last executing test programs: 3m40.633532022s ago: executing program 2 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40002042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) close(0x3) wait4(r3, 0x0, 0x8, 0x0) wait4(r2, 0x0, 0x20000008, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x1) 3m39.721551423s ago: executing program 2 (id=695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c1, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffbf, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0xd18d3}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0x6, &(0x7f0000000140)="194e8c9ed853", 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x4) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000340)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c245da2c36ea25b51ab452e6b46d63547431b5ef55a5493c3cf1e396417e40fbd539da2980f5e8903134c44329f22dea9459e8f0eb01f963134241ec7068f4ad180a960f2295317d7f508d39de80cc06da3721e854fd3408d8f19dd606886344362beda6f713fe8e30746a1", 0xc2, 0x10, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) read$FUSE(r7, &(0x7f0000002100)={0x2020}, 0x2020) ioctl$sock_inet_SIOCSARP(r9, 0xc0046686, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast1}, {0x0, @broadcast}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'tunl0\x00'}) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 3m38.230794067s ago: executing program 0 (id=708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3m38.077889383s ago: executing program 2 (id=711): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1, 0xff, 0x0) 3m38.007584034s ago: executing program 0 (id=712): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x7f, 0x1, 0x5, 0xcfc, 0x5}}, {0xe, 0x2, [0x14f4, 0x3571, 0x3, 0xa685, 0x1]}}, {{0x1c, 0x1, {0x3b, 0xb, 0xa1, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xfe4, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x7706, 0x0, 0x2, 0xd, 0xa}}, {0x18, 0x2, [0x5, 0x8, 0x4, 0xff7f, 0x9, 0x7, 0xd2a, 0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x80, 0x83, 0x4, 0x1, 0x0, 0xeb, 0x445, 0x5}}, {0xe, 0x2, [0x1ff, 0x1, 0x51, 0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x42b, 0x9, 0x5, 0x5, 0x40, 0xa]}}, {{0x1c, 0x1, {0x1, 0xe, 0x800, 0x7623, 0x2, 0xfffffc00, 0x401, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x16c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f00000001c0)=0x1080, 0x4) 3m38.00470663s ago: executing program 2 (id=713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m37.808889882s ago: executing program 1 (id=714): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 3m37.21128578s ago: executing program 1 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$MSR(0x0, 0x547, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) pipe(&(0x7f0000000080)) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000280)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) splice(r3, 0x0, r5, 0x0, 0x80, 0x4) read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = dup2(r8, r7) close_range(r9, 0xffffffffffffffff, 0x0) 3m37.050672184s ago: executing program 0 (id=718): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004) 3m37.027063722s ago: executing program 3 (id=719): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 3m36.984043589s ago: executing program 0 (id=720): socket(0x6, 0x3, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000240)={r2}) 3m36.937143881s ago: executing program 3 (id=721): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x35f4, 0x8, 0x3, 0x2f2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 3m36.92096284s ago: executing program 3 (id=723): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents64(r2, &(0x7f0000000000)=""/48, 0x30) getdents(r2, &(0x7f00000005c0)=""/203, 0xcb) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x308a, &(0x7f0000000640)={0x0, 0xbf2f, 0x800, 0x103fc, 0x13c}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 3m36.864578805s ago: executing program 1 (id=724): socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}], 0x1, 0x6) 3m34.353955355s ago: executing program 3 (id=725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r4, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 3m34.325830669s ago: executing program 1 (id=726): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 3m34.002485594s ago: executing program 4 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008050) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0xd, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0x2) 3m33.98573321s ago: executing program 0 (id=728): creat(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) lseek(r3, 0x0, 0x4) 3m33.109018693s ago: executing program 1 (id=729): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 3m33.108682486s ago: executing program 3 (id=730): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r4, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x16c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xffffffff}]}}, @TCA_STAB={0x130, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x7, 0x4, 0x0, 0x6, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1, 0x7f, 0x1, 0x5, 0xcfc, 0x5}}, {0xe, 0x2, [0x14f4, 0x3571, 0x3, 0xa685, 0x1]}}, {{0x1c, 0x1, {0x3b, 0xb, 0xa1, 0x3, 0x2, 0x3, 0x9, 0x3}}, {0xa, 0x2, [0x4, 0xfe4, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x7706, 0x0, 0x2, 0xd, 0xa}}, {0x18, 0x2, [0x5, 0x8, 0x4, 0xff7f, 0x9, 0x7, 0xd2a, 0x0, 0x2, 0x8]}}, {{0x1c, 0x1, {0x80, 0x83, 0x4, 0x1, 0x0, 0xeb, 0x445, 0x5}}, {0xe, 0x2, [0x1ff, 0x1, 0x51, 0x5, 0x8]}}, {{0x1c, 0x1, {0x6, 0x8, 0x1, 0x3, 0x1, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xa, 0x42b, 0x9, 0x5, 0x5, 0x40, 0xa]}}, {{0x1c, 0x1, {0x1, 0xe, 0x800, 0x7623, 0x2, 0xfffffc00, 0x401, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x16c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f00000001c0)=0x1080, 0x4) 3m33.108551771s ago: executing program 4 (id=731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 3m33.030772206s ago: executing program 1 (id=732): syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 3m30.736053293s ago: executing program 2 (id=733): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x35f4, 0x8, 0x3, 0x2f2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 3m30.735283198s ago: executing program 2 (id=734): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400048008000240000000120800014000000001140000001100010000000000000000070000000a9c5c00ad1c760da0cbb19d461854b83062491a1cce9959a6e493fe3ab1ad0133"], 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 3m30.711426247s ago: executing program 0 (id=735): mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) 3m29.646151602s ago: executing program 4 (id=736): socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xe7d4c009da6c1985}], 0x1, 0x6) 3m28.499873191s ago: executing program 3 (id=737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$unix(0x1, 0x2, 0x0) shutdown(r6, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 3m25.522710335s ago: executing program 4 (id=738): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x7, 0x6, 0x1, 0x33, "afd609", 0x9}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080010000008e04be686f"], 0x48}}, 0x0) 3m9.266667211s ago: executing program 32 (id=735): mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) 2m52.931120498s ago: executing program 33 (id=732): syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 2m49.70870708s ago: executing program 34 (id=734): r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xfffc}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400048008000240000000120800014000000001140000001100010000000000000000070000000a9c5c00ad1c760da0cbb19d461854b83062491a1cce9959a6e493fe3ab1ad0133"], 0x90}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) timer_settime(0x0, 0x0, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) 2m35.75568433s ago: executing program 4 (id=742): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$lock(r0, 0x11, 0x0) 2m30.650715283s ago: executing program 35 (id=737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = socket$unix(0x1, 0x2, 0x0) shutdown(r6, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) 2m22.768145827s ago: executing program 4 (id=744): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x35f4, 0x8, 0x3, 0x2f2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 2m18.571214344s ago: executing program 5 (id=739): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 2m14.17046589s ago: executing program 6 (id=740): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 1m57.167593887s ago: executing program 7 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r4, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1m42.112956806s ago: executing program 36 (id=744): pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x35f4, 0x8, 0x3, 0x2f2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r3, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 1m30.780428238s ago: executing program 8 (id=743): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x1d0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x2e, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x10060) r10 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) 1m23.025963523s ago: executing program 5 (id=739): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x0) 1m7.974235569s ago: executing program 6 (id=740): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 1m5.563203633s ago: executing program 7 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r4, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1m5.322097997s ago: executing program 9 (id=745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4ea3, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x59d5}}, 0x0, 0x0, 0x17, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 1m4.9384261s ago: executing program 8 (id=743): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb378db7ceba0f98b13c1c01722b00000005001b0001"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x4, 0x9, 0x7, 0x1, 0xfffffe00, 0x5, 0x80000000, [0x6, 0xfffffffd]}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x1d0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x2e, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x10060) r10 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) 29.790107802s ago: executing program 6 (id=740): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 25.149898053s ago: executing program 9 (id=745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4ea3, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x59d5}}, 0x0, 0x0, 0x17, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 8.606529252s ago: executing program 7 (id=741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r4, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 0s ago: executing program 6 (id=740): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 59.331259][ T30] audit: type=1400 audit(1756136930.075:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.334622][ T5831] cgroup: Unknown subsys name 'net' [ 59.359354][ T30] audit: type=1400 audit(1756136930.075:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.381629][ T30] audit: type=1400 audit(1756136930.105:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.522655][ T5831] cgroup: Unknown subsys name 'cpuset' [ 59.530602][ T5831] cgroup: Unknown subsys name 'rlimit' [ 59.685685][ T30] audit: type=1400 audit(1756136930.425:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.717981][ T30] audit: type=1400 audit(1756136930.425:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.742100][ T30] audit: type=1400 audit(1756136930.425:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.771393][ T30] audit: type=1400 audit(1756136930.425:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.791888][ T30] audit: type=1400 audit(1756136930.435:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.794644][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.816725][ T30] audit: type=1400 audit(1756136930.435:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.848603][ T30] audit: type=1400 audit(1756136930.475:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.769002][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.477835][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.477850][ T30] audit: type=1400 audit(1756136935.215:78): avc: denied { create } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.520472][ T30] audit: type=1400 audit(1756136935.215:79): avc: denied { read write } for pid=5841 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.551197][ T30] audit: type=1400 audit(1756136935.215:80): avc: denied { open } for pid=5841 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.574893][ T30] audit: type=1400 audit(1756136935.255:81): avc: denied { ioctl } for pid=5841 comm="syz-executor" path="socket:[5286]" dev="sockfs" ino=5286 