ 2095.058659][T26188] 8021q: adding VLAN 0 to HW filter on device team0 [ 2095.137440][T26188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2095.448030][T26205] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 2095.598418][ T29] audit: type=1400 audit(1776125174.084:1595): avc: denied { relabelto } for pid=26199 comm="syz.0.4674" name="931" dev="tmpfs" ino=5059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:sudo_exec_t:s0" [ 2096.758632][T13512] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 2097.089959][ T29] audit: type=1400 audit(1776125174.084:1596): avc: denied { associate } for pid=26199 comm="syz.0.4674" name="931" dev="tmpfs" ino=5059 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:sudo_exec_t:s0" [ 2097.122524][ T29] audit: type=1400 audit(1776125174.167:1597): avc: denied { create } for pid=26199 comm="syz.0.4674" name="#39" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2097.147219][ T29] audit: type=1400 audit(1776125174.167:1598): avc: denied { link } for pid=26199 comm="syz.0.4674" name="#39" dev="tmpfs" ino=5074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2097.193891][ T29] audit: type=1400 audit(1776125174.167:1599): avc: denied { rename } for pid=26199 comm="syz.0.4674" name="#3a" dev="tmpfs" ino=5074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2097.257306][T13512] usb 7-1: device descriptor read/64, error -71 [ 2097.786776][ T29] audit: type=1400 audit(1776125175.818:1600): avc: denied { bind } for pid=26209 comm="syz.0.4677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2098.048526][T13512] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 2098.690208][T26227] overlayfs: failed to clone upperpath [ 2099.314730][ T29] audit: type=1400 audit(1776125177.636:1601): avc: denied { read } for pid=26220 comm="syz.0.4680" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2099.368475][T26228] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4680'. [ 2100.179021][T26234] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 2101.426641][ T29] audit: type=1400 audit(1776125177.636:1602): avc: denied { open } for pid=26220 comm="syz.0.4680" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2101.882648][ T29] audit: type=1400 audit(1776125179.943:1603): avc: denied { bind } for pid=26239 comm="syz.5.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2102.807142][ T29] audit: type=1400 audit(1776125180.755:1604): avc: denied { ioctl } for pid=26248 comm="syz.6.4686" path="socket:[89879]" dev="sockfs" ino=89879 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2102.875153][T19207] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2103.099142][T13512] usb usb7-port1: attempt power cycle [ 2103.131791][T19207] usb 6-1: Using ep0 maxpacket: 32 [ 2103.140457][T19207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2103.162367][T19207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2103.172784][T19207] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2103.192938][T19207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.227299][T19207] usb 6-1: config 0 descriptor?? [ 2103.249543][T19207] hub 6-1:0.0: USB hub found [ 2103.416138][T26259] efs: cannot read volume header [ 2103.503838][T13512] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 2103.634634][T13512] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 62, changing to 4 [ 2103.695010][ T29] audit: type=1400 audit(1776125181.650:1605): avc: denied { read } for pid=26257 comm="syz.0.4689" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2103.719228][T13512] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 47767, setting to 0 [ 2103.752237][T13512] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2103.770743][T13512] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.300469][ T29] audit: type=1400 audit(1776125181.954:1606): avc: denied { setopt } for pid=26251 comm="syz.5.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2104.355294][ T29] audit: type=1400 audit(1776125182.268:1607): avc: denied { open } for pid=26257 comm="syz.0.4689" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2105.470782][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4690'. [ 2105.792936][T26271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4690'. [ 2106.144898][T13512] usb 7-1: string descriptor 0 read error: -71 [ 2106.152017][T19207] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 2106.213860][T13512] hub 7-1:32.0: bad descriptor, ignoring hub [ 2106.222117][T19207] usbhid 6-1:0.0: can't add hid device: -71 [ 2106.252127][T13512] hub 7-1:32.0: probe with driver hub failed with error -5 [ 2106.261700][T19207] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2106.308209][T19207] usb 6-1: USB disconnect, device number 50 [ 2106.373951][ T29] audit: type=1400 audit(1776125184.150:1608): avc: denied { setopt } for pid=26272 comm="syz.5.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2106.758864][T26278] SET target dimension over the limit! [ 2107.088704][T13512] usb 7-1: USB disconnect, device number 34 [ 2107.102107][T26280] overlayfs: failed to clone lowerpath [ 2107.570694][T26289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4695'. [ 2107.685963][ T29] audit: type=1400 audit(1776125185.359:1609): avc: denied { create } for pid=26275 comm="syz.6.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2109.861325][T26311] kAFS: unable to lookup cell 'ÿ' [ 2109.871708][T26311] kAFS: unable to lookup cell '(,c¾Ì' [ 2109.915328][T26306] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4697'. [ 2109.937711][ T29] audit: type=1400 audit(1776125187.417:1610): avc: denied { set_context_mgr } for pid=26308 comm="syz.6.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2110.885314][T19207] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 2112.040843][T19207] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2112.048878][T19207] usb 7-1: config 0 has no interface number 0 [ 2112.092207][ T29] audit: type=1400 audit(1776125189.419:1611): avc: denied { append } for pid=26328 comm="syz.5.4703" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2112.161175][T19207] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2112.185752][T19207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.215731][T19207] usb 7-1: Product: syz [ 2112.226327][T19207] usb 7-1: Manufacturer: syz [ 2112.239342][T19207] usb 7-1: SerialNumber: syz [ 2112.260392][ T29] audit: type=1400 audit(1776125189.566:1612): avc: denied { read } for pid=26328 comm="syz.5.4703" path="socket:[89972]" dev="sockfs" ino=89972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2112.277603][T19207] usb 7-1: config 0 descriptor?? [ 2112.382896][T26329] ceph: No mds server is up or the cluster is laggy [ 