last executing test programs: 22.757589259s ago: executing program 0 (id=1359): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x0, 0xfffd, 0x4, 0xfffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1702000070000000000063a1f4eb000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000019300)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 21.998956041s ago: executing program 0 (id=1362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r6) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000040)={0x18, r8}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, r7, 'id0\x00'}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r11, @ANYBLOB="200029bd7000fedbdf25120000002c000980080001000000000008000200f9ffffff080001000e00000008000200050000000800020000000000f80004802c00078008000400000000000800020001000080080001001e000000080002000100000008000400030000001300010062726f6164636173742d6c696e6b00003c000780080001000c000000080002009e9700000800040008000000080002009d08000008000300e9040000080001001f000000080001000e0000001300010062726f6164636173742d6c696e6b00000900010073797a30000000000900010073797a30000000002400078008000200ba4600000800030003000000080001000100000008000400800000000900010073797a31000000001c00078008000200060000000800040009000000080004000b0000004400098008000100ffffff7f08000100030000000800010010000000080001000500000008000200040000000800020002000000080001008000000008000100009000002c0007800c000400fbffffffffffffff080001000700000008000100050000000c00030006000000000000009c0004800900010073797a310000000034000780080002000000010008000400f1000000080004000b0000000800030002000000080001001d000000080001001100000014000780080001000e000000080004000900000044000780080001000600000008000100120000000800040000100000080001000a000000080004000c000000080001001f000000080001000900000008000300fba9000014000380080002000300000008000300010000001c00098008000100cf090000080001000300000008000200060000003c00038008000200ff030000080003000300000008000100ca0a0000080002000180000008000100000400000800010071fe000008000100000000002400038008000100ff030000080002000a00000008000100"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r5, r8, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"}) 20.26511668s ago: executing program 0 (id=1364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000000280000002800000004000000020000000100000f010000000300000002000000004b865800040000000000000f03000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYRES32=r7, @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 13.838288992s ago: executing program 0 (id=1375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x0) msgsnd(r2, 0x0, 0x8, 0x800) msgrcv(r2, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x40080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xe, 0xffe0}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x44000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 11.60309036s ago: executing program 4 (id=1379): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x18) fanotify_mark(r4, 0x101, 0x1051, r5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.483871587s ago: executing program 2 (id=1380): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x2b, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r3, 0x24020000) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a23000/0x4000)=nil, 0x4000}}) 11.438819311s ago: executing program 3 (id=1381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000000280000002800000004000000020000000100000f010000000300000002000000004b865800040000000000000f03000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYRES32=r7, @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 10.232984466s ago: executing program 1 (id=1382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000000280000002800000004000000020000000100000f010000000300000002000000004b865800040000000000000f03000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYRES32=r7, @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 10.062814143s ago: executing program 3 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0xfffffffffffffdf4}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x40858}, 0x0) 8.6896327s ago: executing program 1 (id=1384): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="a75618c9357220ae979e5e4e", 0xc}, {&(0x7f00000003c0)="b0665a739b", 0x5}], 0x2, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(0x0, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000080)='=', 0x1}]) 8.136082274s ago: executing program 1 (id=1385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000000280000002800000004000000020000000100000f010000000300000002000000004b865800040000000000000f03000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYRES32=r7, @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 8.05993067s ago: executing program 0 (id=1386): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x8000, 0x101, 0x3ff, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xbb65, 0x9, 0x100, 0x9, 0x6}, &(0x7f00000001c0)=0x98) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x5, 0x8, 0x80}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x1010, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x8000, &(0x7f0000000300)=0x9, 0xb4c5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x84, 0x101020, 0x4, 0xfffffefe, 0x3, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, 0x0, 0x0) 6.960716558s ago: executing program 3 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04a2f7"], 0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) r8 = dup(r5) r9 = inotify_init() fcntl$setstatus(r9, 0x4, 0x42800) fsopen(0x0, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@ignoreqv}, {@privport}, {@access_uid}, {@loose}, {@access_user}, {@privport}, {@version_L}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x1}}, {@afid={'afid', 0x3d, 0x8}}]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x3) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000600)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x24}, @broadcast, @device_b, @initial, {0x8, 0x6}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x48, 0x5, @broadcast, {0x0, 0xd, @random="f682811c6e60dfe009843781c5"}, @val={0x1, 0x2, [{0x3, 0x1}, {0x18}]}, @void, [{0xdd, 0xa4, "ab259e69e27a6e35cf4810a32e5e1bb631c48d5e671f1b5966a4dd0f165677567b6f31c6e5cb7c3c25f27dd68d1c35b9dee1d965a68c186a09f08a71df69ccde6ba4218f137d1f5f86929d37e21543467969aef4d334de111209fe41b7a0f295d360989307c25bfb0b8922ff64855232472557e85d3c199ab62df85d658f38cae48013b9807b47e47a4ebfb8f36bd8cb3a9de537b6e21a967a4f83b8dda17b8b20f40a36"}]}, 0xdf) 6.838402338s ago: executing program 1 (id=1388): r0 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r3, 0x5601, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/240, 0xf0}], 0x1, 0x0, 0xb}, 0x2}, {{0x0, 0x0, &(0x7f0000000840), 0x5, &(0x7f0000000900)=""/249, 0xf9}, 0x4}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)=""/191, 0xb2}, {&(0x7f0000000b00)=""/226, 0xe2}], 0x2, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x80}], 0x3, 0x20, 0x0) 5.964974289s ago: executing program 4 (id=1389): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000a0a0102000000000000000000000007b362d4d4d329d6a2f27d9aba2523abe174eabeedc2cdd43bfb7fd31306deb07eaed58524d1953356a9d441d730d4d209705e22"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) close(r1) socket$kcm(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0) 5.324836691s ago: executing program 3 (id=1390): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8932, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = openat$binfmt_format(0xffffff9c, &(0x7f0000000500)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r9, 0x0, 0x0) 5.129709879s ago: executing program 2 (id=1391): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, r2, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000080)='|w') shmctl$IPC_RMID(r1, 0x0) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x18) 4.660847s ago: executing program 4 (id=1392): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x169780, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000001700)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r3, 0x0, 0xb01f, 0x5601}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$COMEDI_BUFINFO(r2, 0xc02c640e, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f000004ca80)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, 0x0, 0x844) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x800) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) r6 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, 0x0, 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {}, {}, 0x84, 0x2, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20, 0x4, 0x2], 0xfd}, {0xffffffffffffffff, [0x2, 0xb2cc575b459b5b33, 0x4, 0x2, 0x0, 0x5], 0x6, 0x3}}}}, {{@ip={@broadcast, @local, 0xff, 0xffffffff, 'caif0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x8}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7a4352fec0204915696b280d59f148feae776f7450464e03c7b9398e67bc"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 4.0808646s ago: executing program 3 (id=1393): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0xffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x60, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, @address_reply={0x12, 0x0, 0x0, 0xde}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) 3.918505229s ago: executing program 4 (id=1394): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000100)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x13, r10, 0x0) 3.824202904s ago: executing program 2 (id=1395): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x0, 0xfffd, 0x4, 0xfffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1702000070000000000063a1f4eb000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x68, &(0x7f0000000200)}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000019300)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) 2.755450872s ago: executing program 0 (id=1396): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="64f30fc7f80f01d10f00d53e32fa01df650f4021baa100ecba4200ec65f46766c7442400a60000006766c744240200b046576766c744240600000000670f011424", 0x41}], 0x1, 0x29, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x800002, 0x6a, 0x5, 0xffffffff, 0x7, 0x1, 0x5, 0x428, 0x2, 0xfffffffffffffffb, 0xf423f, 0x0, 0x7, 0x4, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80010001, 0x0, 0x5, 0xfffffffffffffff8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000036000701fcffffff000081ae011ef1d708a11b00017c00000c001e8006000600800a0000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.700388781s ago: executing program 4 (id=1397): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xc}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) 2.635040938s ago: executing program 2 (id=1398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb02001800000000000000280000002800000004000000020000000100000f010000000300000002000000004b865800040000000000000f03000000e0ea94005f5f00"], 0x0, 0x44, 0x0, 0x1}, 0x28) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0xffffffffffffffff, 0x933, 0x6, 0xfffffff7, 0x1, 0x0, [{0xfc, 0x4e3, 0x8}]}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01f200100000000000000800030000000000", @ANYRES32=r7, @ANYBLOB="10005a800c00038005000400ec000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) 1.279927502s ago: executing program 2 (id=1399): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4000000000002, 0x2001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x10, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000003380)=0xff0000) 1.244944009s ago: executing program 1 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000001120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006400000000305000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x2004c8a0}, 0x40844) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x200c}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x2, 0x0, 0x20008000}, 0x10) 1.146647947s ago: executing program 1 (id=1401): syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0x1, &(0x7f0000000340)="ab008aab2ef7914b2f1d0d0c4df8977a62bedf0293f5f2237d078794b49c9fea62cb4bfce02ba0772b570862893289dac2dcc091db605a0018001eee9fdaa95a492a0a1789deb63b5aaf30e3f26e2c0692ee303e89ecbc36368d8bf0ff1b354c77b2863c7443013471c923a8271a54621a30f2acd37056639b012b7e331e859021f52c6ef1e91b72d397ab24c0769b9db1d3c54e629704b065448cc9230e713a96244a2abb3960b8d716ef6d302f3cf26fadf5a4c36e", &(0x7f0000000400)=""/60}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xac}}, 0x40004) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r7, 0x800448d5, &(0x7f0000000400)) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) 1.121071881s ago: executing program 4 (id=1402): syz_open_dev$loop(0x0, 0x7fffffff, 0x42a182) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x2f) sendto$inet6(r3, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(r3, 0x1) connect$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r7, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 606.029µs ago: executing program 3 (id=1403): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000a0a0102000000000000000000000007b362d4d4d329d6a2f27d9aba2523abe174eabeedc2cdd43bfb7fd31306deb07eaed58524d1953356a9d441d730d4d209705e22"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) close(r1) socket$kcm(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0) 0s ago: executing program 2 (id=1404): r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000440)={0x2, 0x1, 0xc030, 0x5d5, 0x5, 0xee9, 0x6000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x98, 0x1d0, 0x0, 0x98, 0x138, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x310}}, {{@ip={@empty, @local, 0xffffff00, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x5e, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x88, 0x1, 0x19}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x2}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3, 0x1b}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x33, 0x0, 0x15}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3}, {0xffffffffffffffff, 0x5, 0x1}, {0x0, 0x1, 0x3}, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x24000080) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000005380), 0x0, 0x4090) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000480)={0x1, 0x4, 0xfffffff9, 0x10000, 0x0}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000006c0)={r7, @in={{0x2, 0x4e20, @local}}, 0x7, 0x7, 0x7fffffff, 0x9, 0xa1, 0x3, 0x5}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4004040) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c0001}, 0x20000000) kernel console output (not intermixed with test programs): : denied { name_bind } for pid=9920 comm="syz.0.811" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 467.597516][ T9927] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 467.619377][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.634397][ T9927] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 467.698431][ T9927] loop5: detected capacity change from 0 to 7 [ 467.752366][ T9928] netlink: 'syz.1.813': attribute type 10 has an invalid length. [ 467.760977][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.813'. [ 467.770632][ T9928] batadv0: entered promiscuous mode [ 467.775870][ T9928] batadv0: entered allmulticast mode [ 467.790710][ T9928] bond0: (slave batadv0): Releasing backup interface [ 467.808040][ T9928] bridge0: port 4(batadv0) entered blocking state [ 467.815410][ T9928] bridge0: port 4(batadv0) entered disabled state [ 467.923173][ T9927] Dev loop5: unable to read RDB block 7 [ 467.929451][ T9927] loop5: AHDI p1 [ 467.933278][ T9927] loop5: partition table partially beyond EOD, truncated [ 