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.624604][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.640492][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.642128][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.650206][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.655870][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.668883][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.676362][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.679540][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.683931][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.691109][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.698712][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.705406][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.719169][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.719891][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.726971][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.733855][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.741283][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.754696][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.762429][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.774218][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.775473][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.793206][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.803092][ T5168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.824422][ T5168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.833815][ T30] audit: type=1400 audit(1756136935.515:82): avc: denied { read } for pid=5841 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.860430][ T30] audit: type=1400 audit(1756136935.515:83): avc: denied { open } for pid=5841 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.863343][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.884044][ T30] audit: type=1400 audit(1756136935.515:84): avc: denied { mounton } for pid=5841 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 65.029829][ T30] audit: type=1400 audit(1756136935.765:85): avc: denied { module_request } for pid=5844 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.106829][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 65.254768][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.262802][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.270673][ T5844] bridge_slave_0: entered allmulticast mode [ 65.277346][ T5844] bridge_slave_0: entered promiscuous mode [ 65.285624][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.292950][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.300125][ T5844] bridge_slave_1: entered allmulticast mode [ 65.306775][ T5844] bridge_slave_1: entered promiscuous mode [ 65.396709][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.458188][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.468511][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 65.485662][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 65.545450][ T5844] team0: Port device team_slave_0 added [ 65.579422][ T5844] team0: Port device team_slave_1 added [ 65.613030][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 65.629005][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.636615][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.662704][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.674338][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 65.693598][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.700635][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.726572][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.826171][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.833391][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.840901][ T5843] bridge_slave_0: entered allmulticast mode [ 65.847543][ T5843] bridge_slave_0: entered promiscuous mode [ 65.869349][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.876432][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.883645][ T5841] bridge_slave_0: entered allmulticast mode [ 65.890515][ T5841] bridge_slave_0: entered promiscuous mode [ 65.897472][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.904576][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.911872][ T5843] bridge_slave_1: entered allmulticast mode [ 65.918475][ T5843] bridge_slave_1: entered promiscuous mode [ 65.928748][ T5844] hsr_slave_0: entered promiscuous mode [ 65.934936][ T5844] hsr_slave_1: entered promiscuous mode [ 65.953164][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.960337][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.967421][ T5841] bridge_slave_1: entered allmulticast mode [ 65.974245][ T5841] bridge_slave_1: entered promiscuous mode [ 66.035396][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.047695][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.066246][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.073390][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.080654][ T5852] bridge_slave_0: entered allmulticast mode [ 66.087273][ T5852] bridge_slave_0: entered promiscuous mode [ 66.095765][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.107514][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.138939][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.146203][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.153467][ T5852] bridge_slave_1: entered allmulticast mode [ 66.160297][ T5852] bridge_slave_1: entered promiscuous mode [ 66.197240][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.204562][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.214388][ T5847] bridge_slave_0: entered allmulticast mode [ 66.221350][ T5847] bridge_slave_0: entered promiscuous mode [ 66.238504][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.261224][ T5843] team0: Port device team_slave_0 added [ 66.271086][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.278158][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.285525][ T5847] bridge_slave_1: entered allmulticast mode [ 66.293030][ T5847] bridge_slave_1: entered promiscuous mode [ 66.308114][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.318720][ T5841] team0: Port device team_slave_0 added [ 66.325935][ T5841] team0: Port device team_slave_1 added [ 66.341104][ T5843] team0: Port device team_slave_1 added [ 66.389131][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.400792][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.411780][ T5852] team0: Port device team_slave_0 added [ 66.438246][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.445237][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.471723][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.490474][ T5852] team0: Port device team_slave_1 added [ 66.496448][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.503683][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.529787][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.542247][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.549169][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.575368][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.595277][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.602402][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.628399][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.691782][ T5847] team0: Port device team_slave_0 added [ 66.702051][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.708990][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.735285][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.748510][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.755492][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.781552][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.802389][ T5847] team0: Port device team_slave_1 added [ 66.823505][ T5841] hsr_slave_0: entered promiscuous mode [ 66.829480][ T5841] hsr_slave_1: entered promiscuous mode [ 66.835681][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 66.841949][ T5841] Cannot create hsr debugfs directory [ 66.850684][ T5855] Bluetooth: hci1: command tx timeout [ 66.850770][ T5168] Bluetooth: hci0: command tx timeout [ 66.866733][ T5850] Bluetooth: hci2: command tx timeout [ 66.884045][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.891042][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.917476][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.930032][ T5168] Bluetooth: hci3: command tx timeout [ 66.935658][ T5850] Bluetooth: hci4: command tx timeout [ 66.972827][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.979763][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.006689][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.022516][ T5843] hsr_slave_0: entered promiscuous mode [ 67.028580][ T5843] hsr_slave_1: entered promiscuous mode [ 67.034564][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 67.040555][ T5843] Cannot create hsr debugfs directory [ 67.123907][ T5852] hsr_slave_0: entered promiscuous mode [ 67.130562][ T5852] hsr_slave_1: entered promiscuous mode [ 67.136474][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 67.142311][ T5852] Cannot create hsr debugfs directory [ 67.166951][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.177598][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.194625][ T5847] hsr_slave_0: entered promiscuous mode [ 67.201620][ T5847] hsr_slave_1: entered promiscuous mode [ 67.207491][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 67.213254][ T5847] Cannot create hsr debugfs directory [ 67.239988][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.266626][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.517693][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.535282][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.544830][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.555638][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.624439][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.637612][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.650569][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.672694][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.744915][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.754447][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.765303][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.778569][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.851903][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.864474][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.878798][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.889559][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.900995][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.938814][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.958209][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.012898][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.020126][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.035934][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.054955][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.073301][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.080421][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.098106][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.105215][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.127753][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.134854][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.162222][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.179507][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.196015][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.215139][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.222655][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.244813][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.251934][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.276094][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.293287][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.328791][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.335912][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.351361][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.358514][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.373618][ T30] audit: type=1400 audit(1756136939.115:86): avc: denied { sys_module } for pid=5844 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.425463][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.432631][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.481883][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.488958][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.553794][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.708505][ T5844] veth0_vlan: entered promiscuous mode [ 68.737198][ T5844] veth1_vlan: entered promiscuous mode [ 68.795298][ T5844] veth0_macvtap: entered promiscuous mode [ 68.834460][ T5844] veth1_macvtap: entered promiscuous mode [ 68.895247][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.925876][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.936097][ T5850] Bluetooth: hci2: command tx timeout [ 68.943399][ T5850] Bluetooth: hci0: command tx timeout [ 68.948784][ T5850] Bluetooth: hci1: command tx timeout [ 69.010561][ T5850] Bluetooth: hci4: command tx timeout [ 69.011650][ T5855] Bluetooth: hci3: command tx timeout [ 69.026820][ T1094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.036357][ T1094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.047802][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.067301][ T1094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.076509][ T1094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.106140][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.135888][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.164430][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.228627][ T5841] veth0_vlan: entered promiscuous mode [ 69.258174][ T5852] veth0_vlan: entered promiscuous mode [ 69.307041][ T5841] veth1_vlan: entered promiscuous mode [ 69.332039][ T5852] veth1_vlan: entered promiscuous mode [ 69.345929][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.359809][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.387571][ T5847] veth0_vlan: entered promiscuous mode [ 69.409087][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.428085][ T5847] veth1_vlan: entered promiscuous mode [ 69.436310][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.437092][ T5841] veth0_macvtap: entered promiscuous mode [ 69.458250][ T5852] veth0_macvtap: entered promiscuous mode [ 69.468613][ T5852] veth1_macvtap: entered promiscuous mode [ 69.489422][ T30] audit: type=1400 audit(1756136940.225:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.dVWIxV/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.504468][ T5841] veth1_macvtap: entered promiscuous mode [ 69.522636][ T30] audit: type=1400 audit(1756136940.225:88): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.547283][ T30] audit: type=1400 audit(1756136940.225:89): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.dVWIxV/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.585005][ T5847] veth0_macvtap: entered promiscuous mode [ 69.595678][ T5847] veth1_macvtap: entered promiscuous mode [ 69.608613][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.611960][ T30] audit: type=1400 audit(1756136940.225:90): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.652334][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.656044][ T30] audit: type=1400 audit(1756136940.235:91): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.dVWIxV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.690554][ T30] audit: type=1400 audit(1756136940.235:92): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.dVWIxV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.721070][ T30] audit: type=1400 audit(1756136940.245:93): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.744420][ T30] audit: type=1400 audit(1756136940.265:94): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.748611][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.773405][ T30] audit: type=1400 audit(1756136940.265:95): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="gadgetfs" ino=7795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.778734][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.804429][ T30] audit: type=1400 audit(1756136940.265:96): avc: denied { mount } for pid=5844 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.811609][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.837025][ T5843] veth0_vlan: entered promiscuous mode [ 69.864519][ T1087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.875480][ T1087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.904178][ T5843] veth1_vlan: entered promiscuous mode [ 69.926950][ T1087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.935774][ T1087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.004373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.017033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.053071][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.063538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.223538][ T5843] veth0_macvtap: entered promiscuous mode [ 70.232816][ T5843] veth1_macvtap: entered promiscuous mode [ 70.250763][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.288225][ T1108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.309667][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.324663][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.352569][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.419600][ T5971] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.462119][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.482154][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.518940][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.529513][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.539062][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.559273][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.934735][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.945380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.968535][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.010095][ T5855] Bluetooth: hci1: command tx timeout [ 71.010180][ T5850] Bluetooth: hci2: command tx timeout [ 71.015621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.021261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.029468][ T5855] Bluetooth: hci0: command tx timeout [ 71.043847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 71.053188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.062506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.090320][ T5855] Bluetooth: hci3: command tx timeout [ 71.090362][ T5850] Bluetooth: hci4: command tx timeout [ 71.308804][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.366069][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.384353][ T1094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.453269][ T1094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.497782][ T1094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524000][ T1094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.506382][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.520949][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.968123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.982955][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.091996][ T5850] Bluetooth: hci2: command tx timeout [ 73.092137][ T5855] Bluetooth: hci1: command tx timeout [ 73.097439][ T5168] Bluetooth: hci0: command tx timeout [ 73.175666][ T5850] Bluetooth: hci4: command tx timeout [ 73.181300][ T5168] Bluetooth: hci3: command tx timeout [ 73.310382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.450664][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.458492][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.555859][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.573254][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.676436][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.703969][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.460381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.468884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.565150][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 75.565180][ T30] audit: type=1400 audit(1756136945.605:127): avc: denied { create } for pid=6015 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.712975][ T6020] netlink: 'syz.3.17': attribute type 20 has an invalid length. [ 75.730386][ T30] audit: type=1400 audit(1756136945.605:128): avc: denied { write } for pid=6015 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.807784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.816572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.831807][ T30] audit: type=1400 audit(1756136946.265:129): avc: denied { create } for pid=6014 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.868852][ T30] audit: type=1400 audit(1756136946.285:130): avc: denied { accept } for pid=6014 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.642376][ T975] cfg80211: failed to load regulatory.db [ 76.779676][ T30] audit: type=1400 audit(1756136946.285:131): avc: denied { kexec_image_load } for pid=6014 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 76.947381][ T30] audit: type=1400 audit(1756136946.575:132): avc: denied { create } for pid=6029 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.009012][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.440159][ T30] audit: type=1400 audit(1756136946.605:133): avc: denied { connect } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.508132][ T30] audit: type=1400 audit(1756136946.605:134): avc: denied { bind } for pid=6029 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.576886][ T30] audit: type=1400 audit(1756136946.605:135): avc: denied { ioctl } for pid=6026 comm="syz.4.22" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.679022][ T30] audit: type=1400 audit(1756136946.725:136): avc: denied { read write } for pid=6029 comm="syz.1.19" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.893802][ T6061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6061 comm=syz.3.27 [ 80.136186][ T5980] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.230035][ T5989] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.347678][ T5980] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 80.693158][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.707318][ T5980] usb 3-1: config 0 descriptor?? [ 80.717308][ T5980] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 80.957397][ T5989] usb 1-1: device descriptor read/64, error -71 [ 81.360042][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 81.952769][ T5989] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.089950][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 82.089967][ T30] audit: type=1400 audit(1756136952.805:150): avc: denied { create } for pid=6106 comm="syz.4.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.130661][ T30] audit: type=1400 audit(1756136952.815:151): avc: denied { read write } for pid=6106 comm="syz.4.43" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.159951][ T30] audit: type=1400 audit(1756136952.815:152): avc: denied { open } for pid=6106 comm="syz.4.43" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 82.165640][ T5989] usb 1-1: device descriptor read/64, error -71 [ 82.226787][ T30] audit: type=1400 audit(1756136952.965:153): avc: denied { read } for pid=6113 comm="syz.4.45" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.305953][ T5989] usb usb1-port1: attempt power cycle [ 82.320216][ T975] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.342684][ T5980] usb 3-1: USB disconnect, device number 2 [ 82.560022][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 82.634693][ T30] audit: type=1400 audit(1756136952.965:154): avc: denied { open } for pid=6113 comm="syz.4.45" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.644351][ T975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.666132][ T30] audit: type=1400 audit(1756136952.965:155): avc: denied { ioctl } for pid=6113 comm="syz.4.45" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.693307][ T975] usb 2-1: config 0 has no interface number 0 [ 82.714892][ T30] audit: type=1400 audit(1756136952.965:156): avc: denied { execute } for pid=6113 comm="syz.4.45" path="/8/cpu.stat" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.741449][ T975] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 82.761858][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.539595][ T975] usb 2-1: Product: syz [ 83.547989][ T975] usb 2-1: Manufacturer: syz [ 83.555594][ T975] usb 2-1: SerialNumber: syz [ 83.567152][ T975] usb 2-1: config 0 descriptor?? [ 83.585192][ T975] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 83.696263][ T975] usb 2-1: selecting invalid altsetting 1 [ 83.709485][ T975] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 83.743973][ T6130] vivid-001: ================= START STATUS ================= [ 83.754850][ T6130] vivid-001: Radio HW Seek Mode: Bounded [ 83.768106][ T6130] vivid-001: Radio Programmable HW Seek: false [ 83.777626][ T6130] vivid-001: RDS Rx I/O Mode: Block I/O [ 83.783868][ T6130] vivid-001: Generate RBDS Instead of RDS: false [ 83.790426][ T6130] vivid-001: RDS Reception: true [ 83.795474][ T6130] vivid-001: RDS Program Type: 0 inactive [ 83.801474][ T6130] vivid-001: RDS PS Name: inactive [ 83.806798][ T6130] vivid-001: RDS Radio Text: inactive [ 83.812624][ T6130] vivid-001: RDS Traffic Announcement: false inactive [ 83.819638][ T6130] vivid-001: RDS Traffic Program: false inactive [ 83.830373][ T6130] vivid-001: RDS Music: false inactive [ 83.835975][ T6130] vivid-001: ================== END STATUS ================== [ 84.068874][ T975] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 84.102276][ T975] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 84.140194][ T975] usb 2-1: media controller created [ 84.287003][ T30] audit: type=1400 audit(1756136955.025:157): avc: denied { create } for pid=6138 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.530940][ T30] audit: type=1400 audit(1756136955.145:158): avc: denied { create } for pid=6132 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.849399][ T30] audit: type=1400 audit(1756136955.145:159): avc: denied { bind } for pid=6132 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.865697][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.814104][ T975] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 85.847249][ T975] zl10353_read_register: readreg error (reg=127, ret==-71) [ 85.877131][ T975] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 86.241246][ T975] usb 2-1: USB disconnect, device number 2 [ 86.677064][ T6177] mmap: syz.0.64 (6177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.960022][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 87.977741][ T30] audit: type=1400 audit(1756136958.685:178): avc: denied { read } for pid=6186 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.859906][ T30] audit: type=1400 audit(1756136959.575:179): avc: denied { read write } for pid=6199 comm="syz.1.72" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 89.655833][ T30] audit: type=1400 audit(1756136959.575:180): avc: denied { open } for pid=6199 comm="syz.1.72" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 89.730211][ T30] audit: type=1400 audit(1756136959.735:181): avc: denied { write } for pid=6203 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.904726][ T30] audit: type=1400 audit(1756136960.635:182): avc: denied { name_bind } for pid=6214 comm="syz.4.76" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.195035][ T30] audit: type=1400 audit(1756136960.935:183): avc: denied { create } for pid=6227 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.244161][ T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.295437][ T30] audit: type=1400 audit(1756136961.035:184): avc: denied { ioctl } for pid=6227 comm="syz.3.81" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.466018][ T30] audit: type=1400 audit(1756136961.065:185): avc: denied { set_context_mgr } for pid=6227 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 90.537542][ T975] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 90.596724][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.636754][ T30] audit: type=1400 audit(1756136961.075:186): avc: denied { create } for pid=6227 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.753893][ T975] usb 5-1: config 0 descriptor?? [ 91.325551][ T30] audit: type=1400 audit(1756136962.045:187): avc: denied { read write } for pid=6235 comm="syz.2.85" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.536109][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 92.625389][ T975] usb 5-1: Cannot set autoneg [ 92.637599][ T975] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 93.111252][ T975] usb 5-1: USB disconnect, device number 2 [ 94.375090][ T6292] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 94.384016][ T6292] VFS: Can't find a romfs filesystem on dev nullb0. [ 94.384016][ T6292] [ 94.741855][ T5850] Bluetooth: hci1: Malformed Event: 0x13 [ 94.937767][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 94.937783][ T30] audit: type=1400 audit(1756136965.675:190): avc: denied { create } for pid=6308 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.033941][ T6324] serio: Serial port ptm0 [ 96.058125][ T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.405808][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.437147][ T975] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.493473][ T975] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 96.507699][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.626209][ T6334] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 96.633525][ T6334] VFS: Can't find a romfs filesystem on dev nullb0. [ 96.633525][ T6334] [ 96.643766][ T975] usb 5-1: Product: syz [ 96.648306][ T975] usb 5-1: Manufacturer: syz [ 96.653096][ T975] usb 5-1: SerialNumber: syz [ 96.661284][ T975] usb 5-1: config 0 descriptor?? [ 97.233784][ T975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.494575][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.506040][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.518293][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.538254][ T975] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.557488][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.615821][ T975] usb 2-1: config 0 descriptor?? [ 98.114996][ T975] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.354700][ T975] usb 5-1: USB disconnect, device number 3 [ 98.720330][ T975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.793710][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (dhcpcd) [ 98.920831][ T975] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 98.929733][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.948727][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.960149][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.968706][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.993695][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.006770][ T5980] usb 2-1: USB disconnect, device number 3 [ 99.021666][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.031325][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.040395][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.054488][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.099675][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.119075][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.225022][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.242293][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.258534][ T30] audit: type=1400 audit(1756136969.995:191): avc: denied { unlink } for pid=6386 comm="syz.3.139" name="#1" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.281921][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.329463][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.364651][ T30] audit: type=1400 audit(1756136970.005:192): avc: denied { mount } for pid=6386 comm="syz.3.139" name="/" dev="overlay" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 99.398182][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.418873][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.433280][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.443695][ T6393] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 99.450678][ T6393] VFS: Can't find a romfs filesystem on dev nullb0. [ 99.450678][ T6393] [ 99.493676][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.504032][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.524943][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.546756][ T975] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.555915][ T975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.570150][ T975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.603927][ T975] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.629887][ T975] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.649645][ T975] usb 5-1: Product: syz [ 99.671596][ T975] usb 5-1: Manufacturer: syz [ 99.676216][ T975] usb 5-1: SerialNumber: syz [ 99.757685][ T975] usb 5-1: config 0 descriptor?? [ 100.164275][ T975] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.777871][ T30] audit: type=1400 audit(1756136970.965:193): avc: denied { write } for pid=6402 comm="syz.1.145" path="socket:[9959]" dev="sockfs" ino=9959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.830800][ T5850] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 100.880097][ T30] audit: type=1400 audit(1756136971.585:194): avc: denied { write } for pid=6407 comm="syz.3.146" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.990451][ T975] usb 5-1: USB disconnect, device number 4 [ 101.044583][ T975] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 101.091116][ T6004] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.305050][ T1217] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.331991][ T6004] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 101.342211][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.353728][ T6004] usb 1-1: config 0 descriptor?? [ 101.361464][ T6004] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 101.490594][ T6428] overlayfs: missing 'lowerdir' [ 101.496363][ T30] audit: type=1400 audit(1756136972.205:195): avc: denied { bind } for pid=6425 comm="syz.2.152" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.788765][ T30] audit: type=1400 audit(1756136972.205:196): avc: denied { name_bind } for pid=6425 comm="syz.2.152" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 101.822536][ T1217] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 101.841224][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.868347][ T30] audit: type=1400 audit(1756136972.205:197): avc: denied { node_bind } for pid=6425 comm="syz.2.152" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 101.895831][ T6430] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 101.903624][ T6430] VFS: Can't find a romfs filesystem on dev nullb0. [ 101.903624][ T6430] [ 101.935612][ T30] audit: type=1326 audit(1756136972.275:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 101.962351][ T30] audit: type=1326 audit(1756136972.275:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 101.963074][ T1217] usb 4-1: config 0 descriptor?? [ 101.986339][ T30] audit: type=1326 audit(1756136972.285:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 102.016093][ T30] audit: type=1326 audit(1756136972.285:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 102.135743][ T30] audit: type=1326 audit(1756136972.285:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.2.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 102.291886][ T5928] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.459561][ T6004] usb 1-1: USB disconnect, device number 5 [ 102.470399][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.490886][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.525534][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.547135][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.559877][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.571202][ T5928] usb 5-1: config 0 descriptor?? [ 103.095147][ T5928] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 103.661960][ T1217] usb 4-1: Cannot set autoneg [ 103.668814][ T1217] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 103.686583][ T1217] usb 4-1: USB disconnect, device number 2 [ 105.625084][ T975] usb 5-1: USB disconnect, device number 5 [ 105.635450][ T6476] serio: Serial port ptm0 [ 105.791664][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 105.791682][ T30] audit: type=1400 audit(1756136976.445:224): avc: denied { create } for pid=6482 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.959391][ T30] audit: type=1400 audit(1756136976.695:225): avc: denied { ioctl } for pid=6493 comm="syz.2.176" path="socket:[10425]" dev="sockfs" ino=10425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.986903][ T30] audit: type=1400 audit(1756136976.715:226): avc: denied { write } for pid=6493 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.094777][ T30] audit: type=1400 audit(1756136976.835:227): avc: denied { create } for pid=6497 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.160359][ T30] audit: type=1400 audit(1756136976.835:228): avc: denied { bind } for pid=6497 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.210891][ T30] audit: type=1400 audit(1756136976.835:229): avc: denied { listen } for pid=6497 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.269923][ T30] audit: type=1400 audit(1756136976.835:230): avc: denied { connect } for pid=6497 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.381779][ T30] audit: type=1400 audit(1756136976.985:231): avc: denied { setopt } for pid=6499 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.289942][ T5989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.461705][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.483585][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.516183][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 107.540045][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.574940][ T5989] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.593119][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.613320][ T6004] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.618603][ T5989] usb 1-1: config 0 descriptor?? [ 107.771940][ T6004] usb 4-1: Using ep0 maxpacket: 16 [ 107.793322][ T6004] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 107.807618][ T6004] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 107.827296][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.850599][ T6004] usb 4-1: Product: syz [ 107.854781][ T6004] usb 4-1: Manufacturer: syz [ 107.874112][ T30] audit: type=1326 audit(1756136978.615:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 107.879600][ T6004] usb 4-1: SerialNumber: syz [ 107.948943][ T30] audit: type=1326 audit(1756136978.615:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 108.046264][ T6004] usb 4-1: config 0 descriptor?? [ 108.055397][ T5989] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 108.072222][ T6004] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 108.088754][ T6004] usb 4-1: Detected FT232R [ 108.118462][ T5989] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.371332][ T6004] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 109.491709][ T6004] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 109.499984][ T6004] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 109.512357][ T6004] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.527516][ T6004] usb 4-1: USB disconnect, device number 3 [ 109.541338][ T6004] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 109.562529][ T6004] ftdi_sio 4-1:0.0: device disconnected [ 110.523675][ T6579] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 110.735427][ T5989] usb 1-1: USB disconnect, device number 6 [ 111.599793][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 111.599824][ T30] audit: type=1400 audit(1756136982.305:261): avc: denied { ioctl } for pid=6587 comm="syz.3.214" path="socket:[11319]" dev="sockfs" ino=11319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.320333][ T30] audit: type=1400 audit(1756136983.055:262): avc: denied { mounton } for pid=6609 comm="syz.0.223" path="/38/file0" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.290015][ T30] audit: type=1400 audit(1756136984.025:263): avc: denied { map } for pid=6629 comm="syz.1.229" path="socket:[11412]" dev="sockfs" ino=11412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 113.658088][ T30] audit: type=1400 audit(1756136984.145:264): avc: denied { bind } for pid=6629 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.755931][ T30] audit: type=1400 audit(1756136984.155:265): avc: denied { listen } for pid=6629 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.855407][ T30] audit: type=1400 audit(1756136984.155:266): avc: denied { accept } for pid=6629 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.825129][ T6664] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 114.858523][ T6664] VFS: Can't find a romfs filesystem on dev nullb0. [ 114.858523][ T6664] [ 115.973236][ T6688] overlayfs: missing 'lowerdir' [ 116.363303][ T30] audit: type=1326 audit(1756136986.795:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 116.425862][ T30] audit: type=1326 audit(1756136986.795:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 116.483152][ T30] audit: type=1326 audit(1756136986.795:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 116.521916][ T30] audit: type=1326 audit(1756136986.795:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6683 comm="syz.1.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 117.843376][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 117.843397][ T30] audit: type=1400 audit(1756136988.565:278): avc: denied { create } for pid=6723 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.256261][ T30] audit: type=1400 audit(1756136988.615:279): avc: denied { ioctl } for pid=6723 comm="syz.4.264" path="socket:[10922]" dev="sockfs" ino=10922 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.778819][ T30] audit: type=1400 audit(1756136988.625:280): avc: denied { write } for pid=6723 comm="syz.4.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.961838][ T6736] loop7: detected capacity change from 0 to 16384 [ 119.392880][ T6736] loop7: detected capacity change from 16384 to 16383 [ 119.844525][ T30] audit: type=1400 audit(1756136990.545:281): avc: denied { connect } for pid=6750 comm="syz.0.275" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.890317][ T30] audit: type=1400 audit(1756136990.555:282): avc: denied { write } for pid=6750 comm="syz.0.275" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.490066][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.690079][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 120.714696][ T5914] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 120.740418][ T5914] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 120.754006][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.780939][ T5914] usb 5-1: Product: syz [ 120.795698][ T5914] usb 5-1: Manufacturer: syz [ 120.808072][ T5914] usb 5-1: SerialNumber: syz [ 120.836119][ T5914] usb 5-1: config 0 descriptor?? [ 120.853385][ T5914] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 120.872179][ T5914] usb 5-1: Detected FT232R [ 121.190012][ T5907] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.368675][ T5907] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 121.651271][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 121.658532][ T5914] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 121.666894][ T5914] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 121.678454][ T5914] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.686708][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.692183][ T5914] usb 5-1: USB disconnect, device number 6 [ 121.712214][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.722504][ T5914] ftdi_sio 5-1:0.0: device disconnected [ 121.733223][ T5907] usb 1-1: config 0 descriptor?? [ 121.877255][ T30] audit: type=1400 audit(1756136992.615:283): avc: denied { ioctl } for pid=6786 comm="syz.2.289" path="socket:[11735]" dev="sockfs" ino=11735 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.130202][ T5914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.273004][ T6796] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 122.325598][ T5914] usb 5-1: device descriptor read/64, error -71 [ 122.662946][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 122.833661][ T5914] usb 5-1: device descriptor read/64, error -71 [ 122.971172][ T5914] usb usb5-port1: attempt power cycle [ 122.992004][ T5907] usb 1-1: Cannot set autoneg [ 122.996974][ T5907] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 123.013115][ T5907] usb 1-1: USB disconnect, device number 7 [ 123.081457][ T30] audit: type=1326 audit(1756136993.825:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.105682][ T30] audit: type=1326 audit(1756136993.825:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.129518][ T30] audit: type=1326 audit(1756136993.825:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.153309][ T30] audit: type=1326 audit(1756136993.825:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.182350][ T30] audit: type=1326 audit(1756136993.825:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.205874][ T30] audit: type=1326 audit(1756136993.825:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.237628][ T30] audit: type=1326 audit(1756136993.825:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.270325][ T30] audit: type=1326 audit(1756136993.825:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.293968][ T30] audit: type=1326 audit(1756136993.825:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.317475][ T30] audit: type=1326 audit(1756136993.825:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 123.443010][ T6805] netlink: 128 bytes leftover after parsing attributes in process `syz.1.295'. [ 123.459263][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 124.397169][ T6810] Zero length message leads to an empty skb [ 124.676986][ T6821] overlayfs: missing 'lowerdir' [ 125.394963][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 126.039971][ T5928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.202017][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.213590][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 126.225363][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.235118][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.250862][ T5928] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 126.264656][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.274505][ T5928] usb 4-1: Product: syz [ 126.278834][ T5928] usb 4-1: Manufacturer: syz [ 126.283914][ T5928] usb 4-1: SerialNumber: syz [ 126.295758][ T5928] usb 4-1: config 0 descriptor?? [ 126.311151][ T5928] adutux 4-1:0.0: interrupt endpoints not found [ 127.106553][ T6856] overlayfs: missing 'lowerdir' [ 128.840330][ T5914] usb 4-1: USB disconnect, device number 4 [ 129.132597][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 129.132612][ T30] audit: type=1400 audit(1756136999.875:430): avc: denied { read } for pid=6890 comm="syz.0.329" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.128080][ T30] audit: type=1400 audit(1756136999.905:431): avc: denied { open } for pid=6890 comm="syz.0.329" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.154664][ T30] audit: type=1400 audit(1756136999.915:432): avc: denied { ioctl } for pid=6890 comm="syz.0.329" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 130.310311][ T6004] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.469997][ T6004] usb 4-1: Using ep0 maxpacket: 8 [ 130.480112][ T6004] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 130.488346][ T6004] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.511040][ T6004] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.521127][ T5928] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.579001][ T6004] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.599955][ T44] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 130.608438][ T6004] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.639894][ T6004] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.658270][ T6004] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.741451][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.752639][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.763090][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.782636][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.792399][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.802095][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 130.813509][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.824489][ T5928] usb 5-1: config 0 descriptor?? [ 130.838925][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.854454][ T44] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 130.863729][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.871910][ T44] usb 1-1: Product: syz [ 130.876117][ T44] usb 1-1: Manufacturer: syz [ 130.881348][ T44] usb 1-1: SerialNumber: syz [ 131.352301][ T6004] usb 4-1: usb_control_msg returned -32 [ 131.365642][ T6004] usbtmc 4-1:16.0: can't read capabilities [ 131.376454][ T44] usb 1-1: config 0 descriptor?? [ 131.400400][ T44] adutux 1-1:0.0: interrupt endpoints not found [ 131.542040][ T30] audit: type=1400 audit(1756137002.285:433): avc: denied { write } for pid=6896 comm="syz.3.332" name="usbtmc0" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 131.572385][ T6927] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 131.583854][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 131.601309][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.628032][ T5928] usb 5-1: USB disconnect, device number 10 [ 131.781631][ T44] usb 4-1: USB disconnect, device number 5 [ 132.379420][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.386402][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.462963][ T30] audit: type=1400 audit(1756137003.195:434): avc: denied { name_bind } for pid=6943 comm="syz.4.350" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 133.629648][ T5928] usb 1-1: USB disconnect, device number 8 [ 134.149445][ T6977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.362'. [ 134.158812][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'. [ 134.168284][ T6977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.362'. [ 134.177553][ T6977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.362'. [ 136.879947][ T5989] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 137.279887][ T5989] usb 2-1: Using ep0 maxpacket: 16 [ 137.339542][ T5989] usb 2-1: config 0 has no interfaces? [ 137.357166][ T5989] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 137.870226][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.980936][ T5989] usb 2-1: config 0 descriptor?? [ 138.234012][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.260312][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.288496][ T7013] warning: `syz.1.374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.376535][ T5899] usb 2-1: USB disconnect, device number 4 [ 138.589897][ T5980] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.750053][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 138.756309][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.767222][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.778889][ T5980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.788006][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.800660][ T5980] usb 4-1: config 0 descriptor?? [ 138.870035][ T5928] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.380013][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 139.391273][ T5928] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 139.399613][ T5980] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 139.417669][ T5928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.449491][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.470589][ T5928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.496445][ T5928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.525307][ T5928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.563035][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.644258][ T30] audit: type=1400 audit(1756137010.507:435): avc: denied { watch watch_reads } for pid=7063 comm="syz.2.393" path="/96" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.673144][ T44] usb 4-1: USB disconnect, device number 6 [ 139.695443][ T30] audit: type=1400 audit(1756137010.547:436): avc: denied { wake_alarm } for pid=7063 comm="syz.2.393" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.870456][ T5928] usb 1-1: usb_control_msg returned -32 [ 139.885036][ T5928] usbtmc 1-1:16.0: can't read capabilities [ 140.012698][ T7078] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.399'. [ 140.258335][ T7079] usbtmc 1-1:16.0: usb_bulk_msg returned -71 [ 140.483896][ T5928] usb 1-1: USB disconnect, device number 9 [ 140.763509][ T30] audit: type=1400 audit(1756137011.627:437): avc: denied { write } for pid=7094 comm="syz.4.406" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.882578][ T30] audit: type=1326 audit(1756137015.747:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 144.906405][ T30] audit: type=1326 audit(1756137015.747:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 144.929878][ T30] audit: type=1326 audit(1756137015.777:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 144.954237][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.961965][ T30] audit: type=1326 audit(1756137015.777:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 144.986440][ T30] audit: type=1326 audit(1756137015.777:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.020706][ T30] audit: type=1326 audit(1756137015.797:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.047893][ T30] audit: type=1326 audit(1756137015.797:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.076615][ T30] audit: type=1326 audit(1756137015.797:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.100981][ T30] audit: type=1326 audit(1756137015.797:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.125804][ T30] audit: type=1326 audit(1756137015.797:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7139 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 145.179919][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 145.186251][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 145.194669][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.204511][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.724346][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.736829][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.752461][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.761528][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.894496][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'. [ 146.069930][ T44] usb 2-1: usb_control_msg returned -32 [ 146.075537][ T44] usbtmc 2-1:16.0: can't read capabilities [ 146.174776][ T7152] overlayfs: missing 'lowerdir' [ 146.609297][ T7156] syz.0.426 uses obsolete (PF_INET,SOCK_PACKET) [ 147.690375][ T7158] netlink: 92 bytes leftover after parsing attributes in process `syz.4.427'. [ 147.734156][ T5899] usb 2-1: USB disconnect, device number 5 [ 149.266207][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 149.558491][ T7200] overlayfs: missing 'lowerdir' [ 152.215716][ T7233] fuse: Unknown parameter 'grou00000000000000000000' [ 152.760108][ T7251] overlayfs: missing 'lowerdir' [ 153.209323][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 153.209340][ T30] audit: type=1326 audit(1756137023.987:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 153.255399][ T30] audit: type=1326 audit(1756137023.987:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 153.637357][ T30] audit: type=1326 audit(1756137023.987:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 153.670021][ T30] audit: type=1326 audit(1756137023.987:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 153.718161][ T30] audit: type=1326 audit(1756137023.987:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 154.207497][ T7264] fuse: Unknown parameter 'grou00000000000000000000' [ 154.393298][ T30] audit: type=1326 audit(1756137023.987:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 154.593525][ T30] audit: type=1326 audit(1756137023.987:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 154.617025][ T30] audit: type=1326 audit(1756137023.987:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 154.644045][ T30] audit: type=1326 audit(1756137023.987:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 154.676059][ T30] audit: type=1326 audit(1756137023.987:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7242 comm="syz.3.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61798ebe9 code=0x7ffc0000 [ 155.014002][ T7287] fuse: Bad value for 'fd' [ 155.069924][ T44] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 155.090024][ T5989] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.173989][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 155.217369][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.226287][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.235591][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.248852][ T7303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.260704][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.261073][ T5989] usb 2-1: Using ep0 maxpacket: 16 [ 155.271483][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.282035][ T5989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 155.287306][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 155.306272][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 155.308972][ T5989] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 155.329701][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.330424][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.343146][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.347175][ T5989] usb 2-1: Product: syz [ 155.359027][ T44] usb 1-1: Manufacturer: syz [ 155.366375][ T5989] usb 2-1: Manufacturer: syz [ 155.369399][ T44] usb 1-1: config 0 descriptor?? [ 155.376712][ T5989] usb 2-1: SerialNumber: syz [ 155.384135][ T5989] usb 2-1: config 0 descriptor?? [ 155.392015][ T5989] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 155.402814][ T5989] usb 2-1: Detected FT232R [ 155.640237][ T44] rc_core: IR keymap rc-hauppauge not found [ 155.646163][ T44] Registered IR keymap rc-empty [ 155.656936][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.680024][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 155.742383][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 155.757379][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 156.278179][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.320163][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.362299][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.410945][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.450165][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.589737][ T7318] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.483'. [ 156.660743][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.691620][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.720380][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.760513][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.830036][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 156.866646][ T44] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 156.902586][ T44] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 156.939031][ T44] usb 1-1: USB disconnect, device number 10 [ 157.687660][ T7346] serio: Serial port ptm0 [ 157.826639][ T5989] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 157.862650][ T5989] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 157.957148][ T5989] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 158.183779][ T5989] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 158.404064][ T5989] usb 2-1: USB disconnect, device number 6 [ 158.639381][ T5989] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.810378][ T5989] ftdi_sio 2-1:0.0: device disconnected [ 159.028398][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 159.028431][ T30] audit: type=1326 audit(1756137029.877:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.439888][ T30] audit: type=1326 audit(1756137029.877:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.508440][ T30] audit: type=1326 audit(1756137029.877:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.551677][ T7360] fuse: Unknown parameter 'group_i00000000000000000000' [ 159.586316][ T30] audit: type=1326 audit(1756137029.877:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.619325][ T30] audit: type=1326 audit(1756137029.877:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.673817][ T30] audit: type=1326 audit(1756137029.877:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.716650][ T30] audit: type=1326 audit(1756137029.877:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.755374][ T7364] netlink: 92 bytes leftover after parsing attributes in process `syz.0.500'. [ 159.763763][ T30] audit: type=1326 audit(1756137029.877:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.927753][ T30] audit: type=1326 audit(1756137029.887:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 159.981483][ T7377] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.507'. [ 160.032543][ T30] audit: type=1326 audit(1756137029.887:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.1.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd411f8ebe9 code=0x7ffc0000 [ 160.119370][ T7385] fuse: Unknown parameter 'group_i00000000000000000000' [ 160.158748][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 160.189012][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 160.577565][ T7397] netlink: 92 bytes leftover after parsing attributes in process `syz.1.517'. [ 161.674482][ T7431] QAT: failed to copy from user cfg_data. [ 163.312324][ T7441] netlink: 92 bytes leftover after parsing attributes in process `syz.0.533'. [ 163.352580][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 163.542128][ T7454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.538'. [ 164.455346][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 164.455363][ T30] audit: type=1400 audit(1756137034.757:557): avc: denied { getopt } for pid=7453 comm="syz.3.538" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.305075][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 166.106864][ T7484] netlink: 92 bytes leftover after parsing attributes in process `syz.0.548'. [ 166.234740][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 166.510500][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 166.519295][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 166.528128][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 166.798562][ T7521] fuse: Bad value for 'fd' [ 168.987920][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 171.012887][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 171.577854][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 171.618238][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'. [ 171.700162][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 171.742849][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.590'. [ 171.947824][ T7611] netlink: 104 bytes leftover after parsing attributes in process `syz.4.594'. [ 173.084607][ T7653] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.608'. [ 173.257781][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 174.523010][ T7684] tipc: Enabling of bearer rejected, failed to enable media [ 174.644514][ T30] audit: type=1400 audit(1756137045.570:558): avc: denied { sys_module } for pid=7679 comm="syz.4.619" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.668937][ T7680] binder: 7678:7680 ioctl 40046205 0 returned -22 [ 175.203755][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 177.791739][ T7748] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 177.798868][ T7748] VFS: Can't find a romfs filesystem on dev nullb0. [ 177.798868][ T7748] [ 178.141073][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 178.876357][ T30] audit: type=1400 audit(1756137049.860:559): avc: denied { search } for pid=7752 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.990175][ T30] audit: type=1400 