2112.565395][T19207] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2112.690908][T19207] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2112.736105][T19207] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2112.745177][T19207] usb 7-1: media controller created [ 2112.904307][T19207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2112.989792][T26339] overlayfs: failed to clone upperpath [ 2114.304214][T19207] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2114.511477][T19207] usb 7-1: USB disconnect, device number 35 [ 2115.892068][ T29] audit: type=1400 audit(1776125192.934:1613): avc: denied { create } for pid=26355 comm="syz.7.4708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2116.019479][ T29] audit: type=1400 audit(1776125192.934:1614): avc: denied { ioctl } for pid=26355 comm="syz.7.4708" path="socket:[90012]" dev="sockfs" ino=90012 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2116.202109][T26361] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4709'. [ 2117.077040][T26365] random: crng reseeded on system resumption [ 2117.088722][ T29] audit: type=1400 audit(1776125194.023:1615): avc: denied { write } for pid=26343 comm="syz.6.4706" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 2118.160121][T26372] netlink: 'syz.2.4702': attribute type 10 has an invalid length. [ 2118.212139][T26372] netlink: 'syz.2.4702': attribute type 10 has an invalid length. [ 2118.220642][T26372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4702'. [ 2118.230245][T26372] batadv0: entered promiscuous mode [ 2118.235573][T26372] batadv0: entered allmulticast mode [ 2118.284934][T26372] bond0: (slave batadv0): Releasing backup interface [ 2118.370662][T26372] bridge0: port 3(batadv0) entered blocking state [ 2118.377878][T26372] bridge0: port 3(batadv0) entered disabled state [ 2118.624041][T26380] fuse: Bad value for 'user_id' [ 2118.628987][T26380] fuse: Bad value for 'user_id' [ 2119.039547][T24164] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2119.048974][T24164] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2119.298086][T26383] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 2119.734776][ T29] audit: type=1400 audit(1776125196.145:1616): avc: denied { create } for pid=26373 comm="syz.6.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2120.812532][ T29] audit: type=1400 audit(1776125197.419:1617): avc: denied { nlmsg_read } for pid=26387 comm="syz.7.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2121.494259][ T29] audit: type=1400 audit(1776125198.101:1618): avc: denied { create } for pid=26390 comm="syz.6.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2121.549861][T26401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4715'. [ 2121.575704][ T29] audit: type=1400 audit(1776125198.101:1619): avc: denied { ioctl } for pid=26390 comm="syz.6.4716" path="socket:[91061]" dev="sockfs" ino=91061 ioctlcmd=0x6180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2121.632214][T26406] trusted_key: encrypted_key: master key parameter 'ed:syz' is invalid [ 2121.652127][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4715'. [ 2121.673455][ T29] audit: type=1400 audit(1776125198.221:1620): avc: denied { write } for pid=26390 comm="syz.6.4716" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2121.701162][T26406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4719'. [ 2121.716853][T26406] vlan0: left promiscuous mode [ 2121.723884][T26406] vlan0: left allmulticast mode [ 2121.736837][T26406] hsr_slave_1: left allmulticast mode [ 2121.973864][T26413] kAFS: unable to lookup cell 'ÿ' [ 2121.979815][T26413] kAFS: unable to lookup cell '(,c¾Ì' [ 2122.227219][T26418] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 2123.010332][ T29] audit: type=1400 audit(1776125198.803:1621): avc: denied { mount } for pid=26411 comm="syz.2.4721" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2123.123829][T26413] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 2123.210640][ T29] audit: type=1400 audit(1776125198.904:1622): avc: denied { setopt } for pid=26411 comm="syz.2.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2123.231666][T26413] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 2124.124149][ T29] audit: type=1400 audit(1776125200.519:1623): avc: denied { firmware_load } for pid=26408 comm="syz.7.4720" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2124.166724][T26413] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2124.514142][T13512] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2124.690366][T13512] usb 1-1: Using ep0 maxpacket: 16 [ 2124.774408][ T29] audit: type=1326 audit(1776125201.119:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26435 comm="syz.6.4725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfc259c819 code=0x0 [ 2124.960554][T13512] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2125.153542][T13512] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.163643][T13512] usb 1-1: config 0 has no interface number 0 [ 2125.241044][T13512] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 2125.269294][T13512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.295667][T13512] usb 1-1: Product: syz [ 2125.310823][T13512] usb 1-1: Manufacturer: syz [ 2125.315436][T13512] usb 1-1: SerialNumber: syz [ 2125.345046][T13512] usb 1-1: config 0 descriptor?? [ 2125.377680][T13512] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 2126.504695][T13512] uvcvideo 1-1:0.105: No valid video chain found. [ 2126.817594][ T29] audit: type=1400 audit(1776125203.010:1625): avc: denied { getopt } for pid=26452 comm="syz.5.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2128.176786][T13512] usb 1-1: USB disconnect, device number 78 [ 2128.626968][T26476] openvswitch: netlink: IP tunnel TTL not specified. [ 2129.495494][T26481] o2cb: This node has not been configured. [ 2129.502322][T26481] o2cb: Cluster check failed. Fix errors before retrying. [ 2129.509466][T26481] (syz.2.4735,26481,0):user_dlm_register:674 ERROR: status = -22 [ 2129.517439][T26481] (syz.2.4735,26481,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 2130.868619][T26489] sp0: Synchronizing with TNC [ 2131.366100][T26491] lo speed is unknown, defaulting to 1000 [ 2132.769765][T26504] ceph: No mds server is up or the cluster is laggy [ 2132.873386][T26514] Malformed UNC in devname [ 2132.873386][T26514] [ 2132.880106][T26514] CIFS: VFS: Malformed UNC in devname [ 2132.920359][T26514] SET target dimension over the limit! [ 2134.817385][T26530] overlayfs: failed to clone upperpath [ 2135.505818][T26535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48673 sclass=netlink_route_socket pid=26535 comm=syz.6.4746 [ 2136.519678][T26544] overlayfs: failed to resolve './file0': -2 [ 2136.558262][ T29] audit: type=1400 audit(1776125211.914:1626): avc: denied { read } for pid=26539 comm="syz.6.