468.119057][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 468.128314][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 469.597865][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 469.819982][ T9943] sp0: Synchronizing with TNC [ 470.423066][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.816'. [ 470.708700][ T9942] [U] è [ 472.239835][ T29] audit: type=1400 audit(1776007545.093:535): avc: denied { setopt } for pid=9966 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 472.877489][ T29] audit: type=1400 audit(1776007545.803:536): avc: denied { map } for pid=9975 comm="syz.3.823" path="socket:[24742]" dev="sockfs" ino=24742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.945748][ T29] audit: type=1400 audit(1776007545.803:537): avc: denied { read } for pid=9975 comm="syz.3.823" path="socket:[24742]" dev="sockfs" ino=24742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.474056][ T9986] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 473.981554][ T9987] dvmrp1: entered allmulticast mode [ 474.028876][ T29] audit: type=1400 audit(1776007547.193:538): avc: denied { mount } for pid=9981 comm="syz.0.824" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 474.149925][ T1205] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 474.589707][ T1205] usb 3-1: config 0 has no interfaces? [ 474.595327][ T1205] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 474.677252][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.694415][ T1205] usb 3-1: config 0 descriptor?? [ 475.451002][ T29] audit: type=1326 audit(1776007548.773:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10001 comm="syz.4.829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x0 [ 475.459161][ T9981] dvmrp1: left allmulticast mode [ 475.538560][ T9992] overlayfs: workdir and upperdir must reside under the same mount [ 475.716845][ T7337] IPVS: starting estimator thread 0... [ 475.809760][T10013] SET target dimension over the limit! [ 475.839665][T10010] IPVS: using max 48 ests per chain, 115200 per kthread [ 475.882059][ T7337] usb 3-1: USB disconnect, device number 11 [ 476.804253][T10027] lo speed is unknown, defaulting to 1000 [ 477.634158][T10044] syz.3.834 (10044): drop_caches: 2 [ 480.510648][ T29] audit: type=1400 audit(1776007553.513:540): avc: denied { read write } for pid=10067 comm="syz.3.839" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 480.614601][ T29] audit: type=1400 audit(1776007553.513:541): avc: denied { open } for pid=10067 comm="syz.3.839" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 481.219760][ T29] audit: type=1400 audit(1776007554.173:542): avc: denied { connect } for pid=10088 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 481.275279][ T29] audit: type=1400 audit(1776007554.243:543): avc: denied { bind } for pid=10088 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 481.314602][ T29] audit: type=1400 audit(1776007554.243:544): avc: denied { listen } for pid=10088 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 481.410487][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.838'. [ 481.448808][ T29] audit: type=1400 audit(1776007554.243:545): avc: denied { accept } for pid=10088 comm="syz.2.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 481.890841][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 482.913614][T10120] sp0: Synchronizing with TNC [ 483.373031][T10127] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 483.734786][T10117] [U] è [ 484.446529][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.848'. [ 484.549994][ T29] audit: type=1326 audit(1776007557.863:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2befb9c819 code=0x7ffc0000 [ 484.574730][ T29] audit: type=1326 audit(1776007557.863:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2befb9c819 code=0x7ffc0000 [ 484.620998][ T29] audit: type=1326 audit(1776007557.923:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2befb9c819 code=0x7ffc0000 [ 484.717623][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.742739][ T29] audit: type=1326 audit(1776007557.923:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10118 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2befb9c819 code=0x7ffc0000 [ 484.769788][ T7337] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 484.828158][T10137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.051151][ T7337] usb 1-1: Using ep0 maxpacket: 32 [ 485.069564][ T7337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.105886][ T7337] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 485.468442][ T7337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.506334][ T7337] usb 1-1: Product: syz [ 485.540317][ T7337] usb 1-1: Manufacturer: syz [ 485.544925][ T7337] usb 1-1: SerialNumber: syz [ 485.672567][ T7337] usb 1-1: config 0 descriptor?? [ 485.700785][ T7337] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 485.739056][ T7337] smsc75xx 1-1:0.0: probe with driver smsc75xx failed with error -22 [ 485.844047][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 486.205939][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 486.205955][ T29] audit: type=1400 audit(1776007559.493:570): avc: denied { bind } for pid=10154 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 486.248632][ T29] audit: type=1400 audit(1776007559.493:571): avc: denied { setopt } for pid=10154 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 486.251224][T10169] lo speed is unknown, defaulting to 1000 [ 487.008319][ T10] usb 1-1: USB disconnect, device number 16 [ 487.080463][T10185] sp0: Synchronizing with TNC [ 487.739319][T10198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.856'. [ 488.425099][T10184] [U] è [ 489.209661][T10227] sp0: Synchronizing with TNC [ 489.346070][T10230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.862'. [ 489.426576][T10220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 490.000970][T10243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.008282][T10243] IPv6: NLM_F_CREATE should be set when creating new route [ 490.015645][T10243] IPv6: NLM_F_CREATE should be set when creating new route [ 490.022937][T10243] IPv6: NLM_F_CREATE should be set when creating new route [ 490.189247][T10226] [U] è [ 491.587626][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.866'. [ 491.655973][ T29] audit: type=1400 audit(1776007564.903:572): avc: denied { name_bind } for pid=10262 comm="syz.4.866" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 492.139083][T10274] IPVS: stopping backup sync thread 8029 ... [ 494.499765][ T29] audit: type=1400 audit(1776007567.803:573): avc: denied { shutdown } for pid=10294 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.580488][T10299] ceph: No mds server is up or the cluster is laggy [ 494.597383][T10284] xt_hashlimit: size too large, truncated to 1048576 [ 494.872124][T10317] sp0: Synchronizing with TNC [ 495.014429][T10322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.875'. [ 495.542074][T10315] [U] è [ 495.939627][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.946095][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.200035][ T29] audit: type=1326 audit(1776007569.523:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 496.374674][ T29] audit: type=1326 audit(1776007569.543:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 496.398269][T10309] Bluetooth: hci0: command 0x0c1a tx timeout [ 496.652903][ T29] audit: type=1326 audit(1776007569.543:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 497.007094][T10349] can0: slcan on ttyS3. [ 498.119524][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 498.303097][ T29] audit: type=1326 audit(1776007569.543:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 498.339383][ T24] usb 4-1: device descriptor read/64, error -71 [ 498.473556][ T29] audit: type=1326 audit(1776007569.543:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 498.595006][ T29] audit: type=1326 audit(1776007569.543:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 498.622126][ T29] audit: type=1326 audit(1776007569.543:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 498.646228][ T29] audit: type=1326 audit(1776007569.553:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 498.739446][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 499.009557][ T24] usb 4-1: device descriptor read/64, error -71 [ 499.128148][T10362] sp0: Synchronizing with TNC [ 499.138133][ T29] audit: type=1326 audit(1776007569.553:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 499.165142][ T29] audit: type=1326 audit(1776007569.553:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 499.257678][ T24] usb usb4-port1: attempt power cycle [ 499.346520][ T29] audit: type=1326 audit(1776007569.553:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 499.698903][T10332] can0 (unregistered): slcan off ttyS3. [ 499.731805][T10361] [U] è [ 499.738975][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 499.797176][ T29] audit: type=1326 audit(1776007569.553:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 499.904833][ T29] audit: type=1326 audit(1776007569.573:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10332 comm="syz.0.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f29a0d9c819 code=0x7ffc0000 [ 499.971519][ T24] usb 4-1: device not accepting address 14, error -71 [ 499.983432][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.885'. [ 501.621509][T10387] sp0: Synchronizing with TNC [ 501.719322][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 501.756602][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 501.783109][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 501.825049][T10390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.886'. [ 501.856754][ T24] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 501.904411][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.947889][ T24] usb 4-1: Product: syz [ 501.981275][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'. [ 501.994787][ T24] usb 4-1: Manufacturer: syz [ 502.004744][ T24] usb 4-1: SerialNumber: syz [ 502.378763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 502.388752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 502.480973][T10400] tipc: Started in network mode [ 502.486006][T10400] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 502.502571][T10400] tipc: Enabled bearer , priority 10 [ 503.620779][T10407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.889'. [ 503.698387][ T10] tipc: Node number set to 1 [ 503.728147][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 504.084282][ T24] usb 4-1: USB disconnect, device number 15 [ 504.567877][T10404] [U] è [ 504.582968][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 504.641199][ T7784] udevd[7784]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.703179][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 508.833642][T10470] overlayfs: workdir and upperdir must be separate subtrees [ 509.352521][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 509.352553][ T29] audit: type=1400 audit(1776007582.103:627): avc: denied { write } for pid=10464 comm="syz.2.899" path="socket:[26700]" dev="sockfs" ino=26700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 509.995099][T10477] sp0: Synchronizing with TNC [ 510.128357][T10482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.902'. [ 510.574352][T10480] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.708591][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.903'. [ 510.776156][T10478] [U] è [ 510.803302][ T29] audit: type=1400 audit(1776007584.123:628): avc: denied { ioctl } for pid=10493 comm="syz.3.904" path="socket:[26737]" dev="sockfs" ino=26737 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 511.096848][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 511.883616][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 511.911699][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.921107][ T10] usb 5-1: Product: syz [ 512.017639][ T10] usb 5-1: Manufacturer: syz [ 512.022869][ T10] usb 5-1: SerialNumber: syz [ 512.044365][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 512.067725][ T5911] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 513.447261][ T29] audit: type=1400 audit(1776007586.733:629): avc: denied { watch } for pid=10513 comm="syz.3.909" path="/180/bus" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 513.499412][ T29] audit: type=1400 audit(1776007586.733:630): avc: denied { watch_sb watch_reads } for pid=10513 comm="syz.3.909" path="/180/bus" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 513.602251][ T5911] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 513.619021][ T5911] ath9k_htc: Failed to initialize the device [ 513.790216][T10528] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 513.809870][ T5911] usb 5-1: ath9k_htc: USB layer deinitialized [ 514.837215][ T1205] usb 5-1: USB disconnect, device number 11 [ 514.876352][T10531] sp0: Synchronizing with TNC [ 515.107277][T10537] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 515.114880][T10537] ALSA: mixer_oss: invalid index 1374389 [ 515.296855][T10537] lo speed is unknown, defaulting to 1000 [ 515.671240][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 515.722909][T10530] [U] è [ 515.859124][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 515.957663][ T5911] usb 4-1: config index 0 descriptor too short (expected 29555, got 27) [ 515.967694][ T5911] usb 4-1: config 109 has too many interfaces: 95, using maximum allowed: 32 [ 515.977255][ T5911] usb 4-1: config 109 has an invalid descriptor of length 114, skipping remainder of the config [ 515.987967][ T5911] usb 4-1: config 109 has 0 interfaces, different from the descriptor's value: 95 [ 516.000480][ T5911] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 516.448794][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.550117][ T5911] usb 4-1: Product: syz [ 516.575122][ T5911] usb 4-1: Manufacturer: syz [ 516.771712][ T5911] usb 4-1: SerialNumber: syz [ 517.829346][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 517.981809][T10561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.989963][ T24] usb 2-1: device descriptor read/64, error -71 [ 518.533227][ T5911] usb 4-1: USB disconnect, device number 16 [ 518.630025][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 519.403589][ T29] audit: type=1400 audit(1776007592.453:631): avc: denied { mount } for pid=10565 comm="syz.3.920" name="/" dev="rpc_pipefs" ino=26528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 519.721312][ T24] usb 2-1: device descriptor read/64, error -71 [ 519.738338][T10569] : entered promiscuous mode [ 519.938974][ T24] usb usb2-port1: attempt power cycle [ 520.500317][T10587] binder: binder_mmap: 10584 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 520.610196][T10593] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 520.808799][ T29] audit: type=1400 audit(1776007593.643:632): avc: denied { ioctl } for pid=10584 comm="syz.0.924" path="socket:[26624]" dev="sockfs" ino=26624 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 521.926460][T10610] 9pnet_virtio: no channels available for device syz [ 523.063490][T10610] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 523.073220][T10610] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 523.083137][T10610] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 523.154987][T10594] sp0: Synchronizing with TNC [ 523.227554][T10594] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 523.584386][T10620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.930'. [ 523.861606][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 523.934913][T10629] trusted_key: encrypted_key: insufficient parameters specified [ 524.134994][T10613] [U] è [ 