audit(1756137049.880:560): avc: denied { search } for pid=7752 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.014394][ T30] audit: type=1400 audit(1756137049.880:561): avc: denied { search } for pid=7752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.037706][ T30] audit: type=1400 audit(1756137049.890:562): avc: denied { search } for pid=7752 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.060991][ T30] audit: type=1400 audit(1756137049.980:563): avc: denied { read open } for pid=7759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.087338][ T30] audit: type=1400 audit(1756137049.980:564): avc: denied { getattr } for pid=7759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.112885][ T30] audit: type=1400 audit(1756137049.980:565): avc: denied { getattr } for pid=7759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.203233][ T30] audit: type=1400 audit(1756137050.190:566): avc: denied { read } for pid=7764 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.313779][ T30] audit: type=1400 audit(1756137050.210:567): avc: denied { open } for pid=7764 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.945861][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 179.945877][ T30] audit: type=1400 audit(1756137050.930:574): avc: denied { remove_name } for pid=7790 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.368244][ T30] audit: type=1400 audit(1756137051.040:575): avc: denied { unlink } for pid=7790 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=3503 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.590583][ T30] audit: type=1400 audit(1756137052.560:576): avc: denied { read write } for pid=7815 comm="syz.0.657" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.615675][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 181.677589][ T30] audit: type=1400 audit(1756137052.560:577): avc: denied { open } for pid=7815 comm="syz.0.657" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.738755][ T30] audit: type=1400 audit(1756137052.560:578): avc: denied { ioctl } for pid=7815 comm="syz.0.657" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.174510][ T7836] fuse: Bad value for 'fd' [ 182.368691][ T30] audit: type=1326 audit(1756137053.350:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 182.458694][ T30] audit: type=1326 audit(1756137053.350:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 182.482124][ T30] audit: type=1326 audit(1756137053.350:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 182.506147][ T30] audit: type=1326 audit(1756137053.380:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 182.618559][ T30] audit: type=1326 audit(1756137053.420:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7849 comm="syz.2.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f770c58ebe9 code=0x7ffc0000 [ 183.401509][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.669'. [ 183.895102][ T7871] fuse: Bad value for 'user_id' [ 183.913814][ T7871] fuse: Bad value for 'user_id' [ 184.836383][ T7886] fuse: Bad value for 'group_id' [ 185.068605][ T7886] fuse: Bad value for 'group_id' [ 185.292487][ T7897] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.679'. [ 186.126876][ T7920] No control pipe specified [ 186.157551][ T7924] fuse: Bad value for 'user_id' [ 186.171661][ T7924] fuse: Bad value for 'user_id' [ 186.834413][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 186.834428][ T30] audit: type=1400 audit(1756137057.820:607): avc: denied { write } for pid=7954 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.866075][ T7957] fuse: Bad value for 'group_id' [ 186.871365][ T7957] fuse: Bad value for 'group_id' [ 186.922067][ T7961] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.692'. [ 188.062518][ T7994] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.701'. [ 189.496345][ T30] audit: type=1400 audit(1756137060.480:608): avc: denied { connect } for pid=8042 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 189.528002][ T30] audit: type=1400 audit(1756137060.510:609): avc: denied { write } for pid=8042 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.329983][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 192.334172][ T5168] Bluetooth: hci4: command 0x0406 tx timeout [ 192.337527][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 192.348092][ T5168] Bluetooth: hci1: command 0x0406 tx timeout [ 192.348126][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 194.379210][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.583108][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.864901][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.030091][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.064107][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.409984][ T5855] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 245.416701][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.472840][ T5857] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 255.792887][ T8109] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 255.799231][ T8118] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 255.815025][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821471][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.828582][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.839837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.969919][ T5856] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 267.598443][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.607083][ T8122] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 271.859800][ C1] sched: DL replenish lagged too much [ 272.540265][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.762667][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 283.770515][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.829880][ T5850] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 297.197706][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.458821][ T5856] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.463528][ T8131] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 304.480265][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.487480][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.341007][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 315.922468][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.248970][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.263965][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.271770][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.420956][ T5860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.321891][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.329737][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.049116][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.056505][ T5855] Bluetooth: hci7: command 0x1001 tx timeout [ 321.062832][ T5855] Bluetooth: hci6: command 0x1005 tx timeout [ 323.326621][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.332961][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.340079][ T5860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.348899][ T5857] Bluetooth: hci6: Opcode 0x1005 failed: -110 [ 323.355071][ T5850] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 323.369828][ T8137] Bluetooth: hci3: Opcode 0x1009 failed: -110 [ 323.393359][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.475549][ T5860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.482661][ T5860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.629526][ T5860] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.636667][ T5860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.647429][ T5860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.654526][ T5860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.665196][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.730217][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.737317][ T5855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.744416][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.260674][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.274588][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.282043][ T5860] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.289078][ T5860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.157886][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.511393][ T8150] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 337.517753][ T8140] Bluetooth: hci6: Opcode 0x0c16 failed: -110 [ 337.523929][ T8145] Bluetooth: hci7: Opcode 0x0c16 failed: -110 [ 337.534132][ T5855] Bluetooth: hci3: Opcode 0x1009 failed: -110 [ 337.540349][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 337.546987][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.560144][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.568952][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.578323][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.586049][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.595223][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.231577][ T30] audit: type=1400 audit(1756137208.590:610): avc: denied { mounton } for pid=8158 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 338.288215][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 341.119821][ T8156] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 341.129719][ T5850] Bluetooth: hci0: command tx timeout [ 344.645306][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.652543][ T5856] Bluetooth: hci0: command tx timeout [ 351.949901][ T5855] Bluetooth: hci0: command tx timeout [ 351.955343][ T5855] Bluetooth: hci1: command 0x1003 tx timeout [ 359.231297][ T5850] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 359.521255][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.537279][ T5855] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 362.589868][ T5856] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 362.662139][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.307084][ T5857] Bluetooth: hci0: command tx timeout [ 365.313405][ T8167] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 365.319570][ T8163] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 376.798046][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.047500][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.562686][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.158281][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.174657][ T8166] Bluetooth: hci2: Opcode 0x1001 failed: -110 [ 380.199842][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.408713][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.415067][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.996132][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.051417][ T5857] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 397.417989][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 397.909294][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.089896][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.199866][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.309870][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.533274][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.543946][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.276854][ T8179] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 405.958768][ T5855] Bluetooth: hci3: Opcode 0x0c38 failed: -110 [ 413.035834][ T8173] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 413.058832][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.786281][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.794206][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.570087][ T8181] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 417.584556][ T5855] Bluetooth: hci4: command tx timeout [ 417.600019][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.348562][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.882454][ T5857] Bluetooth: hci2: command 0x1003 tx timeout [ 431.867191][ T5850] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 433.655127][ T5855] Bluetooth: hci5: command 0x1009 tx timeout [ 433.719771][ T5856] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 433.909906][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.974219][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.049913][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.129895][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.625106][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 434.675672][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.459936][ T8186] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 442.591253][ T5856] Bluetooth: hci5: command tx timeout [ 442.597082][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.605232][ T31] INFO: task kworker/R-wg-cr:5869 blocked for more than 153 seconds. [ 442.613420][ T31] Not tainted syzkaller #0 [ 442.618342][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 442.627017][ T31] task:kworker/R-wg-cr state:D stack:28552 pid:5869 