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2141.075451][T26566] ceph: No mds server is up or the cluster is laggy [ 2141.808566][ T29] audit: type=1400 audit(1776125216.842:1627): avc: denied { read } for pid=26577 comm="syz.6.4755" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2141.833626][T26592] netlink: 388 bytes leftover after parsing attributes in process `syz.5.4757'. [ 2141.986641][ T29] audit: type=1400 audit(1776125216.980:1629): avc: denied { bind } for pid=26586 comm="syz.0.4759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2142.149731][ T29] audit: type=1400 audit(1776125216.878:1628): avc: denied { open } for pid=26577 comm="syz.6.4755" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2142.249814][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4757'. [ 2142.259537][T26594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4759'. [ 2142.277694][ T29] audit: type=1800 audit(1776125217.081:1630): pid=26599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4760" name="nullb0" dev="tmpfs" ino=2750 res=0 errno=0 [ 2142.366463][ T29] audit: type=1400 audit(1776125217.183:1631): avc: denied { ioctl } for pid=26577 comm="syz.6.4755" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2142.435480][ T29] audit: type=1400 audit(1776125217.238:1632): avc: denied { read write } for pid=26581 comm="syz.5.4757" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2142.496573][ T29] audit: type=1400 audit(1776125217.257:1633): avc: denied { open } for pid=26581 comm="syz.5.4757" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2142.561993][ T29] audit: type=1400 audit(1776125217.340:1634): avc: denied { ioctl } for pid=26586 comm="syz.0.4759" path="socket:[91577]" dev="sockfs" ino=91577 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2144.820191][T26633] binder: 26630:26633 unknown command 1472 [ 2144.826149][T26633] binder: 26630:26633 ioctl c0306201 200000000080 returned -22 [ 2145.145139][ T29] audit: type=1400 audit(1776125219.591:1635): avc: denied { watch } for pid=26630 comm="syz.5.4766" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2145.547151][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2145.553900][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2145.786078][ T29] audit: type=1400 audit(1776125220.255:1636): avc: denied { create } for pid=26634 comm="syz.6.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2145.887259][ T29] audit: type=1400 audit(1776125220.255:1637): avc: denied { ioctl } for pid=26634 comm="syz.6.4767" path="socket:[92564]" dev="sockfs" ino=92564 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2146.534961][T26651] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4768'. [ 2146.841083][T26658] sp0: Synchronizing with TNC [ 2147.464579][T26660] lo speed is unknown, defaulting to 1000 [ 2148.883259][T26670] siw: device registration error -23 [ 2148.904672][T26670] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 2149.365432][T26672] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 2149.669327][T26675] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4774'. [ 2149.715743][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2149.715761][ T29] audit: type=1400 audit(1776125224.103:1640): avc: denied { setattr } for pid=26673 comm="syz.0.4775" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 2150.479934][ T29] audit: type=1400 audit(1776125224.841:1641): avc: denied { getopt } for pid=26673 comm="syz.0.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2150.894894][T26695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2151.126769][ T29] audit: type=1400 audit(1776125225.275:1642): avc: denied { read } for pid=26692 comm="syz.6.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2151.156293][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4777'. [ 2151.289264][T26696] overlayfs: failed to clone upperpath [ 2151.459694][ T29] audit: type=1400 audit(1776125225.709:1643): avc: denied { getopt } for pid=26698 comm="syz.5.4779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2151.879091][T26705] netlink: 'syz.7.4778': attribute type 39 has an invalid length. [ 2152.297840][ T29] audit: type=1400 audit(1776125226.521:1644): avc: denied { bind } for pid=26706 comm="syz.6.4780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2154.464488][T26723] can0: slcan on ttyS3. [ 2155.174704][T26719] can0 (unregistered): slcan off ttyS3. [ 2157.652593][T26745] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 2157.840386][T26746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4787'. [ 2157.885313][ T5914] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 2159.444338][T26775] lo speed is unknown, defaulting to 1000 [ 2159.648787][T26776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.657728][T26776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.677585][ T29] audit: type=1400 audit(1776125232.998:1645): avc: denied { ioctl } for pid=26742 comm="syz.6.4788" path="socket:[91969]" dev="sockfs" ino=91969 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2159.869279][T26772] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.979401][T26781] siw: device registration error -23 [ 2161.430783][ T29] audit: type=1400 audit(1776125234.336:1646): avc: denied { mount } for pid=26783 comm="syz.5.4795" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2161.779047][ T5914] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2161.807314][ T5914] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2161.807353][ T5914] usb 7-1: can't read configurations, error -71 [ 2161.992962][T26793] kAFS: unparsable volume name [ 2162.478912][ T5914] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 2163.856581][ T5914] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 2163.864624][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.874777][ T5914] usb 7-1: config 0 has no interface number 0 [ 2163.880911][ T5914] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2163.964995][ T5914] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2164.310402][ T5914] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 2164.319559][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.327603][ T5914] usb 7-1: Product: syz [ 2164.332717][ T5914] usb 7-1: Manufacturer: syz [ 2164.340351][ T5914] usb 7-1: SerialNumber: syz [ 2164.373655][ T5914] usb 7-1: config 0 descriptor?? [ 2164.386989][T26795] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2164.394247][T26795] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2164.413797][ T5914] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 2164.489096][ T29] audit: type=1400 audit(1776125237.768:1647): avc: denied { write } for pid=26792 comm="syz.5.4797" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2164.625170][ T29] audit: type=1400 audit(1776125237.907:1648): avc: denied { checkpoint_restore } for pid=26792 comm="syz.5.4797" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2164.795089][ T29] audit: type=1400 audit(1776125237.925:1649): avc: denied { map } for pid=26791 comm="syz.6.4796" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2164.991763][T26816] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 2165.108643][ T29] audit: type=1800 audit(1776125238.331:1650): pid=26816 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4800" name="nullb0" dev="tmpfs" ino=2750 res=0 errno=0 [ 2165.436760][T26818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4802'. [ 2165.453197][T26818] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4802'. [ 2166.447518][T26194] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2166.523597][T10460] usb 7-1: USB disconnect, device number 37 [ 2166.558997][ T29] audit: type=1400 audit(1776125239.678:1651): avc: denied { create } for pid=26833 comm="syz.6.