525.291777][T10641] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.784132][T10650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.937'. [ 526.149707][ T47] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 526.458649][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.470577][ T47] usb 1-1: not running at top speed; connect to a high speed hub [ 526.487862][T10641] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.492085][ T47] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 526.510806][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.519821][ T47] usb 1-1: Product: syz [ 526.523998][ T47] usb 1-1: Manufacturer: syz [ 526.528601][ T47] usb 1-1: SerialNumber: syz [ 526.783342][T10659] ALSA: mixer_oss: invalid OSS volume 'C' [ 526.793705][T10659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.939'. [ 527.108484][T10641] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.187070][T10641] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.329299][ T58] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.565663][ T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.995125][ T142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.014201][ T142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.076968][ T29] audit: type=1326 audit(1776007601.393:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 528.102992][ T29] audit: type=1326 audit(1776007601.393:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 528.161539][ T29] audit: type=1326 audit(1776007601.423:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 528.310641][T10670] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 528.720286][T10674] sp0: Synchronizing with TNC [ 528.745331][ T29] audit: type=1326 audit(1776007601.423:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 528.800243][ T47] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 528.824485][ T29] audit: type=1326 audit(1776007601.423:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 528.865258][T10677] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 529.213289][T10669] [U] è [ 529.226104][ T29] audit: type=1326 audit(1776007601.423:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 529.259635][ T47] usb 1-1: USB disconnect, device number 17 [ 529.331211][ T29] audit: type=1326 audit(1776007601.423:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 529.406272][ T29] audit: type=1326 audit(1776007601.423:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 529.824718][ T29] audit: type=1326 audit(1776007601.423:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10666 comm="syz.4.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 529.848263][ T29] audit: type=1400 audit(1776007601.753:642): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 530.944553][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 530.953455][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 530.965289][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 530.974167][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 531.827647][T10309] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 533.300054][T10719] ceph: No mds server is up or the cluster is laggy [ 533.973139][T10739] sp0: Synchronizing with TNC [ 534.866240][T10738] [U] è [ 535.590412][T10755] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 535.891425][T10755] lo speed is unknown, defaulting to 1000 [ 536.019030][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.4.961'. [ 536.294969][T10769] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 536.328823][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 536.377468][T10769] netlink: 17 bytes leftover after parsing attributes in process `syz.0.964'. [ 536.562799][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 536.576444][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 536.585765][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.594170][ T9] usb 2-1: Product: syz [ 536.598341][ T9] usb 2-1: Manufacturer: syz [ 536.603367][ T9] usb 2-1: SerialNumber: syz [ 537.066327][ T9] usb 2-1: config 0 descriptor?? [ 537.076526][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 537.076537][ T29] audit: type=1400 audit(1776007610.393:660): avc: denied { ioctl } for pid=10778 comm="syz.4.966" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 537.146315][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 537.154566][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 537.154566][ T9] [ 537.170509][ T9] usb 2-1: selecting invalid altsetting 3 [ 537.182964][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 537.182964][ T9] [ 537.233565][T10783] random: crng reseeded on system resumption [ 537.265633][ T29] audit: type=1400 audit(1776007610.553:661): avc: denied { setopt } for pid=10778 comm="syz.4.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 537.286607][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 537.286894][T10773] ceph: No mds server is up or the cluster is laggy [ 537.470207][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 537.799274][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 537.809166][ T9] usb 2-1: media controller created [ 537.956120][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 537.963158][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 538.004148][ T29] audit: type=1400 audit(1776007611.323:662): avc: denied { read } for pid=10758 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.094342][T10789] netlink: 68 bytes leftover after parsing attributes in process `syz.1.963'. [ 538.150014][ T9] dvb-usb: MAC address reading failed. [ 538.156101][T10763] dvb-usb: bulk message failed: -22 (7/0) [ 538.175101][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.183661][T10763] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 538.482931][ T9] DVB: Unable to find symbol stb0899_attach() [ 538.523691][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 538.585885][T10798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.971'. [ 538.670626][ T9] rc_core: IR keymap rc-tt-1500 not found [ 538.676397][ T9] Registered IR keymap rc-empty [ 538.682878][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 538.744081][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 538.806235][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 538.870671][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 538.870671][ T9] [ 538.898409][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 539.030271][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 539.041398][ T5911] dvb-usb: error -22 while querying for an remote control event. [ 539.160295][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 539.318961][ T9] dvb-usb: error -22 while querying for an remote control event. [ 539.448978][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 539.454748][ T9] dvb-usb: error -22 while querying for an remote control event. [ 539.649679][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 539.656650][ T9] dvb-usb: error -22 while querying for an remote control event. [ 539.675844][ T7337] usb 2-1: USB disconnect, device number 14 [ 540.797479][ T7337] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 540.986963][T10820] netlink: 'syz.4.975': attribute type 7 has an invalid length. [ 540.996287][T10820] netlink: 'syz.4.975': attribute type 8 has an invalid length. [ 541.130255][T10822] sp0: Synchronizing with TNC [ 541.609491][T10828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.976'. [ 542.066185][T10821] [U] è [ 542.222627][T10840] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 542.463472][T10840] lo speed is unknown, defaulting to 1000 [ 542.605215][T10842] binder: 10834:10842 ioctl c0306201 0 returned -14 [ 543.393081][ T29] audit: type=1400 audit(1776007616.713:663): avc: denied { read write } for pid=10853 comm="syz.0.982" name="file1" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.432697][ T29] audit: type=1400 audit(1776007616.713:664): avc: denied { open } for pid=10853 comm="syz.0.982" path="/206/file1" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.522682][T10859] netlink: 'syz.0.982': attribute type 7 has an invalid length. [ 543.530620][ T29] audit: type=1400 audit(1776007616.843:665): avc: denied { accept } for pid=10853 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.704275][ T5924] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.712668][ T5924] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.730238][T10861] netlink: 'syz.4.983': attribute type 4 has an invalid length. [ 543.738386][ T5924] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.747145][T10861] netlink: 17 bytes leftover after parsing attributes in process `syz.4.983'. [ 544.035032][ T5924] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.401684][T10880] 9p: Bad value for 'wfdno' [ 545.909536][T10888] siw: device registration error -23 [ 545.947819][ T29] audit: type=1400 audit(1776007619.263:666): avc: denied { getopt } for pid=10885 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 546.798445][T10894] sp0: Synchronizing with TNC [ 546.830319][ T29] audit: type=1400 audit(1776007620.143:667): avc: denied { create } for pid=10895 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 547.077501][ T29] audit: type=1400 audit(1776007620.143:668): avc: denied { connect } for pid=10895 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 547.125482][T10902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 547.300771][ T29] audit: type=1400 audit(1776007620.143:669): avc: denied { write } for pid=10895 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 547.383529][T10893] [U] è [ 547.412770][ T29] audit: type=1400 audit(1776007620.173:670): avc: denied { create } for pid=10895 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 547.446892][ T7337] libceph: connect (1)[c::]:6789 error -101 [ 547.458910][ T7337] libceph: mon0 (1)[c::]:6789 connect error [ 547.466480][ T29] audit: type=1400 audit(1776007620.173:671): avc: denied { create } for pid=10895 comm="syz.3.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 547.487836][ T29] audit: type=1400 audit(1776007620.173:672): avc: denied { prog_load } for pid=10893 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 547.732565][ T7337] libceph: connect (1)[c::]:6789 error -101 [ 548.095591][ T7337] libceph: mon0 (1)[c::]:6789 connect error [ 548.232446][T10909] ceph: No mds server is up or the cluster is laggy [ 548.824225][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 548.824240][ T29] audit: type=1326 audit(1776007622.143:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10924 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 549.018049][ T29] audit: type=1326 audit(1776007622.173:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10924 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 549.438672][T10942] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 549.446237][T10942] ALSA: mixer_oss: invalid index 1374389 [ 549.526634][T10942] lo speed is unknown, defaulting to 1000 [ 549.638051][T10928] ceph: No mds server is up or the cluster is laggy [ 549.706015][ T29] audit: type=1326 audit(1776007622.173:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10924 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 549.868815][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 549.906118][ T29] audit: type=1326 audit(1776007622.173:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10924 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 549.969919][ T29] audit: type=1326 audit(1776007622.173:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10924 comm="syz.4.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb7b9c819 code=0x7ffc0000 [ 550.124179][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 550.151721][ T9] usb 2-1: config index 0 descriptor too short (expected 29555, got 27) [ 550.165231][ T9] usb 2-1: config 109 has too many interfaces: 95, using maximum allowed: 32 [ 550.178307][T10956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 550.184936][T10956] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 550.193696][T10956] audit: backlog limit exceeded [ 550.201869][T10957] audit: audit_backlog=65 > audit_backlog_limit=64 [ 550.208498][T10957] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 550.233776][ T9] usb 2-1: config 109 has an invalid descriptor of length 114, skipping remainder of the config [ 550.337575][ T9] usb 2-1: config 109 has 0 interfaces, different from the descriptor's value: 95 [ 550.402397][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 550.446758][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.482188][ T9] usb 2-1: Product: syz [ 550.516239][ T9] usb 2-1: Manufacturer: syz [ 550.546022][ T9] usb 2-1: SerialNumber: syz [ 551.931162][T10970] netlink: 'syz.4.1003': attribute type 4 has an invalid length. [ 551.940261][T10970] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1003'. [ 552.018099][T10974] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1002'. [ 552.331476][T10975] overlay: Unknown parameter 'appraise' [ 552.993243][ T9] usb 2-1: USB disconnect, device number 15 [ 553.969333][T10973] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1002'. [ 553.986086][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 553.986295][ T29] audit: type=1400 audit(1776007627.263:787): avc: denied { read write } for pid=10966 comm="syz.3.1002" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 554.392821][ T29] audit: type=1400 audit(1776007627.263:788): avc: denied { open } for pid=10966 comm="syz.3.1002" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 554.573462][ T29] audit: type=1400 audit(1776007627.273:789): avc: denied { ioctl } for pid=10966 comm="syz.3.1002" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 555.728751][ T29] audit: type=1400 audit(1776007628.773:790): avc: denied { create } for pid=10978 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 556.299002][ T29] audit: type=1400 audit(1776007629.563:791): avc: denied { read } for pid=10991 comm="syz.3.1010" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 556.349026][ T29] audit: type=1400 audit(1776007629.563:792): avc: denied { open } for pid=10991 comm="syz.3.1010" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 556.804442][T10983] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 556.835829][T10983] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 556.939458][ T29] audit: type=1400 audit(1776007630.243:793): avc: denied { ioctl } for pid=10991 comm="syz.3.1010" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 556.975445][T10983] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 557.100463][ T29] audit: type=1400 audit(1776007630.293:794): avc: denied { firmware_load } for pid=10978 comm="syz.1.1007" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 557.354786][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.361895][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.421499][ T29] audit: type=1400 audit(1776007630.403:795): avc: denied { ioctl } for pid=10998 comm="syz.4.1012" path="socket:[27600]" dev="sockfs" ino=27600 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 557.562696][ T29] audit: type=1400 audit(1776007630.883:796): avc: denied { name_bind } for pid=11005 comm="syz.2.1013" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 559.152508][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 559.152526][ T29] audit: type=1400 audit(1776007632.373:803): avc: denied { create } for pid=11024 comm="syz.0.