tgid:5869 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 442.639051][ T31] Workqueue: 0x0 (wg-crypt-wg0) [ 442.644033][ T31] Call Trace: [ 442.647309][ T31] [ 442.650410][ T31] __schedule+0x1190/0x5de0 [ 442.654922][ T31] ? __queue_work+0x431/0x1160 [ 442.659698][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 442.670473][ T31] ? __pfx___schedule+0x10/0x10 [ 442.675326][ T31] ? find_held_lock+0x2b/0x80 [ 442.680049][ T31] ? schedule+0x2d7/0x3a0 [ 442.684370][ T31] ? rescuer_thread+0x839/0xea0 [ 442.689209][ T31] schedule+0xe7/0x3a0 [ 442.693295][ T31] schedule_preempt_disabled+0x13/0x30 [ 442.698742][ T31] __mutex_lock+0x81b/0x1060 [ 442.703362][ T31] ? lockdep_unlock+0x64/0xe0 [ 442.708034][ T31] ? rescuer_thread+0x839/0xea0 [ 442.712908][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 442.717923][ T31] ? irqentry_exit+0x3b/0x90 [ 446.849781][ T31] ? set_cpus_allowed_ptr+0x7b/0xb0 [ 446.855030][ T31] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 446.869771][ T5856] Bluetooth: hci5: command tx timeout [ 446.879776][ T31] ? kthread_set_per_cpu+0xfd/0x170 [ 446.884997][ T31] ? worker_attach_to_pool+0x1be/0x420 [ 446.894951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.900180][ T31] rescuer_thread+0x3aa/0xea0 [ 446.904875][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.909661][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 446.915008][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.931554][ T31] ? __kthread_parkme+0x19e/0x250 [ 446.936642][ T31] ? __pfx_rescuer_thread+0x10/0x10 [ 446.949850][ T31] kthread+0x3c5/0x780 [ 446.953938][ T31] ? __pfx_kthread+0x10/0x10 [ 446.958519][ T31] ? rcu_is_watching+0x12/0xc0 [ 446.979763][ T31] ? __pfx_kthread+0x10/0x10 [ 446.984377][ T31] ret_from_fork+0x5d7/0x6f0 [ 446.988964][ T31] ? __pfx_kthread+0x10/0x10 [ 447.009798][ T31] ret_from_fork_asm+0x1a/0x30 [ 447.014610][ T31] [ 447.017660][ T31] [ 447.017660][ T31] Showing all locks held in the system: [ 447.043435][ T31] 1 lock held by kworker/R-rcu_g/4: [ 447.048652][ T31] 3 locks held by kworker/0:0/9: [ 447.069766][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 447.089761][ T31] #1: ffffc900000e7d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 447.109847][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.129842][ T31] 2 locks held by kworker/0:1/10: [ 447.134878][ T31] 2 locks held by kworker/u8:1/13: [ 447.149810][ T31] 1 lock held by kworker/R-mm_pe/14: [ 447.155104][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 447.179788][ T31] 2 locks held by kworker/1:0/24: [ 447.184838][ T31] 1 lock held by khungtaskd/31: [ 447.189674][ T31] #0: ffffffff8e5c1220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 447.219787][ T31] 3 locks held by kworker/u8:3/37: [ 447.224911][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 447.247659][ T31] #1: ffffc90000ad7d10 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 447.259781][ T31] #2: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 [ 447.269521][ T31] 2 locks held by kworker/1:1/44: [ 447.274567][ T31] 3 locks held by kworker/u8:5/1087: [ 447.279858][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 447.291024][ T31] #1: ffffc9000409fd10 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 447.303036][ T31] #2: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 [ 447.312808][ T31] 3 locks held by kworker/u8:6/1094: [ 447.318074][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 448.873507][ T31] #1: ffffc9000413fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 448.883948][ T31] #2: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 448.893026][ T31] 2 locks held by kworker/u8:7/1108: [ 448.898314][ T31] 2 locks held by getty/5603: [ 448.902996][ T31] #0: ffff88814d01b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 448.912767][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 448.922882][ T31] 1 lock held by syz-executor/5841: [ 448.928063][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 448.937118][ T31] 1 lock held by syz-executor/5843: [ 448.942313][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 448.951282][ T31] 1 lock held by syz-executor/5844: [ 448.956459][ T31] #0: ffffffff8e5cc680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 448.966380][ T31] 2 locks held by kworker/0:3/5845: [ 448.971593][ T31] 3 locks held by kworker/u9:2/5850: [ 448.976870][ T31] #0: ffff8880292cc948 ((wq_completion)hci1#9){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 448.987387][ T31] #1: ffffc9000428fd10 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 448.998918][ T31] #2: ffff88802a548dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 449.008433][ T31] 1 lock held by syz-executor/5852: [ 449.013637][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 449.022613][ T31] 1 lock held by kworker/R-wg-cr/5870: [ 449.028049][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.038064][ T31] 1 lock held by kworker/R-wg-cr/5872: [ 449.043519][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.053537][ T31] 1 lock held by kworker/R-wg-cr/5881: [ 449.058972][ T31] 1 lock held by kworker/R-wg-cr/5882: [ 449.064432][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.074441][ T31] 1 lock held by kworker/R-wg-cr/5883: [ 449.079896][ T31] 1 lock held by kworker/R-wg-cr/5884: [ 449.085335][ T31] 1 lock held by kworker/R-wg-cr/5885: [ 449.090803][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.100832][ T31] 1 lock held by kworker/R-wg-cr/5886: [ 449.106278][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.116397][ T31] 1 lock held by kworker/R-wg-cr/5887: [ 449.121864][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 449.132404][ T31] 1 lock held by kworker/R-wg-cr/5888: [ 449.137841][ T31] 1 lock held by kworker/R-wg-cr/5889: [ 449.143313][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.153323][ T31] 1 lock held by kworker/R-wg-cr/5890: [ 449.158762][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.168825][ T31] 1 lock held by kworker/R-wg-cr/5891: [ 449.174365][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 449.184519][ T31] 1 lock held by kworker/R-wg-cr/5892: [ 451.750704][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 451.761439][ T31] 2 locks held by kworker/0:4/5899: [ 451.766627][ T31] 2 locks held by kworker/1:3/5907: [ 451.806591][ T31] 2 locks held by kworker/0:5/5914: [ 451.811927][ T31] 7 locks held by kworker/1:4/5928: [ 451.817114][ T31] 1 lock held by kworker/1:5/5929: [ 451.822255][ T31] #0: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 451.832806][ T31] 2 locks held by kworker/0:6/5980: [ 451.837987][ T31] 2 locks held by kworker/0:7/5989: [ 451.843205][ T31] 4 locks held by kworker/u8:9/5993: [ 451.848469][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 451.860984][ T31] #1: ffffc9000479fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 451.871618][ T31] #2: ffffffff9036d010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 451.881090][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.888372][ T5855] Bluetooth: hci5: command tx timeout [ 451.895089][ T31] #3: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 451.904437][ T31] 3 locks held by kworker/u8:10/6211: [ 451.909809][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 451.929781][ T31] #1: ffffc900055e7d10 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 451.963167][ T31] #2: ffffffff8e478488 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 [ 451.980899][ T31] 2 locks held by kworker/1:7/8112: [ 451.986098][ T31] 1 lock held by syz-executor/8158: [ 451.991396][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 452.000839][ T31] 1 lock held by syz-executor/8187: [ 452.006021][ T31] #0: ffffffff90383308 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 452.015434][ T31] 1 lock held by dhcpcd/8191: [ 452.020126][ T31] #0: ffff88805a2f7408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 452.030730][ T31] 1 lock held by dhcpcd/8192: [ 452.035394][ T31] #0: ffff88805a37ee08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 452.045942][ T31] 3 locks held by syz-executor/8200: [ 452.052048][ T31] #0: ffff88814d9f2428 (sb_writers#5){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 452.071091][ T31] #1: ffff88807ca103e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 452.100179][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.108200][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.115875][ T31] #2: ffff88814d9f6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 452.129748][ T31] 2 locks held by dhcpcd/8201: [ 452.134498][ T31] #0: ffff888078778258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 452.159752][ T31] #1: ffffffff8e5cc7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 452.179839][ T31] 1 lock held by dhcpcd/8202: [ 452.184521][ T31] #0: ffff88807804e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 452.209783][ T31] [ 452.212111][ T31] ============================================= [ 452.212111][ T31] [ 452.229755][ T31] NMI backtrace for cpu 0 [ 452.229770][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.229790][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.229799][ T31] Call Trace: [ 452.229805][ T31] [ 452.229811][ T31] dump_stack_lvl+0x116/0x1f0 [ 452.229835][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 452.229868][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 452.229896][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 452.229923][ T31] watchdog+0xf0e/0x1260 [ 452.229948][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.229965][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.229985][ T31] ? __kthread_parkme+0x19e/0x250 [ 452.230011][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.230030][ T31] kthread+0x3c5/0x780 [ 452.230048][ T31] ? __pfx_kthread+0x10/0x10 [ 452.230067][ T31] ? rcu_is_watching+0x12/0xc0 [ 452.230089][ T31] ? __pfx_kthread+0x10/0x10 [ 452.230107][ T31] ret_from_fork+0x5d7/0x6f0 [ 452.230123][ T31] ? __pfx_kthread+0x10/0x10 [ 452.230140][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.230174][ T31] [ 452.230180][ T31] Sending NMI from CPU 0 to CPUs 1: [ 452.345116][ C1] NMI backtrace for cpu 1 [ 452.345129][ C1] CPU: 1 UID: 0 PID: 5928 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 452.345146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.345155][ C1] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 452.345178][ C1] RIP: 0010:__lock_acquire+0xbad/0x1ce0 [ 452.345200][ C1] Code: 00 00 00 e9 f7 f9 ff ff 4c 89 e7 48 89 14 24 e8 29 a7 ff ff 4c 8b 04 24 48 b8 eb 83 b5 80 46 86 c8 61 49 0f af c0 48 c1 e8 2d <48> 89 04 24 4c 8d 3c c5 20 ba 1a 97 48 8b 04 c5 20 ba 1a 97 48 8d [ 452.345213][ C1] RSP: 0018:ffffc9000457f148 EFLAGS: 00000007 [ 452.345223][ C1] RAX: 0000000000021409 RBX: ffff888026975370 RCX: 00000000f8d1c0f0 [ 452.345231][ C1] RDX: 6c5a4f1893d84024 RSI: 000000004c09da94 RDI: ffff888026975488 [ 452.345240][ C1] RBP: 0000000000000000 R08: 6c5a4f1893d84024 R09: 0000000000000001 [ 452.345248][ C1] R10: 0000000000000007 R11: 0000000000000000 R12: ffff888026975488 [ 452.345256][ C1] R13: ffff888026974880 R14: 00000000690bad71 R15: 0000000000000003 [ 452.345264][ C1] FS: 0000000000000000(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 452.345278][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.345286][ C1] CR2: 00007fac4fae7d60 CR3: 0000000079732000 CR4: 00000000003526f0 [ 452.345294][ C1] Call Trace: [ 452.345299][ C1] [ 452.345307][ C1] lock_acquire+0x179/0x350 [ 452.345325][ C1] ? get_random_u16+0xdb/0x7e0 [ 452.345345][ C1] get_random_u16+0x102/0x7e0 [ 452.345361][ C1] ? get_random_u16+0xdb/0x7e0 [ 452.345376][ C1] ? __pfx_get_random_u16+0x10/0x10 [ 452.345393][ C1] ? cake_get_flow_quantum+0x2f/0x290 [ 452.345412][ C1] cake_get_flow_quantum+0xd9/0x290 [ 452.345429][ C1] cake_dequeue+0x1be7/0x4830 [ 452.345452][ C1] ? cake_enqueue+0x1cdb/0x4070 [ 452.345470][ C1] ? __pfx_cake_dequeue+0x10/0x10 [ 452.345490][ C1] __qdisc_run+0x1bd/0x1bf0 [ 452.345504][ C1] ? rcu_is_watching+0x12/0xc0 [ 452.345520][ C1] __dev_queue_xmit+0x2b43/0x4490 [ 452.345542][ C1] ? selinux_ip_postroute+0x73a/0xde0 [ 452.345556][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 452.345573][ C1] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 452.345589][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 452.345614][ C1] ? lock_acquire+0x179/0x350 [ 452.345632][ C1] ? find_held_lock+0x2b/0x80 [ 452.345647][ C1] ? mark_held_locks+0x49/0x80 [ 452.345665][ C1] ip6_finish_output2+0xe98/0x2020 [ 452.345681][ C1] __ip6_finish_output+0x3cd/0x1010 [ 452.345695][ C1] ip6_output+0x1ca/0x3e0 [ 452.345707][ C1] ip6_local_out+0xd1/0x4d0 [ 452.345723][ C1] udp_tunnel6_xmit_skb+0x7f1/0xc50 [ 452.345742][ C1] send6+0x4ba/0xd30 [ 452.345753][ C1] ? bch_moving_gc+0x116f/0x1890 [ 452.345771][ C1] ? __pfx_send6+0x10/0x10 [ 452.345787][ C1] wg_socket_send_skb_to_peer+0xf6/0x210 [ 452.345801][ C1] wg_packet_tx_worker+0x1aa/0x810 [ 452.345820][ C1] process_one_work+0x9cf/0x1b70