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2166.910911][T26194] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2166.982707][T26194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.984638][T26837] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2166.995586][T26194] usb 6-1: config 0 descriptor?? [ 2167.308923][ T29] audit: type=1400 audit(1776125240.186:1652): avc: denied { ioctl } for pid=26833 comm="syz.6.4805" path="socket:[92927]" dev="sockfs" ino=92927 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2167.376097][ T29] audit: type=1400 audit(1776125240.213:1653): avc: denied { connect } for pid=26833 comm="syz.6.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2167.475347][T16140] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 2167.743071][T26845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4807'. [ 2168.465287][ T29] audit: type=1400 audit(1776125240.915:1654): avc: denied { connect } for pid=26838 comm="syz.0.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2168.517564][T26194] ath6kl: Failed to submit usb control message: -110 [ 2168.575976][T26194] ath6kl: unable to send the bmi data to the device: -110 [ 2168.588876][T26194] ath6kl: Unable to send get target info: -110 [ 2169.295574][T26194] ath6kl: Failed to init ath6kl core: -110 [ 2169.410631][T26194] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 2170.692746][ T5914] usb 6-1: USB disconnect, device number 51 [ 2170.805792][ T29] audit: type=1400 audit(1776125243.600:1655): avc: denied { ioctl } for pid=26847 comm="syz.0.4808" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2171.200680][ T29] audit: type=1400 audit(1776125243.960:1656): avc: denied { execute } for pid=26858 comm="syz.5.4810" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=93206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2171.636963][ T29] audit: type=1400 audit(1776125244.338:1657): avc: denied { bind } for pid=26865 comm="syz.2.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2171.689484][ T29] audit: type=1400 audit(1776125244.338:1658): avc: denied { listen } for pid=26865 comm="syz.2.4813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.857986][T26887] overlay: Unknown parameter 'euid<00000000000000000000' [ 2172.944190][T26888] overlayfs: missing 'lowerdir' [ 2174.079298][T26892] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4817'. [ 2174.836491][T26903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4819'. [ 2177.324422][T26931] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2177.359064][ T977] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2178.003178][T26936] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 2178.204816][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 2178.283033][ T977] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 2178.327195][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2178.356639][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.377815][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 2178.484368][ T977] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2178.496593][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.528963][ T977] usb 1-1: config 0 descriptor?? [ 2178.624519][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 2180.273798][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 2180.294658][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2180.309977][ T977] usb 1-1: USB disconnect, device number 79 [ 2180.973448][T26951] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 2181.268423][T26951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4830'. [ 2181.438715][T26957] syzkaller0: entered allmulticast mode [ 2181.447322][T26957] syzkaller0: entered promiscuous mode [ 2181.463437][T26957] syzkaller0 (unregistering): left allmulticast mode [ 2181.470304][T26957] syzkaller0 (unregistering): left promiscuous mode [ 2181.545208][ T29] audit: type=1400 audit(1776125253.510:1659): avc: denied { watch } for pid=26958 comm="syz.7.4832" path="/535" dev="tmpfs" ino=2835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2181.557533][T26962] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2188.354946][T27001] sp0: Synchronizing with TNC [ 2188.906118][T27003] lo speed is unknown, defaulting to 1000 [ 2190.016975][T27009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4841'. [ 2190.332328][ T29] audit: type=1400 audit(1776125261.602:1660): avc: denied { write } for pid=27010 comm="syz.5.4842" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2190.397390][ T29] audit: type=1400 audit(1776125261.602:1661): avc: denied { open } for pid=27010 comm="syz.5.4842" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2190.761579][ T5914] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 2190.785738][ T29] audit: type=1400 audit(1776125262.035:1662): avc: denied { ioctl } for pid=27010 comm="syz.5.4842" path="socket:[94462]" dev="sockfs" ino=94462 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2190.903924][T27028] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4847'. [ 2191.439358][ T5914] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2191.448741][ T5914] usb 7-1: not running at top speed; connect to a high speed hub [ 2191.457688][ T5914] usb 7-1: config 9 has an invalid interface number: 172 but max is 0 [ 2191.466542][ T5914] usb 7-1: config 9 has no interface number 0 [ 2191.478086][T27029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4842'. [ 2191.487280][ T5914] usb 7-1: config 9 interface 172 altsetting 33 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 2191.514600][ T5914] usb 7-1: config 9 interface 172 has no altsetting 0 [ 2191.524914][ T5914] usb 7-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=7b.c2 [ 2191.534115][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.542620][ T5914] usb 7-1: Product: syz [ 2191.562280][ T5914] usb 7-1: Manufacturer: syz [ 2191.568688][ T5914] usb 7-1: SerialNumber: syz [ 2192.962041][ T5914] usb 7-1: USB disconnect, device number 38 [ 2194.591167][T27056] sp0: Synchronizing with TNC [ 2195.235490][T27058] lo speed is unknown, defaulting to 1000 [ 2196.881786][T27063] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2196.929790][T27063] bond3: (slave lo): Enslaving as an active interface with an up link [ 2196.952380][T27063] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 2196.986499][T26194] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2197.011079][ T977] lo speed is unknown, defaulting to 1000 [ 2197.016952][T20875] lo speed is unknown, defaulting to 1000 [ 2197.022858][T10460] lo speed is unknown, defaulting to 1000 [ 2197.160257][T26194] usb 7-1: Using ep0 maxpacket: 16 [ 2197.194717][T26194] usb 7-1: config 253 has an invalid interface number: 184 but max is 0 [ 2197.270495][T26194] usb 7-1: config 253 has no interface number 0 [ 2197.313852][T26194] usb 7-1: config 253 interface 184 has no altsetting 0 [ 2197.454482][T26194] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 2197.474287][T26194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.491735][T26194] usb 7-1: Product: syz [ 2197.669198][T26194] usb 7-1: Manufacturer: syz [ 2198.594001][T26194] usb 7-1: SerialNumber: syz [ 2198.693132][T26194] go7007 7-1:253.184: probe with driver go7007 failed with error -12 [ 2199.067102][T26194] usb 7-1: USB disconnect, device number 39 [ 2199.641092][ T29] audit: type=1400 audit(1776125269.786:1663): avc: denied { execute } for pid=27090 comm="syz.5.4862" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2204.209852][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4869'. [ 2204.900210][T27150] overlayfs: failed to resolve './file0': -2 [ 2205.313500][T27138] xt_TCPMSS: Only works on TCP SYN packets [ 2205.725986][T27153] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4875'. [ 2208.141989][ T29] audit: type=1400 audit(1776125278.044:1664): avc: denied { read } for pid=27177 comm="syz.5.4883" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2208.345804][ T29] audit: type=1400 audit(1776125278.220:1665): avc: denied { ioctl } for pid=27177 comm="syz.5.4883" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2208.531748][T27188] netlink: 'syz.5.4883': attribute type 4 has an invalid length. [ 2208.930540][T27206] input: syz0 as /devices/virtual/input/input77 [ 2211.903823][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4900'. [ 2212.131979][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2212.138523][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2212.237727][T27233] overlayfs: conflicting options: nfs_export=on,index=off [ 2212.400249][ T29] audit: type=1400 audit(1776125281.984:1666): avc: denied { append } for pid=27238 comm="syz.5.4905" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2213.756282][ T29] audit: type=1400 audit(1776125283.211:1667): avc: denied { create } for pid=27235 comm="syz.0.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2214.316437][T27251] tipc: Cannot configure node identity twice [ 2215.727791][ T29] audit: type=1400 audit(1776125285.057:1668): avc: denied { setopt } for pid=27252 comm="syz.2.4908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2216.919602][T27279] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2217.064770][ T29] audit: type=1400 audit(1776125286.284:1669): avc: denied { read write } for pid=27282 comm="syz.6.4917" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2217.107257][T27285] xt_hashlimit: size too large, truncated to 1048576 [ 2217.191037][ T29] audit: type=1400 audit(1776125286.284:1670): avc: denied { open } for pid=27282 comm="syz.6.4917" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2218.065655][T27308] input: syz0 as /devices/virtual/input/input78 [ 2220.657193][ T29] audit: type=1400 audit(1776125289.606:1671): avc: denied { read } for pid=27331 comm="syz.0.4933" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2220.742857][ T29] audit: type=1400 audit(1776125289.624:1672): avc: denied { open } for pid=27331 comm="syz.0.4933" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2220.826202][ T29] audit: type=1400 audit(1776125289.633:1673): avc: denied { ioctl } for pid=27331 comm="syz.0.4933" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2221.153201][T27325] input: syz0 as /devices/virtual/input/input79 [ 2221.381553][T27348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4939'. [ 2221.686300][T27367] GUP no longer grows the stack in syz.5.4947 (27367): 200000005000-200000008000 (200000004000) [ 2221.715012][T27367] CPU: 1 UID: 0 PID: 27367 Comm: syz.5.4947 Tainted: G L syzkaller #0 PREEMPT(full) [ 2221.715050][T27367] Tainted: [L]=SOFTLOCKUP [ 2221.715059][T27367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2221.715072][T27367] Call Trace: [ 2221.715080][T27367] [ 2221.715090][T27367] dump_stack_lvl+0x100/0x190 [ 2221.715135][T27367] gup_vma_lookup.cold+0x83/0x96 [ 2221.715169][T27367] fixup_user_fault+0x253/0x510 [ 2221.715200][T27367] fault_in_user_writeable+0x70/0xe0 [ 2221.715225][T27367] futex_lock_pi+0x68b/0x7b0 [ 2221.715257][T27367] ? __pfx_futex_lock_pi+0x10/0x10 [ 2221.715289][T27367] ? __pfx___futex_wait+0x10/0x10 [ 2221.715323][T27367] ? lockdep_hardirqs_on+0x78/0x100 [ 2221.715377][T27367] ? __pfx_futex_wake_mark+0x10/0x10 [ 2221.715421][T27367] do_futex+0x18a/0x350 [ 2221.715445][T27367] ? __pfx_do_futex+0x10/0x10 [ 2221.715470][T27367] ? __vm_munmap+0x1d2/0x390 [ 2221.715511][T27367] __x64_sys_futex+0x34f/0x4d0 [ 2221.715545][T27367] ? __pfx___x64_sys_futex+0x10/0x10 [ 2221.715584][T27367] do_syscall_64+0x106/0xf80 [ 2221.715607][T27367] ? clear_bhb_loop+0x40/0x90 [ 2221.715637][T27367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2221.715661][T27367] RIP: 0033:0x7f57ccb9c819 [ 2221.715692][T27367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2221.715716][T27367] RSP: 002b:00007f57cda76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2221.715740][T27367] RAX: ffffffffffffffda RBX: 00007f57cce15fa0 RCX: 00007f57ccb9c819 [ 2221.715757][T27367] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 2221.715772][T27367] RBP: 00007f57ccc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2221.715787][T27367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2221.715801][T27367] R13: 00007f57cce16038 R14: 00007f57cce15fa0 R15: 00007ffecfc54348 [ 2221.715836][T27367] [ 2221.942690][ T29] audit: type=1400 audit(1776125290.787:1674): avc: denied { setopt } for pid=27369 comm="syz.6.