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 559.468077][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 559.490744][T11035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11035 comm=syz.4.1017 [ 559.529701][ T29] audit: type=1400 audit(1776007632.633:804): avc: denied { ioctl } for pid=11032 comm="syz.4.1017" path="socket:[28676]" dev="sockfs" ino=28676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.603249][ T29] audit: type=1400 audit(1776007632.923:805): avc: denied { create } for pid=11040 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 559.624925][ T29] audit: type=1400 audit(1776007632.943:806): avc: denied { bind } for pid=11040 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.194401][ T29] audit: type=1400 audit(1776007633.063:807): avc: denied { bind } for pid=11038 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.219654][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 560.240709][T11035] macvlan2: entered allmulticast mode [ 560.248280][T11035] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 560.276584][ T29] audit: type=1400 audit(1776007633.063:808): avc: denied { name_bind } for pid=11038 comm="syz.0.1018" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 560.319330][ T29] audit: type=1400 audit(1776007633.073:809): avc: denied { node_bind } for pid=11038 comm="syz.0.1018" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 560.321038][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 560.467767][ T29] audit: type=1400 audit(1776007633.163:810): avc: denied { mount } for pid=11040 comm="syz.3.1020" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 560.553994][ T29] audit: type=1400 audit(1776007633.163:811): avc: denied { getopt } for pid=11040 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.699513][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 560.718818][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 560.734599][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 560.751159][T11051] sp0: Synchronizing with TNC [ 560.765880][ T29] audit: type=1400 audit(1776007633.983:812): avc: denied { getopt } for pid=11038 comm="syz.0.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 560.846392][ T10] usb 2-1: Product: syz [ 560.852654][T11054] netlink: 'syz.2.1022': attribute type 4 has an invalid length. [ 560.893474][ T10] usb 2-1: SerialNumber: syz [ 560.907074][T11054] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1022'. [ 560.958494][ T10] usb 2-1: config 0 descriptor?? [ 560.969099][T11056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 560.991476][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 561.112474][ T10] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 561.551750][ T10] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 561.568164][ T10] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 561.593609][T11050] [U] è [ 561.793290][T11067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.805101][T11067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.189314][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 564.189345][ T29] audit: type=1400 audit(1776007637.493:821): avc: denied { accept } for pid=11074 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 564.512467][ T10] usb 2-1: USB disconnect, device number 16 [ 564.565763][ T29] audit: type=1400 audit(1776007637.493:822): avc: denied { write } for pid=11074 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 564.688779][ T29] audit: type=1400 audit(1776007637.493:823): avc: denied { read } for pid=11074 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.174109][ T29] audit: type=1400 audit(1776007637.503:824): avc: denied { create } for pid=11074 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 565.242505][ T29] audit: type=1400 audit(1776007637.503:825): avc: denied { read } for pid=11074 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 565.445602][ T29] audit: type=1400 audit(1776007637.863:826): avc: denied { mount } for pid=11087 comm="syz.4.1028" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 565.743269][ T29] audit: type=1400 audit(1776007637.863:827): avc: denied { search } for pid=11087 comm="syz.4.1028" name="/" dev="configfs" ino=1079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 566.120345][ T29] audit: type=1400 audit(1776007638.373:828): avc: denied { add_name } for pid=11087 comm="syz.4.1028" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 566.304021][T11112] sp0: Synchronizing with TNC [ 566.334731][ T29] audit: type=1400 audit(1776007638.373:829): avc: denied { create } for pid=11087 comm="syz.4.1028" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 566.504826][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1033'. [ 566.561796][T11117] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 566.646154][ T29] audit: type=1400 audit(1776007639.153:830): avc: denied { write } for pid=11103 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 566.938923][T11110] [U] è [ 569.199438][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 569.219650][ T29] audit: type=1400 audit(1776007642.363:845): avc: denied { read write } for pid=11127 comm="syz.2.1037" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 569.282665][ T29] audit: type=1400 audit(1776007642.363:846): avc: denied { open } for pid=11127 comm="syz.2.1037" path="/212/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 569.354048][ T29] audit: type=1400 audit(1776007642.673:847): avc: denied { read } for pid=11142 comm="syz.4.1040" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 569.955971][ T29] audit: type=1400 audit(1776007642.673:848): avc: denied { open } for pid=11142 comm="syz.4.1040" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 569.980533][ T29] audit: type=1400 audit(1776007642.733:849): avc: denied { ioctl } for pid=11142 comm="syz.4.1040" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 570.333690][T11152] netlink: 'syz.4.1041': attribute type 4 has an invalid length. [ 570.479372][T11152] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1041'. [ 570.808849][ T29] audit: type=1400 audit(1776007643.883:850): avc: denied { connect } for pid=11153 comm="syz.1.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 570.900141][ T29] audit: type=1400 audit(1776007644.213:851): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 572.243251][ T29] audit: type=1400 audit(1776007645.233:852): avc: denied { read } for pid=11170 comm="syz.0.1046" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 572.449440][ T29] audit: type=1400 audit(1776007645.233:853): avc: denied { open } for pid=11170 comm="syz.0.1046" path="/dev/sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 572.539023][ T29] audit: type=1400 audit(1776007645.233:854): avc: denied { ioctl } for pid=11170 comm="syz.0.1046" path="/dev/sg0" dev="devtmpfs" ino=806 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.657452][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 574.657468][ T29] audit: type=1400 audit(1776007647.973:862): avc: denied { create } for pid=11198 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.869376][ T29] audit: type=1400 audit(1776007648.023:863): avc: denied { bind } for pid=11198 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.912322][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1052'. [ 575.092348][ T29] audit: type=1400 audit(1776007648.043:864): avc: denied { setopt } for pid=11198 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 575.139096][ T29] audit: type=1400 audit(1776007648.113:865): avc: denied { write } for pid=11198 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 575.148412][ T10] lo speed is unknown, defaulting to 1000 [ 575.289260][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 575.773568][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 575.809146][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 575.854385][ T9] usb 2-1: config 1 has no interface number 1 [ 575.883112][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.909768][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 575.955603][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.031916][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 576.052853][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.334345][ T9] usb 2-1: Product: syz [ 576.338539][ T9] usb 2-1: Manufacturer: syz [ 576.358040][ T9] usb 2-1: SerialNumber: syz [ 576.595003][ T29] audit: type=1400 audit(1776007649.883:866): avc: denied { bind } for pid=11225 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 577.249316][ T29] audit: type=1400 audit(1776007649.883:867): avc: denied { setopt } for pid=11225 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 577.269295][ T29] audit: type=1400 audit(1776007650.353:868): avc: denied { create } for pid=11212 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 577.289363][ T29] audit: type=1400 audit(1776007650.423:869): avc: denied { connect } for pid=11212 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 577.343644][ T29] audit: type=1400 audit(1776007650.483:870): avc: denied { listen } for pid=11212 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 577.395571][ T29] audit: type=1400 audit(1776007650.483:871): avc: denied { accept } for pid=11212 comm="syz.4.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 577.676959][ T9] usb 2-1: failed to enable PITCH for EP 0x82 [ 577.683454][ T9] usb 2-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 578.020188][ T9] usb 2-1: USB disconnect, device number 17 [ 578.334880][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.659110][T11257] dummy0: entered allmulticast mode [ 579.168014][T11256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 579.244658][T11252] dummy0: left allmulticast mode [ 579.662096][T11265] netlink: 'syz.1.1064': attribute type 4 has an invalid length. [ 579.699563][T11265] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1064'. [ 581.016974][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 581.018005][ T29] audit: type=1400 audit(1776007654.333:876): avc: denied { write } for pid=11282 comm="syz.0.1069" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 581.055465][T11284] binder: 11282:11284 ioctl c018620c 200000000040 returned -1 [ 581.900263][ T29] audit: type=1400 audit(1776007655.223:877): avc: denied { bind } for pid=11291 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 581.976525][ T29] audit: type=1400 audit(1776007655.283:878): avc: denied { setopt } for pid=11291 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 582.023432][ T29] audit: type=1400 audit(1776007655.283:879): avc: denied { write } for pid=11291 comm="syz.2.1070" path="socket:[29068]" dev="sockfs" ino=29068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 582.052975][ T29] audit: type=1400 audit(1776007655.283:880): avc: denied { write } for pid=11291 comm="syz.2.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 582.075065][ T29] audit: type=1400 audit(1776007655.283:881): avc: denied { ioctl } for pid=11291 comm="syz.2.1070" path="socket:[29078]" dev="sockfs" ino=29078 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.144890][ T29] audit: type=1400 audit(1776007655.443:882): avc: denied { mount } for pid=11294 comm="syz.0.1071" name="/" dev="rpc_pipefs" ino=30299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 582.349394][ T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 582.960336][T11306] lo speed is unknown, defaulting to 1000 [ 583.077304][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.086117][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.266493][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 583.297871][ T29] audit: type=1400 audit(1776007656.033:883): avc: denied { bind } for pid=11297 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 583.300098][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 583.449115][T11309] ceph: No mds server is up or the cluster is laggy [ 583.557333][ T29] audit: type=1400 audit(1776007656.113:884): avc: denied { accept } for pid=11297 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 583.591193][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 583.626911][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 583.661590][ T29] audit: type=1400 audit(1776007656.183:885): avc: denied { read } for pid=11297 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 585.135130][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 585.144880][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 585.279351][ T24] usb 4-1: can't read configurations, error -71 [ 587.472653][T11354] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 587.488179][T11354] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 587.718435][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 587.718458][ T29] audit: type=1400 audit(1776007661.033:891): avc: denied { ioctl } for pid=11333 comm="syz.3.1079" path="socket:[30468]" dev="sockfs" ino=30468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 588.991470][ T29] audit: type=1400 audit(1776007661.213:892): avc: denied { bind } for pid=11333 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 589.139456][ T29] audit: type=1400 audit(1776007661.213:893): avc: denied { bind } for pid=11333 comm="syz.3.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 589.492632][T11372] netlink: 'syz.2.1086': attribute type 4 has an invalid length. [ 589.964993][T11373] lo speed is unknown, defaulting to 1000 [ 590.114433][T11372] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1086'. [ 590.177961][T11359] hpfs: hpfs_map_sector(): read error [ 590.183915][ T29] audit: type=1400 audit(1776007663.493:894): avc: denied { mounton } for pid=11357 comm="syz.4.1084" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 591.842375][ T5815] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 592.804841][T11399] ceph: No mds server is up or the cluster is laggy [ 593.806715][ T29] audit: type=1400 audit(1776007666.873:895): avc: denied { mounton } for pid=11405 comm="syz.4.1092" path="/203/file0" dev="tmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 595.914466][T11429] hub 9-0:1.0: USB hub found [ 595.922210][T11429] hub 9-0:1.0: 1 port detected [ 597.300408][ T29] audit: type=1400 audit(1776007670.533:896): avc: denied { setopt } for pid=11436 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 597.341451][ T29] audit: type=1400 audit(1776007670.593:897): avc: denied { name_connect } for pid=11436 comm="syz.1.1098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 597.739472][ T29] audit: type=1400 audit(1776007671.063:898): avc: denied { write } for pid=11440 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 597.788535][ T29] audit: type=1400 audit(1776007671.063:899): avc: denied { nlmsg_write } for pid=11440 comm="syz.4.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.034831][T11442] netlink: 'syz.4.1099': attribute type 9 has an invalid length. [ 598.042949][T11442] netlink: 'syz.4.1099': attribute type 11 has an invalid length. [ 598.051174][T11442] netlink: 'syz.4.1099': attribute type 12 has an invalid length. [ 598.059169][T11442] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1099'. [ 598.069140][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 598.815518][ T29] audit: type=1400 audit(1776007671.883:900): avc: denied { create } for pid=11450 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 598.829559][T11458] sp0: Synchronizing with TNC [ 598.993391][T11462] FAT-fs (nullb0): bogus number of reserved sectors [ 599.000661][T11462] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 599.008424][ T1625] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 599.479235][ T29] audit: type=1400 audit(1776007672.393:901): avc: denied { connect } for pid=11456 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.531138][T11462] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 599.539539][ T29] audit: type=1400 audit(1776007672.413:902): avc: denied { ioctl } for pid=11456 comm="syz.4.1104" path="socket:[30615]" dev="sockfs" ino=30615 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.596486][T11463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1104'. [ 599.755447][ T1625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 599.794893][ T1625] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 599.939633][ T1625] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 599.950892][ T1625] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 600.422790][ T1625] usb 4-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 600.432117][ T1625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.471233][ T1625] usb 4-1: Product: syz [ 600.482312][ T1625] usb 4-1: Manufacturer: syz [ 600.517198][ T1625] usb 4-1: SerialNumber: syz [ 600.534768][T11452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.749752][T11452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.756941][T11452] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 601.010631][ T9] libceph: connect (1)[c::]:6789 error -101 [ 601.018065][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 601.138278][ T29] audit: type=1400 audit(1776007673.454:903): avc: denied { nlmsg_read } for pid=11479 comm="syz.4.