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2222.273385][ T5914] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2222.412761][T27397] input: syz0 as /devices/virtual/input/input80 [ 2222.467295][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.498273][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2222.508016][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2222.542430][ T977] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2222.546004][ T5914] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 2222.574060][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.606680][ T5914] usb 7-1: config 0 descriptor?? [ 2222.856027][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2222.865461][ T977] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2222.875244][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.884239][ T977] usb 1-1: Product: syz [ 2222.888938][ T977] usb 1-1: Manufacturer: syz [ 2222.893636][ T977] usb 1-1: SerialNumber: syz [ 2222.963328][T27407] overlayfs: failed to resolve './file0': -2 [ 2223.063477][ T977] usb 1-1: config 0 descriptor?? [ 2223.354024][ T977] gspca_main: se401-2.14.0 probing 047d:5003 [ 2223.355536][ T5914] lg-g15 0003:046D:C22D.000F: item fetching failed at offset 8/41 [ 2223.379939][ T5914] lg-g15 0003:046D:C22D.000F: probe with driver lg-g15 failed with error -22 [ 2223.420205][ T5914] usb 7-1: USB disconnect, device number 40 [ 2223.673173][ T977] gspca_se401: ExtraFeatures: 48 [ 2223.678589][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.701265][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.707282][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.723306][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.729313][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.748863][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.754887][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.777238][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.784737][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.809632][ T977] gspca_se401: Frame size: 0x0 1/16th janggu [ 2223.890542][ T977] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input81 [ 2223.929465][ T977] usb 1-1: USB disconnect, device number 80 [ 2224.321296][T27430] bridge0: left promiscuous mode [ 2224.407569][T27430] bond1: left promiscuous mode [ 2224.412420][T27430] dummy0: left promiscuous mode [ 2224.557148][T27430] lo speed is unknown, defaulting to 1000 [ 2225.458265][ T29] audit: type=1400 audit(1776125294.035:1675): avc: denied { write } for pid=27435 comm="syz.6.4976" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2225.787937][T27445] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 2226.176861][T10460] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2226.357401][T10460] usb 1-1: Using ep0 maxpacket: 8 [ 2226.372157][T10460] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.399835][T10460] usb 1-1: config 0 has no interfaces? [ 2226.412529][T10460] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 2226.431417][T10460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.442550][T10460] usb 1-1: Product: syz [ 2226.447782][T10460] usb 1-1: Manufacturer: syz [ 2226.452441][T10460] usb 1-1: SerialNumber: syz [ 2226.466650][T10460] usb 1-1: config 0 descriptor?? [ 2226.624945][ T5914] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2226.860224][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 2226.899848][T27048] usb 1-1: USB disconnect, device number 81 [ 2226.926686][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2226.972738][ T5914] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 2226.983703][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.067771][ T5914] usb 6-1: config 0 descriptor?? [ 2227.567087][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.711368][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.732942][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.740462][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.759915][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.771123][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.779657][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.809134][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.820120][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.841250][ T5914] holtek_mouse 0003:04D9:A04A.0010: unknown main item tag 0x0 [ 2227.857061][ T5914] holtek_mouse 0003:04D9:A04A.0010: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.5-1/input0 [ 2228.028611][ T5914] usb 6-1: USB disconnect, device number 52 [ 2228.348137][T27485] fido_id[27485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2228.611029][T27498] overlayfs: failed to resolve './file0': -2 [ 2229.738646][ T977] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2229.914230][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 2229.926919][ T977] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2229.936635][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.950799][ T977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2229.958017][ T977] pvrusb2: ********** [ 2229.962006][ T977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2229.973001][ T977] pvrusb2: Important functionality might not be entirely working. [ 2230.422415][ T977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2230.433956][ T977] pvrusb2: ********** [ 2230.442417][ T2341] pvrusb2: Invalid write control endpoint [ 2230.568974][ T2341] pvrusb2: Invalid write control endpoint [ 2230.578816][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2230.596055][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2230.603761][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2230.625819][T27528] overlayfs: failed to clone lowerpath [ 2230.637057][ T2341] pvrusb2: Device being rendered inoperable [ 2230.649913][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2230.665608][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2230.875642][ T2341] pvrusb2: Attached sub-driver cx25840 [ 2230.876425][ T5914] usb 1-1: USB disconnect, device number 82 [ 2230.889883][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2230.972622][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2232.083051][ T29] audit: type=1400 audit(1776125300.143:1676): avc: denied { mount } for pid=27553 comm="syz.5.5018" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2232.761201][ T29] audit: type=1400 audit(1776125300.761:1677): avc: denied { unmount } for pid=12589 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2233.325861][T27577] sp0: Synchronizing with TNC [ 2233.329910][T27579] sp1: Synchronizing with TNC [ 2233.347971][T27579] sp1: Found TNC [ 2234.732096][T27048] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2235.819481][T27048] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 2235.828977][T27048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.848486][T27048] usb 1-1: config 0 descriptor?? [ 2235.886043][T27048] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 2236.689004][T27597] input: syz0 as /devices/virtual/input/input82 [ 2237.022513][T27615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5040'. [ 2237.259420][T10460] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2237.327213][T27048] gspca_stv06xx: I2C: Read error writing address: -71 [ 2237.342317][T27048] usb 1-1: USB disconnect, device number 83 [ 2237.423274][T10460] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2237.432440][T10460] usb 6-1: string descriptor 0 read error: -22 [ 2237.438781][T10460] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 2237.448142][T10460] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.684967][ T29] audit: type=1400 audit(1776125305.310:1678): avc: denied { mount } for pid=27634 comm="syz.7.5048" name="/" dev="hugetlbfs" ino=95814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2237.716073][ T29] audit: type=1400 audit(1776125305.328:1679): avc: denied { create } for pid=27634 comm="syz.7.5048" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 2238.258913][T10460] hid_parser_main: 222 callbacks suppressed [ 2238.259010][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.364609][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.383345][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.402632][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.438061][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.446050][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.459243][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.477938][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.497664][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.526768][T10460] glorious 0003:258A:0033.0011: unknown main item tag 0x0 [ 2238.538883][T10460] glorious 0003:258A:0033.0011: unexpected long global item [ 2238.547330][T10460] glorious 0003:258A:0033.0011: probe with driver glorious failed with error -22 [ 2238.567056][T10460] usb 6-1: USB disconnect, device number 53 [ 2239.468939][T27667] [ 2239.471303][T27667] ====================================================== [ 2239.478317][T27667] WARNING: possible circular locking dependency detected [ 2239.485335][T27667] syzkaller #0 Tainted: G L [ 2239.491312][T27667] ------------------------------------------------------ [ 2239.498376][T27667] syz.5.5060/27667 is trying to acquire lock: [ 2239.504444][T27667] ffff888049b70b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 2239.512908][T27667] [ 2239.512908][T27667] but task is already holding lock: [ 2239.520269][T27667] ffff888025e43068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 2239.528565][T27667] [ 2239.528565][T27667] which lock already depends on the new lock. [ 2239.528565][T27667] [ 2239.538966][T27667] [ 2239.538966][T27667] the existing dependency chain (in reverse order) is: [ 2239.547976][T27667] [ 2239.547976][T27667] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 2239.555378][T27667] __mutex_lock+0x1a2/0x1b90 [ 2239.560507][T27667] anon_pipe_write+0x163/0x1d40 [ 2239.565977][T27667] __kernel_write_iter+0x6b2/0x920 [ 2239.571623][T27667] __kernel_write+0xf6/0x140 [ 2239.576747][T27667] autofs_notify_daemon+0x50d/0xd90 [ 2239.582479][T27667] autofs_wait+0x10fd/0x1b50 [ 2239.587594][T27667] autofs_mount_wait+0x132/0x3b0 [ 2239.593066][T27667] autofs_d_automount+0x490/0x950 [ 2239.598642][T27667] __traverse_mounts+0x1b9/0x8a0 [ 2239.604102][T27667] step_into_slowpath+0xb7e/0xf90 [ 2239.609656][T27667] path_lookupat+0x58b/0xc40 [ 2239.614770][T27667] filename_lookup+0x202/0x590 [ 2239.620060][T27667] vfs_statx+0xff/0x3f0 [ 2239.624728][T27667] __do_sys_newlstat+0xaa/0x130 [ 2239.630097][T27667] do_syscall_64+0x106/0xf80 [ 2239.635203][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.641608][T27667] [ 2239.641608][T27667] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2239.649341][T27667] __mutex_lock+0x1a2/0x1b90 [ 2239.654451][T27667] autofs_notify_daemon+0x4f8/0xd90 [ 2239.660159][T27667] autofs_wait+0x10fd/0x1b50 [ 2239.665255][T27667] autofs_mount_wait+0x132/0x3b0 [ 2239.670711][T27667] autofs_d_automount+0x490/0x950 [ 2239.676254][T27667] __traverse_mounts+0x1b9/0x8a0 [ 2239.681704][T27667] step_into_slowpath+0xb7e/0xf90 [ 2239.687248][T27667] path_lookupat+0x58b/0xc40 [ 2239.692356][T27667] filename_lookup+0x202/0x590 [ 2239.697627][T27667] kern_path+0x37/0x50 [ 2239.702200][T27667] lookup_bdev+0xd8/0x280 [ 2239.707038][T27667] resume_store+0x1d6/0x460 [ 2239.712054][T27667] kobj_attr_store+0x58/0x80 [ 2239.717154][T27667] sysfs_kf_write+0xf2/0x150 [ 2239.722261][T27667] kernfs_fop_write_iter+0x3e0/0x5f0 [ 2239.728059][T27667] aio_write+0x3ba/0x920 [ 2239.732811][T27667] io_submit_one+0x1142/0x1fb0 [ 2239.738086][T27667] __x64_sys_io_submit+0x1b1/0x3a0 [ 2239.743712][T27667] do_syscall_64+0x106/0xf80 [ 2239.748816][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.755218][T27667] [ 2239.755218][T27667] -> #1 (&of->mutex){+.+.}-{4:4}: [ 2239.762417][T27667] __mutex_lock+0x1a2/0x1b90 [ 2239.767515][T27667] kernfs_seq_start+0x4f/0x2a0 [ 2239.772792][T27667] seq_read_iter+0x2c1/0x1270 [ 2239.777978][T27667] kernfs_fop_read_iter+0x46c/0x610 [ 2239.783692][T27667] do_iter_readv_writev+0x60d/0x920 [ 2239.789407][T27667] vfs_readv+0x4d3/0x8d0 [ 2239.794165][T27667] do_readv+0x13e/0x340 [ 2239.798837][T27667] do_syscall_64+0x106/0xf80 [ 2239.803936][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.810339][T27667] [ 2239.810339][T27667] -> #0 (&p->lock){+.+.}-{4:4}: [ 2239.817367][T27667] __lock_acquire+0x14b8/0x2630 [ 2239.822728][T27667] lock_acquire+0x1cf/0x380 [ 2239.827743][T27667] __mutex_lock+0x1a2/0x1b90 [ 2239.832848][T27667] seq_read_iter+0xe1/0x1270 [ 2239.837943][T27667] kernfs_fop_read_iter+0x46c/0x610 [ 2239.843660][T27667] copy_splice_read+0x4ba/0xb90 [ 2239.849021][T27667] do_splice_read+0x285/0x370 [ 2239.854206][T27667] splice_file_to_pipe+0x82/0x120 [ 2239.859743][T27667] do_sendfile+0x366/0xe20 [ 2239.864684][T27667] __x64_sys_sendfile64+0x1d8/0x220 [ 2239.870396][T27667] do_syscall_64+0x106/0xf80 [ 2239.875500][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.881902][T27667] [ 2239.881902][T27667] other info that might help us debug this: [ 2239.881902][T27667] [ 2239.892108][T27667] Chain exists of: [ 2239.892108][T27667] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 2239.892108][T27667] [ 2239.904352][T27667] Possible unsafe locking scenario: [ 2239.904352][T27667] [ 2239.911785][T27667] CPU0 CPU1 [ 2239.917127][T27667] ---- ---- [ 2239.922469][T27667] lock(&pipe->mutex); [ 2239.926610][T27667] lock(&sbi->pipe_mutex); [ 2239.933621][T27667] lock(&pipe->mutex); [ 2239.940278][T27667] lock(&p->lock); [ 2239.944069][T27667] [ 2239.944069][T27667] *** DEADLOCK *** [ 2239.944069][T27667] [ 2239.952189][T27667] 1 lock held by syz.5.5060/27667: [ 2239.957278][T27667] #0: ffff888025e43068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 