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 601.162613][T11475] ceph: No mds server is up or the cluster is laggy [ 601.170342][T11481] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1107'. [ 601.586260][T11484] tipc: Enabled bearer , priority 10 [ 601.634229][ T29] audit: type=1400 audit(1776007673.954:904): avc: denied { getopt } for pid=11488 comm="syz.0.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 601.714534][T11484] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 601.774116][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1108'. [ 601.833519][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 602.083324][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 602.517381][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 602.586359][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 602.624896][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.659225][ T24] usb 5-1: Product: syz [ 602.673432][ T24] usb 5-1: Manufacturer: syz [ 602.689499][ T24] usb 5-1: SerialNumber: syz [ 602.703193][ T24] usb 5-1: config 0 descriptor?? [ 603.901097][ T1625] cdc_ncm 4-1:1.0: bind() failure [ 603.940893][ T1625] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 604.161010][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 604.220460][ T1625] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 604.255239][ T1625] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 604.267488][ T1625] usb 4-1: USB disconnect, device number 19 [ 605.190311][ T29] audit: type=1400 audit(1776007677.504:905): avc: denied { write } for pid=11515 comm="syz.0.1123" name="sg0" dev="devtmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 605.366496][ T29] audit: type=1400 audit(1776007677.684:906): avc: denied { shutdown } for pid=11515 comm="syz.0.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 605.376885][ T24] usb 5-1: USB disconnect, device number 12 [ 605.456070][T11522] siw: device registration error -23 [ 605.635245][ T29] audit: type=1400 audit(1776007677.764:907): avc: denied { create } for pid=11516 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.658882][ T29] audit: type=1400 audit(1776007677.774:908): avc: denied { write } for pid=11516 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.912367][ T29] audit: type=1400 audit(1776007677.794:909): avc: denied { write } for pid=11516 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 605.954797][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.985623][ T29] audit: type=1400 audit(1776007677.804:910): avc: denied { mount } for pid=11516 comm="syz.2.1113" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 606.076280][ T7337] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 606.155501][ T29] audit: type=1400 audit(1776007677.814:911): avc: denied { getopt } for pid=11516 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 606.350542][ T29] audit: type=1400 audit(1776007678.674:912): avc: denied { mount } for pid=11533 comm="syz.0.1117" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 606.392275][ T7337] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 606.474162][T11535] can0: slcan on ttyS3. [ 606.787082][ T29] audit: type=1400 audit(1776007678.844:913): avc: denied { ioctl } for pid=11528 comm="syz.2.1116" path="socket:[29501]" dev="sockfs" ino=29501 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 606.837062][ T7337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.867156][ T7337] usb 2-1: Product: syz [ 606.874800][ T7337] usb 2-1: Manufacturer: syz [ 606.880045][ T29] audit: type=1400 audit(1776007678.854:914): avc: denied { ioctl } for pid=11528 comm="syz.2.1116" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=29507 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 606.907481][ T7337] usb 2-1: SerialNumber: syz [ 606.914154][ T7337] usb 2-1: config 0 descriptor?? [ 606.940744][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1117'. [ 607.361857][T11528] can0 (unregistered): slcan off ttyS3. [ 607.941992][ T1625] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 608.100787][ T1625] usb 1-1: unable to get BOS descriptor or descriptor too short [ 608.214556][ T1625] usb 1-1: not running at top speed; connect to a high speed hub [ 608.246444][ T1625] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 608.320621][T11553] 9pnet_virtio: no channels available for device syz [ 609.208771][ T1625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.216787][ T1625] usb 1-1: Product: syz [ 609.221395][ T1625] usb 1-1: Manufacturer: syz [ 609.226010][ T1625] usb 1-1: SerialNumber: syz [ 609.230027][ T24] usb 2-1: USB disconnect, device number 18 [ 609.313064][T11555] netlink: 'syz.3.1120': attribute type 4 has an invalid length. [ 609.446654][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.454379][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.463243][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.464276][T11555] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1120'. [ 609.471512][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.487743][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.498063][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.537839][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.545645][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.553321][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 609.565174][ T1625] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 610.205686][ T1625] usb 1-1: USB disconnect, device number 18 [ 610.226920][T11566] ceph: No mds server is up or the cluster is laggy [ 610.351056][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 610.351071][ T29] audit: type=1400 audit(1776007682.674:923): avc: denied { remove_name } for pid=11572 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=6533 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.451107][ T7784] udevd[7784]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 610.469496][ T29] audit: type=1400 audit(1776007682.714:924): avc: denied { unlink } for pid=11572 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=6533 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.982549][ T29] audit: type=1400 audit(1776007683.134:925): avc: denied { ioctl } for pid=11556 comm="syz.1.1119" path="socket:[30848]" dev="sockfs" ino=30848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 611.071785][ T29] audit: type=1400 audit(1776007683.294:926): avc: denied { ioctl } for pid=11556 comm="syz.1.1119" path="socket:[30850]" dev="sockfs" ino=30850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.256744][T11584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 611.560385][T11586] netlink: 'syz.0.1122': attribute type 15 has an invalid length. [ 611.568388][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 612.706707][T11604] netlink: 'syz.4.1126': attribute type 4 has an invalid length. [ 612.791889][ T29] audit: type=1400 audit(1776007685.054:927): avc: denied { name_bind } for pid=11601 comm="syz.4.1126" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 612.881245][T11608] sp0: Synchronizing with TNC [ 613.019128][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1128'. [ 613.115106][T11615] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 613.441236][T11624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.454297][ T29] audit: type=1400 audit(1776007685.754:928): avc: denied { setattr } for pid=11617 comm="syz.0.1130" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 613.725671][T11621] ceph: No mds server is up or the cluster is laggy [ 613.733290][T11607] [U] è [ 618.305231][T11651] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1135'. [ 618.547828][ T29] audit: type=1400 audit(1776007690.864:929): avc: denied { write } for pid=11644 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 618.799393][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.805794][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.173091][T11678] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 620.556625][ T29] audit: type=1400 audit(1776007692.464:930): avc: denied { open } for pid=11673 comm="syz.4.1140" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 620.668554][ T29] audit: type=1400 audit(1776007692.474:931): avc: denied { ioctl } for pid=11673 comm="syz.4.1140" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 620.694623][ T29] audit: type=1400 audit(1776007692.474:932): avc: denied { write } for pid=11673 comm="syz.4.1140" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 620.785838][T11683] netlink: 'syz.2.1142': attribute type 4 has an invalid length. [ 620.814218][T11683] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1142'. [ 622.101118][ T29] audit: type=1400 audit(1776007693.924:933): avc: denied { bind } for pid=11685 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 622.412094][ T29] audit: type=1400 audit(1776007694.064:934): avc: denied { write } for pid=11685 comm="syz.0.1143" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 622.436040][ T29] audit: type=1400 audit(1776007694.064:935): avc: denied { open } for pid=11685 comm="syz.0.1143" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 622.459920][ T29] audit: type=1400 audit(1776007694.214:936): avc: denied { ioctl } for pid=11685 comm="syz.0.1143" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 623.128447][ T24] libceph: connect (1)[c::]:6789 error -101 [ 623.327679][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 623.342540][T11703] ceph: No mds server is up or the cluster is laggy [ 623.536371][ T29] audit: type=1400 audit(1776007695.824:937): avc: denied { create } for pid=11708 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 623.623967][ T29] audit: type=1400 audit(1776007695.824:938): avc: denied { write } for pid=11708 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 624.208037][T11718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.294572][T11731] sp0: Synchronizing with TNC [ 625.425327][T11735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1152'. [ 625.788285][T11730] [U] è [ 626.056596][T11747] ptrace attach of "./syz-executor exec"[5805] was attempted by "./syz-executor exec"[11747] [ 626.238800][T11751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 626.918007][T11746] lo speed is unknown, defaulting to 1000 [ 627.387558][T11746] lo speed is unknown, defaulting to 1000 [ 627.393806][ T29] audit: type=1400 audit(1776007699.314:939): avc: denied { watch watch_reads } for pid=11755 comm="syz.1.1156" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 627.482352][T11746] lo speed is unknown, defaulting to 1000 [ 627.821717][T11746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 628.030987][T11746] lo speed is unknown, defaulting to 1000 [ 628.048531][T11746] lo speed is unknown, defaulting to 1000 [ 628.204295][T11764] sp0: Synchronizing with TNC [ 628.479905][T11773] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1158'. [ 628.625234][T11746] lo speed is unknown, defaulting to 1000 [ 628.649385][T11763] [U] è [ 628.666293][T11746] lo speed is unknown, defaulting to 1000 [ 628.708816][ T1625] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 628.735220][T11746] lo speed is unknown, defaulting to 1000 [ 628.743126][T11778] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 628.769194][T11778] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1160'. [ 628.859492][ T1625] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 628.868533][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.880233][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.983683][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 628.991657][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.001094][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.012582][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.020539][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.044000][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.055631][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.136332][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.550797][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.555367][T11789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1162'. [ 629.561737][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.662539][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.684058][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.704192][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.715222][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.799379][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.817552][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.835395][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.868169][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.905178][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.922602][ T1625] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.944937][ T1625] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.966941][ T1625] usb 5-1: config 0 interface 0 has no altsetting 0 [ 629.984813][ T1625] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 630.026180][ T1625] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 630.042820][ T1625] usb 5-1: Product: syz [ 630.053154][ T1625] usb 5-1: Manufacturer: syz [ 630.061866][ T1625] usb 5-1: SerialNumber: syz [ 630.075436][ T1625] usb 5-1: config 0 descriptor?? [ 630.105793][ T1625] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 630.366354][ T29] audit: type=1400 audit(1776007702.684:940): avc: denied { setopt } for pid=11765 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 630.391063][ T29] audit: type=1400 audit(1776007702.714:941): avc: denied { read } for pid=11765 comm="syz.4.1159" path="socket:[31926]" dev="sockfs" ino=31926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 630.599995][T11800] ceph: No mds server is up or the cluster is laggy [ 630.618589][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 630.630043][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 630.632909][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.847440][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.899326][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 630.998718][ T29] audit: type=1400 audit(1776007703.284:942): avc: denied { create } for pid=11806 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 631.018944][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 631.036414][T11766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.286778][ T29] audit: type=1400 audit(1776007703.314:943): avc: denied { setopt } for pid=11806 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 631.581403][T11766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.747224][ T29] audit: type=1400 audit(1776007703.924:944): avc: denied { write } for pid=11797 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 631.952671][T10574] usb 5-1: USB disconnect, device number 13 [ 631.962230][T10574] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 632.562482][T11820] sp0: Synchronizing with TNC [ 632.684463][T11824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1169'. [ 633.101584][T11832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1170'. [ 633.557648][T11838] kernel read not supported for file /policy (pid: 11838 comm: syz.0.1171) [ 633.663774][ T29] audit: type=1400 audit(1776007705.794:945): avc: denied { unlink } for pid=11834 comm="syz.0.1171" name="#17" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 633.763057][T11847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1173'. [ 633.831736][ T29] audit: type=1400 audit(1776007705.804:946): avc: denied { mount } for pid=11834 comm="syz.0.1171" name="/" dev="overlay" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 634.210061][ T29] audit: type=1400 audit(1776007705.874:947): avc: denied { module_load } for pid=11834 comm="syz.0.1171" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 634.836451][T11840] [U] è [ 634.853942][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 635.385367][T11866] netlink: 'syz.2.1178': attribute type 4 has an invalid length. [ 635.412321][T11866] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1178'. [ 636.431934][ T29] audit: type=1400 audit(1776007708.704:948): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 636.486558][ T29] audit: type=1400 audit(1776007708.724:949): avc: denied { append } for pid=11863 comm="syz.4.1177" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 636.648700][ T29] audit: type=1400 audit(1776007708.724:950): avc: denied { map } for pid=11863 comm="syz.4.1177" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 636.720576][ T29] audit: type=1400 audit(1776007708.724:951): avc: denied { execute } for pid=11863 comm="syz.4.1177" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 636.976882][T11889] 9pnet_virtio: no channels available for device syz [ 637.579740][T11888] No such timeout policy "syz0" [ 638.395932][T11895] sp0: Synchronizing with TNC [ 638.416704][ T29] audit: type=1400 audit(1776007710.734:952): avc: denied { view } for pid=11896 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 638.578960][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1183'. [ 638.989328][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 638.999009][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 639.077327][T11907] ceph: No mds server is up or the cluster is laggy [ 639.205424][T11894] [U] è [ 639.279458][ T1625] libceph: connect (1)[c::]:6789 error -101 [ 639.316516][ T1625] libceph: mon0 (1)[c::]:6789 connect error [ 640.054105][T11971] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 640.063524][T11971] batadv0: left allmulticast mode [ 640.069767][T11971] batadv0: left promiscuous mode [ 640.075394][T11971] bridge0: port 3(batadv0) entered disabled state [ 640.129699][T11972] loop5: detected capacity change from 0 to 7 [ 640.142837][T11972] Dev loop5: unable to read RDB block 7 [ 640.148493][T11972] loop5: AHDI p1 [ 640.152934][T11972] loop5: partition table partially beyond EOD, truncated [ 640.182977][T11972] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 640.191394][T11972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1188'. [ 640.235163][T11971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.324767][T11972] batadv0: entered promiscuous mode [ 640.330711][T11972] batadv0: entered allmulticast mode [ 640.337174][T11972] bridge0: port 3(batadv0) entered blocking state [ 640.344468][T11972] bridge0: port 3(batadv0) entered disabled state [ 640.586319][ T29] audit: type=1400 audit(1776007712.434:953): avc: denied { append } for pid=11961 comm="syz.3.1188" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.671445][ T29] audit: type=1400 audit(1776007712.974:954): avc: denied { associate } for pid=11963 comm="syz.2.1187" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 640.954549][ T29] audit: type=1400 audit(1776007713.244:955): avc: denied { listen } for pid=11963 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 641.320418][T11986] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 641.330162][T11986] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 641.367204][T11986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.573306][T11987] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 641.584500][T11987] tipc: Resetting bearer [ 641.599817][T11987] bond0: (slave wlan1): Opening slave failed [ 641.606472][T11987] tipc: Resetting bearer [ 641.767410][T11992] evm: overlay not supported [ 642.676213][T11991] libceph: resolve '0..' (ret=-3): failed [ 642.676937][T11985] team0: entered allmulticast mode [ 642.691132][ T29] audit: type=1400 audit(1776007713.244:956): avc: denied { accept } for pid=11963 comm="syz.2.1187" lport=45880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 642.714288][T11985] team_slave_0: entered allmulticast mode [ 642.720695][ T29] audit: type=1400 audit(1776007714.104:957): avc: denied { watch } for pid=11988 comm="syz.0.1192" path="/250/bus/file1" dev="overlay" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 642.800842][T11985] team_slave_1: entered allmulticast mode [ 642.808302][ T29] audit: type=1400 audit(1776007714.104:958): avc: denied { watch_sb } for pid=11988 comm="syz.0.1192" path="/250/bus/file1" dev="overlay" ino=1343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 642.877865][T11985] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.242931][ T5815] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 644.252189][ T29] audit: type=1400 audit(1776007716.574:959): avc: denied { setopt } for pid=12001 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 644.523288][T12012] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 644.539242][T12012] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1197'. [ 644.723775][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 644.756789][ T29] audit: type=1400 audit(1776007717.044:960): avc: denied { read write } for pid=12007 comm="syz.2.1196" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 645.245434][ T29] audit: type=1400 audit(1776007717.044:961): avc: denied { ioctl open } for pid=12007 comm="syz.2.1196" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 645.471555][T12021] 9pnet_virtio: no channels available for device syz [ 646.538533][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1200'. [ 647.440918][ T1625] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 647.470221][ T29] audit: type=1400 audit(1776007719.504:962): avc: denied { mounton } for pid=12029 comm="syz.1.1201" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 647.623544][ T1625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 648.008392][ T1625] usb 5-1: not running at top speed; connect to a high speed hub [ 648.053506][ T1625] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 648.079161][ T1625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.103676][ T1625] usb 5-1: Product: syz [ 648.115455][ T1625] usb 5-1: Manufacturer: syz [ 648.124547][ T29] audit: type=1400 audit(1776007720.444:963): avc: denied { create } for pid=12041 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 648.166923][ T1625] usb 5-1: SerialNumber: syz [ 648.193049][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 649.255117][T12057] netlink: 'syz.2.1206': attribute type 2 has an invalid length. [ 649.263061][T12057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'. [ 649.616384][ T1625] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 649.716854][ T1625] usb 5-1: USB disconnect, device number 14 [ 649.788377][T11767] udevd[11767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.591680][T12079] 9pnet_virtio: no channels available for device syz [ 652.325056][ T29] audit: type=1400 audit(1776007724.624:964): avc: denied { remount } for pid=12087 comm="syz.1.1214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 653.108412][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1218'. [ 653.211052][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.217004][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.223813][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.237827][T12102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 653.253789][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.260776][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.267335][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.274292][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.281320][T12102] wg1 speed is unknown, defaulting to 1000 [ 653.439347][ T7337] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 653.719362][ T7337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.728237][ T7337] usb 4-1: not running at top speed; connect to a high speed hub [ 653.744908][ T7337] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 653.755050][ T7337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.763703][ T7337] usb 4-1: Product: syz [ 653.768295][ T7337] usb 4-1: Manufacturer: syz [ 653.773878][ T7337] usb 4-1: SerialNumber: syz [ 653.882127][ T29] audit: type=1400 audit(1776007726.204:965): avc: denied { write } for pid=12118 comm="syz.2.1220" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 654.170024][T12122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1220'. [ 654.638855][T10309] Bluetooth: hci4: command 0x0c1a tx timeout [ 654.901545][T12129] 9pnet_virtio: no channels available for device syz [ 656.160427][ T7337] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 656.801322][ T5815] Bluetooth: hci4: command 0x0c1a tx timeout [ 656.838581][ T7337] usb 4-1: USB disconnect, device number 20 [ 657.021581][T11767] udevd[11767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.379474][ T7337] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 657.830827][ T7337] usb 4-1: config 0 has no interfaces? [ 657.897016][T12160] No such timeout policy "syz1" [ 657.922454][ T29] audit: type=1326 audit(1776007730.234:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.2.1230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f324699c819 code=0x0 [ 657.946234][ T7337] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 658.205065][ T7337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.224321][ T7337] usb 4-1: config 0 descriptor?? [ 658.313790][ T29] audit: type=1400 audit(1776007730.634:967): avc: denied { ioctl } for pid=12164 comm="syz.4.1231" path="socket:[32463]" dev="sockfs" ino=32463 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 658.355725][ T29] audit: type=1400 audit(1776007730.674:968): avc: denied { listen } for pid=12164 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 658.381300][ T29] audit: type=1400 audit(1776007730.694:969): avc: denied { ioctl } for pid=12164 comm="syz.4.1231" path="socket:[32470]" dev="sockfs" ino=32470 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 658.409210][ T29] audit: type=1400 audit(1776007730.704:970): avc: denied { setopt } for pid=12164 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 660.883528][T12180] 9pnet_virtio: no channels available for device syz [ 661.589115][T10309] Bluetooth: hci5: command 0xfc11 tx timeout [ 661.596574][ T5815] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 661.824687][ T7337] usb 4-1: USB disconnect, device number 21 [ 663.082644][ T29] audit: type=1400 audit(1776007735.404:971): avc: denied { setopt } for pid=12195 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 665.396660][T12234] 9pnet_virtio: no channels available for device syz [ 667.674719][ T29] audit: type=1400 audit(1776007739.994:972): avc: denied { setopt } for pid=12241 comm="syz.1.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 667.699777][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1250'. [ 667.825233][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 668.357229][ T29] audit: type=1400 audit(1776007740.634:973): avc: denied { create } for pid=12246 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 669.275112][T12265] netlink: 2120 bytes leftover after parsing attributes in process `syz.1.1254'. [ 669.341528][ T29] audit: type=1400 audit(1776007741.444:974): avc: denied { create } for pid=12256 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 670.441249][ T29] audit: type=1400 audit(1776007741.464:975): avc: denied { sys_admin } for pid=12256 comm="syz.1.1254" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 670.630074][T12273] sp0: Synchronizing with TNC [ 670.786730][T12278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1257'. [ 671.016244][T12271] [U] è [ 671.135984][T12284] comedi comedi1: no devices specified [ 671.445733][T12289] 9pnet_virtio: no channels available for device syz [ 673.176137][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 673.814071][T12304] random: crng reseeded on system resumption [ 673.898745][ T29] audit: type=1400 audit(1776007746.134:976): avc: denied { write } for pid=12296 comm="syz.4.1262" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 673.946710][ T29] audit: type=1400 audit(1776007746.134:977): avc: denied { open } for pid=12296 comm="syz.4.1262" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 674.476987][T12304] openvswitch: netlink: IP tunnel dst address not specified [ 674.669834][T12304] syzkaller1: entered promiscuous mode [ 674.675365][T12304] syzkaller1: entered allmulticast mode [ 675.025743][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 676.101615][T12328] sp0: Synchronizing with TNC [ 676.279239][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 676.344393][T12333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1269'. [ 676.471920][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.484761][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 676.498635][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 676.511820][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 676.523157][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 676.539373][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=71.94 [ 676.554554][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.564505][T12327] [U] è [ 676.572062][ T24] usb 5-1: config 0 descriptor?? [ 676.592895][ T24] ttusbir 5-1:0.0: cannot find expected altsetting [ 677.481379][T12348] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 678.075073][T12355] bridge3: entered promiscuous mode [ 678.080986][T12355] bridge3: entered allmulticast mode [ 678.536895][T12356] nfs: Unknown parameter 'ÿÿÿÿ' [ 678.751511][T12356] comedi comedi1: comedi_config --init_data is deprecated [ 678.784936][ T29] audit: type=1400 audit(1776007751.104:978): avc: denied { mount } for pid=12359 comm="syz.1.1275" name="/" dev="ramfs" ino=33921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 678.855633][T12360] batman_adv: batadv0: Adding interface: macsec1 [ 678.862074][T12360] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.887800][T12360] batman_adv: batadv0: Interface activated: macsec1 [ 678.914564][ T29] audit: type=1400 audit(1776007751.234:979): avc: denied { append } for pid=12361 comm="syz.2.1276" name="dvr0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 679.463571][ T47] usb 5-1: USB disconnect, device number 15 [ 680.449124][ T1625] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 680.449951][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.465163][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.758874][ T1625] usb 1-1: Using ep0 maxpacket: 32 [ 680.779177][ T1625] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 680.788787][ T1625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.796787][ T1625] usb 1-1: Product: syz [ 680.808715][ T1625] usb 1-1: Manufacturer: syz [ 680.814005][ T1625] usb 1-1: SerialNumber: syz [ 680.820722][ T1625] usb 1-1: config 0 descriptor?? [ 680.951558][T12378] IPv6: NLM_F_REPLACE set, but no existing node found! [ 681.066366][T12382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1281'. [ 681.128295][T12382] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 681.264583][ T29] audit: type=1400 audit(1776007753.584:980): avc: denied { shutdown } for pid=12361 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 681.309992][ T1625] usb 1-1: can't set config #0, error -71 [ 681.319055][ T1625] usb 1-1: USB disconnect, device number 19 [ 681.408744][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 682.032468][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 682.041776][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.054736][ T9] usb 4-1: config 0 descriptor?? [ 682.885951][T12409] sp0: Synchronizing with TNC [ 682.950574][T10309] Bluetooth: hci5: command 0x1003 tx timeout [ 682.951175][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.028738][ T1625] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 683.113677][ T9] ath6kl: Failed to submit usb control message: -110 [ 683.120784][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 683.147954][ T9] ath6kl: Unable to send get target info: -110 [ 683.160537][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1287'. [ 683.221149][ T1625] usb 5-1: Using ep0 maxpacket: 16 [ 683.290672][ T1625] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.304035][ T1625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.315782][ T1625] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.327974][ T9] ath6kl: Failed to init ath6kl core: -110 [ 683.336154][ T9] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 683.348624][ T1625] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 683.360379][ T1625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.409474][ T1625] usb 5-1: config 0 descriptor?? [ 683.436922][T12408] [U] è [ 683.630978][ T9] usb 4-1: USB disconnect, device number 22 [ 683.849696][T12422] bridge3: left promiscuous mode [ 685.281484][T12425] loop6: detected capacity change from 0 to 2640 [ 685.289729][T12425] buffer_io_error: 25 callbacks suppressed [ 685.289744][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.304284][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.312795][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.321295][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.330991][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.339644][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.347628][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.356264][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.364705][T12425] ldm_validate_partition_table(): Disk read failed. [ 685.371978][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.379983][T12425] Buffer I/O error on dev loop6, logical block 0, async page read [ 685.388010][T12425] Dev loop6: unable to read RDB block 0 [ 685.394001][T12425] loop6: unable to read partition table [ 685.400789][T12425] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 685.464321][T12425] blk_print_req_error: 25 callbacks suppressed [ 685.464357][T12425] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 685.481397][T12425] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 685.492291][T12425] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 685.502850][T12425] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 685.513962][T12425] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 685.524332][T12425] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 685.534792][T12425] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 685.545250][T12425] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 686.918780][ T1625] usbhid 5-1:0.0: can't add hid device: -71 [ 686.924785][ T1625] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 686.957937][T12442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1292'. [ 686.983425][ T1625] usb 5-1: USB disconnect, device number 16 [ 687.005263][T12438] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 687.404548][ T29] audit: type=1400 audit(1776007759.714:981): avc: denied { setopt } for pid=12443 comm="syz.0.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 687.661342][T12454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1284'. [ 687.959124][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1293'. [ 687.968252][T12470] smc: net device wlan0 applied user defined pnetid SYZ0 [ 688.072884][ T29] audit: type=1400 audit(1776007760.394:982): avc: denied { block_suspend } for pid=12469 comm="syz.4.1298" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 689.068754][ T1625] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 689.079866][ T47] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 689.232556][ T1625] usb 3-1: unable to get BOS descriptor or descriptor too short [ 689.240840][ T1625] usb 3-1: not running at top speed; connect to a high speed hub [ 689.256041][ T1625] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 689.265191][ T1625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.273576][ T1625] usb 3-1: Product: syz [ 689.277825][ T1625] usb 3-1: Manufacturer: syz [ 689.282489][ T1625] usb 3-1: SerialNumber: syz [ 689.357516][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 689.367043][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 689.377913][ T47] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 689.391084][ T47] usb 1-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 689.406224][ T47] usb 1-1: config 1 has no interface number 0 [ 689.415718][ T47] usb 1-1: config 1 interface 206 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.789856][ T47] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 689.800516][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.808767][ T47] usb 1-1: Product: syz [ 689.813696][ T47] usb 1-1: Manufacturer: syz [ 689.818481][ T47] usb 1-1: SerialNumber: syz [ 689.818700][ T1625] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 689.853370][T12481] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 689.868394][T12481] bond1: (slave lo): Enslaving as an active interface with an up link [ 689.881821][T12481] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 689.934874][ T1625] usb 3-1: USB disconnect, device number 12 [ 689.977277][T11767] udevd[11767]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.106183][ T47] uvcvideo 1-1:1.206: Found UVC 0.00 device syz (152d:0310) [ 690.114259][ T47] uvcvideo 1-1:1.206: No valid video chain found. [ 690.124966][ T47] usb 1-1: USB disconnect, device number 20 [ 690.368869][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1301'. [ 690.756421][T12487] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 691.024223][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 691.133353][T12508] siw: device registration error -23 [ 691.185257][ T24] libceph: connect (1)[c::]:6789 error -101 [ 691.193655][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 691.347082][T12507] ceph: No mds server is up or the cluster is laggy [ 691.503186][ T24] libceph: connect (1)[c::]:6789 error -101 [ 691.525615][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 691.592790][T12519] sp0: Synchronizing with TNC [ 691.828303][T12525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1307'. [ 692.034347][T12518] [U] è [ 692.172381][ T29] audit: type=1400 audit(1776007764.494:983): avc: denied { wake_alarm } for pid=12529 comm="syz.1.1309" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.642971][ T29] audit: type=1400 audit(1776007764.574:984): avc: denied { create } for pid=12528 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 692.814233][T12540] sp0: Synchronizing with TNC [ 694.403853][T12551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1312'. [ 694.965282][T12539] [U] è [ 695.481253][T12569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1315'. [ 695.843692][T12570] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1315'. [ 695.856688][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 697.031297][ T29] audit: type=1400 audit(1776007769.194:985): avc: denied { read } for pid=12578 comm="syz.2.1317" dev="sockfs" ino=34298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 697.248251][T12581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.266521][ T24] lo speed is unknown, defaulting to 1000 [ 697.276759][ T24] syz2: Port: 1 Link ACTIVE [ 697.645620][T12590] overlay: Unknown parameter 'dont_hash' [ 697.668818][ T29] audit: type=1400 audit(1776007769.934:986): avc: denied { write } for pid=12587 comm="syz.0.1319" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 698.114541][T12592] sp0: Synchronizing with TNC [ 698.809809][T12604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1318'. [ 699.155396][T12586] [U] è [ 699.819422][ T29] audit: type=1400 audit(1776007772.104:987): avc: denied { ioctl } for pid=12620 comm="syz.4.1325" path="socket:[33630]" dev="sockfs" ino=33630 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 700.003794][ T1625] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 700.163105][ T1625] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 700.172326][ T1625] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 700.181661][ T1625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.193398][ T1625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.214411][ T1625] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.235248][ T1625] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 700.245741][ T1625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.256425][ T1625] usb 3-1: config 0 descriptor?? [ 701.450440][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 701.884394][ T29] audit: type=1400 audit(1776007774.134:988): avc: denied { read } for pid=12616 comm="syz.2.1324" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 701.929208][ T29] audit: type=1400 audit(1776007774.144:989): avc: denied { open } for pid=12616 comm="syz.2.1324" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 702.251345][ T47] libceph: connect (1)[c::]:6789 error -101 [ 702.257587][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 702.403355][T12644] ceph: No mds server is up or the cluster is laggy [ 702.521151][ T47] libceph: connect (1)[c::]:6789 error -101 [ 702.528507][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 703.482077][ T1625] usbhid 3-1:0.0: can't add hid device: -71 [ 703.488077][ T1625] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 703.540486][ T1625] usb 3-1: USB disconnect, device number 13 [ 705.057191][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 705.247120][T12666] sp0: Synchronizing with TNC [ 705.478928][T12670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1335'. [ 705.770250][T12665] [U] è [ 706.365645][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 706.984719][T12697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1340'. [ 707.088471][ T29] audit: type=1400 audit(1776007779.394:990): avc: denied { ioctl } for pid=12695 comm="syz.1.1331" path="socket:[33743]" dev="sockfs" ino=33743 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 707.621844][ T29] audit: type=1400 audit(1776007779.944:991): avc: denied { connect } for pid=12693 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 707.662937][T12704] xt_l2tp: missing protocol rule (udp|l2tpip) [ 707.691743][ T29] audit: type=1400 audit(1776007779.964:992): avc: denied { lock } for pid=12693 comm="syz.2.1340" path="socket:[34494]" dev="sockfs" ino=34494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 707.796298][ T29] audit: type=1400 audit(1776007779.974:993): avc: denied { bind } for pid=12693 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 708.117783][ T47] libceph: connect (1)[c::]:6789 error -101 [ 708.124474][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 708.175934][T12707] ceph: No mds server is up or the cluster is laggy [ 708.507005][T12724] overlayfs: failed to clone upperpath [ 709.298821][ T29] audit: type=1400 audit(1776007781.414:994): avc: denied { watch } for pid=12716 comm="syz.1.1346" path="/262/bus/file1" dev="tmpfs" ino=1397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 709.817525][T12738] sp0: Synchronizing with TNC [ 710.592635][T12741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12741 comm=syz.1.1348 [ 711.204046][T12750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1350'. [ 711.679699][T12735] [U] è [ 711.684371][ T29] audit: type=1400 audit(1776007784.004:995): avc: denied { read } for pid=12755 comm="syz.4.1353" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 711.728926][ T29] audit: type=1400 audit(1776007784.004:996): avc: denied { open } for pid=12755 comm="syz.4.1353" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 711.757287][ T29] audit: type=1400 audit(1776007784.034:997): avc: denied { connect } for pid=12755 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 711.796439][ T29] audit: type=1400 audit(1776007784.114:998): avc: denied { map } for pid=12755 comm="syz.4.1353" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 711.823565][ T29] audit: type=1400 audit(1776007784.114:999): avc: denied { execute } for pid=12755 comm="syz.4.1353" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 713.881214][T12783] sp0: Synchronizing with TNC [ 714.117095][T12789] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1359'. [ 714.365211][T12782] [U] è [ 715.609395][T12805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.502887][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 717.003202][T12813] 9pnet_virtio: no channels available for device syz [ 718.957070][T12825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1366'. [ 718.989411][ T7337] IPVS: starting estimator thread 0... [ 719.169365][T12828] IPVS: using max 39 ests per chain, 93600 per kthread [ 719.295498][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 720.722435][ T5815] Bluetooth: hci2: unknown advertising packet type: 0x6c [ 720.722504][ T5815] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 720.778747][ T5815] Bluetooth: hci2: Malformed LE Event: 0x02 [ 721.032863][ T29] audit: type=1400 audit(1776007793.354:1000): avc: denied { setopt } for pid=12846 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 721.082127][ T29] audit: type=1400 audit(1776007793.374:1001): avc: denied { listen } for pid=12846 comm="syz.2.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 721.102236][ T29] audit: type=1400 audit(1776007793.384:1002): avc: denied { ioctl } for pid=12846 comm="syz.2.1371" path="socket:[35030]" dev="sockfs" ino=35030 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 721.360057][T12855] blktrace: Concurrent blktraces are not allowed on sg0 [ 721.610347][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 721.918314][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1374'. [ 721.936721][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.243981][ T29] audit: type=1400 audit(1776007794.214:1003): avc: denied { create } for pid=12856 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 722.453982][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.478037][ T9] usb 5-1: config 0 has no interfaces? [ 722.489248][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.498716][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.512537][ T9] usb 5-1: config 0 descriptor?? [ 723.274375][T12869] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 723.607204][T12875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1376'. [ 724.558390][T12893] pimreg: entered allmulticast mode [ 724.629666][T12893] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 724.924464][ T1625] usb 5-1: USB disconnect, device number 17 [ 725.194486][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 725.407626][T12904] 9pnet_virtio: no channels available for device syz [ 728.679574][T12924] 9pnet_virtio: no channels available for device syz [ 729.729099][ T29] audit: type=1400 audit(1776007801.044:1004): avc: denied { bind } for pid=12922 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 732.023129][ T29] audit: type=1400 audit(1776007803.344:1005): avc: denied { append } for pid=12947 comm="syz.4.1392" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 732.783130][T12956] netlink: 'syz.3.1393': attribute type 4 has an invalid length. [ 732.934165][T12960] netlink: 'syz.3.1393': attribute type 4 has an invalid length. [ 733.007682][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 733.254400][ T29] audit: type=1804 audit(1776007804.544:1006): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1394" name="/newroot/272/file1" dev="fuse" ino=1 res=1 errno=0 [ 733.327242][ T29] audit: type=1800 audit(1776007804.544:1007): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1394" name="/" dev="fuse" ino=1 res=0 errno=0 [ 733.349270][ T29] audit: type=1800 audit(1776007804.554:1008): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1394" name="/" dev="fuse" ino=1 res=0 errno=0 [ 733.620188][T12972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1395'. [ 734.091995][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'. [ 734.130256][ T7337] libceph: connect (1)[c::]:6789 error -101 [ 734.136400][ T7337] libceph: mon0 (1)[c::]:6789 connect error [ 734.204653][T12989] 9pnet_virtio: no channels available for device syz [ 734.411794][ T47] libceph: connect (1)[c::]:6789 error -101 [ 734.432503][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 734.949878][ T47] libceph: connect (1)[c::]:6789 error -101 [ 734.956066][ T47] libceph: mon0 (1)[c::]:6789 connect error [ 735.305285][T12984] ceph: No mds server is up or the cluster is laggy [ 735.381571][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1400'. [ 736.239626][ T29] audit: type=1400 audit(1776007807.564:1009): avc: denied { connect } for pid=12999 comm="syz.4.1402" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 736.548697][ C1] ------------[ cut here ]------------ [ 736.554571][ C1] ODEBUG: free active (active state 0) object: ffff88803427dc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 736.567465][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.4.1402/13001 [ 736.577649][ C1] Modules linked in: [ 736.581934][ C1] CPU: 1 UID: 0 PID: 13001 Comm: syz.4.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.592910][ C1] Tainted: [L]=SOFTLOCKUP [ 736.597332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.607442][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 736.613298][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 736.633026][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 736.639117][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 736.647070][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45110 [ 736.655055][ C1] RBP: 0000000000000001 R08: ffff88803427dc90 R09: ffffffff8bb2bba0 [ 736.663142][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 736.671140][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0250 R15: ffffc90000a08b38 [ 736.679330][ C1] FS: 00007f2cb8a976c0(0000) GS:ffff888124438000(0000) knlGS:0000000000000000 [ 736.688264][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.694852][ C1] CR2: 00002000000bb000 CR3: 00000000454d2000 CR4: 00000000003526f0 [ 736.702825][ C1] Call Trace: [ 736.706083][ C1] [ 736.708917][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 736.714530][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 736.720340][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 736.725884][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 736.731969][ C1] ? mark_held_locks+0x40/0x70 [ 736.736719][ C1] ? kasan_quarantine_put+0x104/0x240 [ 736.742093][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 736.747277][ C1] ? rose_timer_expiry+0x53f/0x630 [ 736.752409][ C1] kfree+0x38f/0x6b0 [ 736.756295][ C1] rose_timer_expiry+0x53f/0x630 [ 736.761250][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 736.766695][ C1] call_timer_fn+0x19a/0x670 [ 736.771304][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 736.776408][ C1] ? debug_object_activate+0x331/0x490 [ 736.781891][ C1] ? __run_timers+0x747/0xb30 [ 736.786555][ C1] ? rcu_is_watching+0x12/0xc0 [ 736.791330][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 736.796771][ C1] __run_timers+0x757/0xb30 [ 736.801284][ C1] ? __pfx___run_timers+0x10/0x10 [ 736.806302][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 736.811328][ C1] run_timer_base+0x114/0x190 [ 736.815986][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 736.821180][ C1] run_timer_softirq+0x1a/0x50 [ 736.825926][ C1] handle_softirqs+0x1eb/0x9e0 [ 736.830684][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 736.835961][ C1] __irq_exit_rcu+0xef/0x150 [ 736.840554][ C1] irq_exit_rcu+0x9/0x30 [ 736.844782][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 736.850412][ C1] [ 736.853322][ C1] [ 736.856253][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 736.862227][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 736.868278][ C1] Code: 60 00 be 03 00 00 00 5b e9 a2 25 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 88 05 12 <48> 8b 34 24 65 48 8b 15 61 88 05 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 736.887881][ C1] RSP: 0018:ffffc90004f0f8e0 EFLAGS: 00000282 [ 736.893970][ C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 736.901962][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 736.909940][ C1] RBP: ffffc90004f0f988 R08: 0000000000000001 R09: ffffed100f638e22 [ 736.917890][ C1] R10: ffff88807b1c7117 R11: 0000000000000000 R12: 00002000000bb000 [ 736.925887][ C1] R13: ffff888079aaa4c0 R14: 0000000000000000 R15: 0000000000000000 [ 736.933876][ C1] do_user_addr_fault+0x7e3/0x12f0 [ 736.938997][ C1] exc_page_fault+0x6f/0xd0 [ 736.943493][ C1] asm_exc_page_fault+0x26/0x30 [ 736.948330][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 736.954140][ C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 736.973842][ C1] RSP: 0018:ffffc90004f0fa30 EFLAGS: 00050206 [ 736.979904][ C1] RAX: 0000000000000001 RBX: 00002000000bb000 RCX: 0000000000000038 [ 736.987861][ C1] RDX: 0000000000000001 RSI: 00002000000bb000 RDI: ffffc90004f0fa88 [ 736.995832][ C1] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520009e1f57 [ 737.003804][ C1] R10: ffffc90004f0fabf R11: 0000000000000000 R12: 0000000000000000 [ 737.011781][ C1] R13: ffffc90004f0fa88 R14: 00002000000bb000 R15: dffffc0000000000 [ 737.019770][ C1] _copy_from_user+0x98/0xd0 [ 737.024454][ C1] copy_msghdr_from_user+0x9f/0x4f0 [ 737.029670][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 737.035465][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.040233][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 737.045077][ C1] ? kfree+0x2ec/0x6b0 [ 737.049164][ C1] ? irqentry_exit+0x180/0x670 [ 737.053911][ C1] ___sys_recvmsg+0xdd/0x1a0 [ 737.058487][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 737.063732][ C1] ? __pfx___might_resched+0x10/0x10 [ 737.069028][ C1] do_recvmmsg+0x301/0x760 [ 737.073431][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 737.078361][ C1] ? __lock_acquire+0x4a5/0x2630 [ 737.083306][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 737.088323][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 737.095186][ C1] ? kcov_ioctl+0x16a/0x720 [ 737.099690][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.104441][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 737.109482][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 737.115024][ C1] ? kcov_ioctl+0x16a/0x720 [ 737.119551][ C1] do_syscall_64+0x106/0xf80 [ 737.124144][ C1] ? clear_bhb_loop+0x40/0x90 [ 737.128819][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.134694][ C1] RIP: 0033:0x7f2cb7b9c819 [ 737.139106][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.158713][ C1] RSP: 002b:00007f2cb8a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 737.167107][ C1] RAX: ffffffffffffffda RBX: 00007f2cb7e16090 RCX: 00007f2cb7b9c819 [ 737.175087][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 737.183076][ C1] RBP: 00007f2cb7c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 737.191084][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 737.199506][ C1] R13: 00007f2cb7e16128 R14: 00007f2cb7e16090 R15: 00007fff84474558 [ 737.207498][ C1] [ 737.210530][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 737.217802][ C1] CPU: 1 UID: 0 PID: 13001 Comm: syz.4.1402 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.228713][ C1] Tainted: [L]=SOFTLOCKUP [ 737.233024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 737.243064][ C1] Call Trace: [ 737.246325][ C1] [ 737.249149][ C1] dump_stack_lvl+0x100/0x190 [ 737.253815][ C1] vpanic+0x552/0x970 [ 737.257773][ C1] ? __pfx_vpanic+0x10/0x10 [ 737.262265][ C1] panic+0xd1/0xe0 [ 737.265976][ C1] ? __pfx_panic+0x10/0x10 [ 737.270374][ C1] ? check_panic_on_warn+0x1f/0x90 [ 737.275481][ C1] check_panic_on_warn.cold+0x19/0x34 [ 737.280830][ C1] ? debug_print_object+0x18e/0x2a0 [ 737.286010][ C1] __warn.cold+0x191/0x348 [ 737.290406][ C1] __report_bug+0x296/0x3d0 [ 737.294889][ C1] ? debug_print_object+0x18e/0x2a0 [ 737.300067][ C1] ? __pfx___report_bug+0x10/0x10 [ 737.305168][ C1] ? lock_acquire+0x1cf/0x380 [ 737.309826][ C1] ? mark_held_locks+0x40/0x70 [ 737.314572][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.320357][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 737.325530][ C1] report_bug_entry+0xe1/0x290 [ 737.330291][ C1] ? debug_print_object+0x19b/0x2a0 [ 737.335470][ C1] handle_bug+0x1cd/0x2a0 [ 737.339798][ C1] exc_invalid_op+0x17/0x50 [ 737.344313][ C1] asm_exc_invalid_op+0x1a/0x20 [ 737.349152][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 737.354941][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 08 e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 737.374554][ C1] RSP: 0018:ffffc90000a08a38 EFLAGS: 00010246 [ 737.380599][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 737.388546][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45110 [ 737.396501][ C1] RBP: 0000000000000001 R08: ffff88803427dc90 R09: ffffffff8bb2bba0 [ 737.404460][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 737.412499][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7d0250 R15: ffffc90000a08b38 [ 737.420542][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 737.426188][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 737.431820][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.437729][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 737.443282][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 737.449373][ C1] ? mark_held_locks+0x40/0x70 [ 737.454128][ C1] ? kasan_quarantine_put+0x104/0x240 [ 737.459481][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 737.464672][ C1] ? rose_timer_expiry+0x53f/0x630 [ 737.469774][ C1] kfree+0x38f/0x6b0 [ 737.473674][ C1] rose_timer_expiry+0x53f/0x630 [ 737.478594][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 737.484041][ C1] call_timer_fn+0x19a/0x670 [ 737.488632][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 737.493746][ C1] ? debug_object_activate+0x331/0x490 [ 737.499198][ C1] ? __run_timers+0x747/0xb30 [ 737.503857][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.508622][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 737.514071][ C1] __run_timers+0x757/0xb30 [ 737.518571][ C1] ? __pfx___run_timers+0x10/0x10 [ 737.523588][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 737.528599][ C1] run_timer_base+0x114/0x190 [ 737.533275][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 737.538468][ C1] run_timer_softirq+0x1a/0x50 [ 737.543212][ C1] handle_softirqs+0x1eb/0x9e0 [ 737.547958][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 737.553225][ C1] __irq_exit_rcu+0xef/0x150 [ 737.557793][ C1] irq_exit_rcu+0x9/0x30 [ 737.562100][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 737.567714][ C1] [ 737.570652][ C1] [ 737.573568][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 737.579524][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 737.585568][ C1] Code: 60 00 be 03 00 00 00 5b e9 a2 25 ee 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 88 05 12 <48> 8b 34 24 65 48 8b 15 61 88 05 12 a9 00 01 ff 00 74 1b f6 c4 01 [ 737.605851][ C1] RSP: 0018:ffffc90004f0f8e0 EFLAGS: 00000282 [ 737.611906][ C1] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 737.619856][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 737.627823][ C1] RBP: ffffc90004f0f988 R08: 0000000000000001 R09: ffffed100f638e22 [ 737.635782][ C1] R10: ffff88807b1c7117 R11: 0000000000000000 R12: 00002000000bb000 [ 737.643744][ C1] R13: ffff888079aaa4c0 R14: 0000000000000000 R15: 0000000000000000 [ 737.651712][ C1] do_user_addr_fault+0x7e3/0x12f0 [ 737.656812][ C1] exc_page_fault+0x6f/0xd0 [ 737.661300][ C1] asm_exc_page_fault+0x26/0x30 [ 737.666127][ C1] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 737.671930][ C1] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 737.691520][ C1] RSP: 0018:ffffc90004f0fa30 EFLAGS: 00050206 [ 737.697577][ C1] RAX: 0000000000000001 RBX: 00002000000bb000 RCX: 0000000000000038 [ 737.705538][ C1] RDX: 0000000000000001 RSI: 00002000000bb000 RDI: ffffc90004f0fa88 [ 737.713487][ C1] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520009e1f57 [ 737.721439][ C1] R10: ffffc90004f0fabf R11: 0000000000000000 R12: 0000000000000000 [ 737.729407][ C1] R13: ffffc90004f0fa88 R14: 00002000000bb000 R15: dffffc0000000000 [ 737.737380][ C1] _copy_from_user+0x98/0xd0 [ 737.741959][ C1] copy_msghdr_from_user+0x9f/0x4f0 [ 737.747138][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 737.752927][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.757673][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 737.762502][ C1] ? kfree+0x2ec/0x6b0 [ 737.766571][ C1] ? irqentry_exit+0x180/0x670 [ 737.771337][ C1] ___sys_recvmsg+0xdd/0x1a0 [ 737.775917][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 737.781130][ C1] ? __pfx___might_resched+0x10/0x10 [ 737.786397][ C1] do_recvmmsg+0x301/0x760 [ 737.790895][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 737.795813][ C1] ? __lock_acquire+0x4a5/0x2630 [ 737.800748][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 737.805769][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 737.812631][ C1] ? kcov_ioctl+0x16a/0x720 [ 737.817137][ C1] ? rcu_is_watching+0x12/0xc0 [ 737.821910][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 737.826929][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 737.832478][ C1] ? kcov_ioctl+0x16a/0x720 [ 737.836984][ C1] do_syscall_64+0x106/0xf80 [ 737.841556][ C1] ? clear_bhb_loop+0x40/0x90 [ 737.846236][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.852118][ C1] RIP: 0033:0x7f2cb7b9c819 [ 737.856517][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.876102][ C1] RSP: 002b:00007f2cb8a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 737.884499][ C1] RAX: ffffffffffffffda RBX: 00007f2cb7e16090 RCX: 00007f2cb7b9c819 [ 737.892461][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 737.900413][ C1] RBP: 00007f2cb7c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 737.908374][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 737.916323][ C1] R13: 00007f2cb7e16128 R14: 00007f2cb7e16090 R15: 00007fff84474558 [ 737.924284][ C1] [ 737.927619][ C1] Kernel Offset: disabled [ 737.931927][ C1] Rebooting in 86400 seconds..