2239.965981][T27667] [ 2239.965981][T27667] stack backtrace: [ 2239.971862][T27667] CPU: 1 UID: 0 PID: 27667 Comm: syz.5.5060 Tainted: G L syzkaller #0 PREEMPT(full) [ 2239.971895][T27667] Tainted: [L]=SOFTLOCKUP [ 2239.971903][T27667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2239.971916][T27667] Call Trace: [ 2239.971923][T27667] [ 2239.971931][T27667] dump_stack_lvl+0x100/0x190 [ 2239.971968][T27667] print_circular_bug.cold+0x178/0x1c7 [ 2239.972003][T27667] check_noncircular+0x146/0x160 [ 2239.972040][T27667] __lock_acquire+0x14b8/0x2630 [ 2239.972067][T27667] lock_acquire+0x1cf/0x380 [ 2239.972087][T27667] ? seq_read_iter+0xe1/0x1270 [ 2239.972109][T27667] ? __pfx___might_resched+0x10/0x10 [ 2239.972138][T27667] __mutex_lock+0x1a2/0x1b90 [ 2239.972161][T27667] ? seq_read_iter+0xe1/0x1270 [ 2239.972181][T27667] ? __kmalloc_noprof+0x301/0x850 [ 2239.972213][T27667] ? do_splice_read+0x285/0x370 [ 2239.972237][T27667] ? seq_read_iter+0xe1/0x1270 [ 2239.972260][T27667] ? __pfx___mutex_lock+0x10/0x10 [ 2239.972289][T27667] ? alloc_pages_bulk_noprof+0x811/0x1490 [ 2239.972324][T27667] ? seq_read_iter+0xe1/0x1270 [ 2239.972344][T27667] seq_read_iter+0xe1/0x1270 [ 2239.972365][T27667] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2239.972401][T27667] kernfs_fop_read_iter+0x46c/0x610 [ 2239.972435][T27667] copy_splice_read+0x4ba/0xb90 [ 2239.972462][T27667] ? __pfx_copy_splice_read+0x10/0x10 [ 2239.972492][T27667] ? __fget_files+0x215/0x3d0 [ 2239.972517][T27667] ? __pfx_copy_splice_read+0x10/0x10 [ 2239.972541][T27667] do_splice_read+0x285/0x370 [ 2239.972567][T27667] splice_file_to_pipe+0x82/0x120 [ 2239.972594][T27667] do_sendfile+0x366/0xe20 [ 2239.972629][T27667] ? __pfx_do_sendfile+0x10/0x10 [ 2239.972663][T27667] ? __x64_sys_futex+0x34f/0x4d0 [ 2239.972686][T27667] ? __x64_sys_futex+0x358/0x4d0 [ 2239.972709][T27667] __x64_sys_sendfile64+0x1d8/0x220 [ 2239.972735][T27667] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2239.972770][T27667] do_syscall_64+0x106/0xf80 [ 2239.972791][T27667] ? clear_bhb_loop+0x40/0x90 [ 2239.972816][T27667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.972839][T27667] RIP: 0033:0x7f57ccb9c819 [ 2239.972856][T27667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2239.972878][T27667] RSP: 002b:00007f57cda76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2239.972898][T27667] RAX: ffffffffffffffda RBX: 00007f57cce15fa0 RCX: 00007f57ccb9c819 [ 2239.972914][T27667] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 2239.972927][T27667] RBP: 00007f57ccc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2239.972941][T27667] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 2239.972954][T27667] R13: 00007f57cce16038 R14: 00007f57cce15fa0 R15: 00007ffecfc54348 [ 2239.972977][T27667] [ 2240.330860][ T29] audit: type=1400 audit(1776125307.746:1680): avc: denied { write } for pid=5790 comm="syz-executor" path="pipe:[5368]" dev="pipefs" ino=5368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to send rpc fd=3 want=55984 sent=0 n=-1 (errno 32: Broken pipe) [ 2240.525742][T27681] overlayfs: failed to resolve './file0': -2 [ 2241.085907][T25557] bond0: (slave syz_tun): Releasing backup interface [ 2241.173682][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.261227][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.368649][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.452401][T20696] bridge0: port 3(syz_tun) entered disabled state [ 2241.477431][T20696] syz_tun (unregistering): left allmulticast mode [ 2241.483877][T20696] syz_tun (unregistering): left promiscuous mode [ 2241.490933][T20696] bridge0: port 3(syz_tun) entered disabled state [ 2241.535083][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2241.668582][ T48] bridge_slave_1: left allmulticast mode [ 2241.677049][ T48] bridge_slave_1: left promiscuous mode [ 2241.682996][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.692761][ T48] bridge_slave_0: left allmulticast mode [ 2241.698410][ T48] bridge_slave_0: left promiscuous mode [ 2241.704187][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.836131][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2241.845911][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2241.856024][ T48] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2241.864487][ T48] bond0 (unregistering): Released all slaves [ 2241.872470][ T48] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 2241.881484][ T48] dummy0: left allmulticast mode [ 2241.887133][ T48] bond1 (unregistering): Released all slaves [ 2241.895579][ T48] bond2 (unregistering): Released all slaves [ 2241.935993][ T29] audit: type=1400 audit(1776125309.231:1681): avc: denied { read open } for pid=27687 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2241.971879][ T29] audit: type=1400 audit(1776125309.231:1682): avc: denied { getattr } for pid=27687 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.086963][ T29] audit: type=1400 audit(1776125309.370:1683): avc: denied { add_name } for pid=27686 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.110696][ T29] audit: type=1400 audit(1776125309.370:1684): avc: denied { create } for pid=27686 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.139348][ T29] audit: type=1400 audit(1776125309.370:1685): avc: denied { write } for pid=27686 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth14.link" dev="tmpfs" ino=15814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.166822][ T29] audit: type=1400 audit(1776125309.370:1686): avc: denied { append } for pid=27686 comm="dhcpcd-run-hook" name="resolv.conf.eth14.link" dev="tmpfs" ino=15814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2242.201192][ T29] audit: type=1400 audit(1776125309.471:1687): avc: denied { remove_name } for pid=27697 comm="rm" name="resolv.conf.eth14.link" dev="tmpfs" ino=15814 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2242.429550][ T48] hsr_slave_0: left promiscuous mode [ 2242.435819][ T48] hsr_slave_1: left promiscuous mode [ 2242.441638][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2242.449013][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2242.460301][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2242.468091][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2242.478424][ T48] batman_adv: batadv0: Interface deactivated: vlan1 [ 2242.485109][ T48] batman_adv: batadv0: Removing interface: vlan1 [ 2242.492642][ T48] veth1_macvtap: left promiscuous mode [ 2242.498267][ T48] veth0_macvtap: left promiscuous mode [ 2242.503775][ T48] veth1_vlan: left promiscuous mode [ 2242.509028][ T48] veth0_vlan: left promiscuous mode [ 2242.597091][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2242.607410][ T48] team0 (unregistering): Port device team_slave_0 removed