last executing test programs: 11.763170304s ago: executing program 4 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x24, 0x0, 0xc}) socket(0x11, 0x800000003, 0x12000081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000000) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x101102) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20002, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0xc8ef, 0x8, 0x2, 0x228}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) socket(0x2, 0x80805, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c00010000000000000000"], 0x114}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @remote}, 0x2, 0x1, 0x3, 0x4}}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000280), 0x0}, 0x0) 7.730881646s ago: executing program 3 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'wlan1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=0x1, 0x10}}, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7.476714471s ago: executing program 0 (id=346): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r4, &(0x7f0000000880)=[{&(0x7f0000000140)="5765b282", 0x4}, {0x0, 0x3b}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7.330936232s ago: executing program 4 (id=347): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0x0, 0x3}, 0xff}, 0x11) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, 0x0}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400000000000077, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.854604682s ago: executing program 3 (id=348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.785818466s ago: executing program 4 (id=349): mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) syz_io_uring_setup(0x78d7, &(0x7f00000002c0)={0x0, 0x20ad97, 0x20000, 0x3, 0x2000128, 0x0, r4}, &(0x7f0000000240), &(0x7f0000000380)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) 6.617531955s ago: executing program 3 (id=350): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) 6.536324877s ago: executing program 0 (id=351): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0x0, 0x8, 0x300e, 0x4, 0xc, 0xf, 0x5, 0x5}}) creat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x7e, {0xfc, 0x9, "30ea56c4f61cab1d"}, 0xf, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) 5.259027248s ago: executing program 0 (id=353): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r3, &(0x7f0000000880)=[{&(0x7f0000000140)="5765b282", 0x4}, {0x0, 0x3b}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) setfsuid(0xee00) 5.234810867s ago: executing program 2 (id=354): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x1f, 0x803, 0x919) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) shutdown(r2, 0x0) sendfile(r2, r3, 0x0, 0xdc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5a, 0x0, 0x0) 4.194398136s ago: executing program 0 (id=355): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000180)={0x3, 0x8000000000000001, 0x7fff, 0x3ff, 0x7, 0x80000000, "3eb93f3e038342fe9b73fed95b14246f", 0x4, 0x9, 0x3, 0xfb, 0x48, 0x39, 0x4}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="00214717a707000000000306aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d0000000000000000", 0x32}], 0x1, 0x7, 0x0) 4.104085039s ago: executing program 1 (id=356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.975847056s ago: executing program 2 (id=357): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, 0x0, 0x0) 3.485499763s ago: executing program 0 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2f504968adff927fa10f3bdd4387459c79abe8890f80ba7f8fcfa467b1445622655fcfce6c0a7b6c18ebe06f72a85d231c476ff6bd6b9b9623cdf8", @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="7d9c1a414c8f2caec667391672852a538b48fb7cb93aeb71e14f7aa6398fdf0dfbb66d5b76fdd2669f1bbc69a259c9d1c1deb0025dd126019d22181d8bf36edc2d33ab7bb1d4a10f0663ed1e0964adfad898", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x4008080) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4c814}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 3.483882967s ago: executing program 2 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'wlan1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=0x1, 0x10}}, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3.480937882s ago: executing program 3 (id=360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0x0, 0x3}, 0xff}, 0x11) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, 0x0}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r7, &(0x7f0000000180), 0x400000000000077, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.452412573s ago: executing program 1 (id=361): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000fcffffffffffffff00002800000000000000000000fcffffff000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) 3.417286154s ago: executing program 4 (id=362): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000380)=ANY=[@ANYBLOB="01090000161101fc010000001d000000000000f8ff0001fe8000000000000000000000000000aa00000e22001690780000000000000000000000000000000000000000000000000000000000bed6cb28cf1418237551adcd738aff5ddf50cf727ef108ae563afc7a1ea131f6b74c89ac3a39980aa3c8357aa16ac58cc7eb8ad203781bbd7884aaff7bb24324d2a433e26c541dd26a11250b62b95ffa41ce813805f2bed345d80ec8a2ac0f7bce84dad8f47dacf61fc782f5c31d95ba25d01af2fd202263cbf14b2b85fe37649b2b22dd4ec1e9c10c14f16debb366e172544b6a74521833c872b57fbd266ffeda63cfdff4"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000040)=r4, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x1a1502) writev(r5, &(0x7f0000000840)=[{0x0}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r6) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008084) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) 3.00042822s ago: executing program 3 (id=363): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xd5108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$MSR(0x0, 0x4, 0x0) syz_clone(0x10000, &(0x7f0000000340)="51bbd417018a67cac308fcccd16775fd802a50af0317e08a9d05ddf3b223c0cae34fdc003e09e68ec61069893800b615d69e6938cb6af279aea52f124af33d4ddbc7834c49027d9ae1cbbd15136e75782fbf77267d7e703dfcb219e63861a74550347e79c86ac7b2d8b42299edddc699282e3796fde0185c361ed0062ea830b51424478723f916c2d0cca209f5bbe84cb78b56b708038f7810d59efb71605b03d17a71cc241f2abf3a2a130e729aab5f480c21a2b129659924ad7e01bbbe7556df6933bff7de68", 0xc7, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000240)="3aa14cf7bd51ec9d36ce6371b6e9513a436580058a6d780ac03ef1c8dceff5212b2fb701a1207761102709") capset(&(0x7f0000000280)={0x20080522, r0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7f, 0xf7fffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000080)=0x4) sched_setscheduler(0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000040)=0x1000) 2.918823144s ago: executing program 1 (id=364): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0x0, 0x8, 0x300e, 0x4, 0xc, 0xf, 0x5, 0x5}}) creat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x7e, {0xfc, 0x9, "30ea56c4f61cab1d"}, 0xf, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) 2.917678616s ago: executing program 4 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.121034341s ago: executing program 2 (id=366): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x109, &(0x7f0000000580)={0x0, 0x1161, 0x80, 0x3}, &(0x7f0000000640)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r4, &(0x7f0000000880)=[{&(0x7f0000000140)="5765b282", 0x4}, {0x0, 0x3b}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) socket(0x10, 0x3, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) setfsuid(0xee00) 2.108883483s ago: executing program 1 (id=367): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x1, 0x4) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000180)=""/227) shutdown(r0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_80211_inject_frame(0x0, 0x0, 0xb5) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) kexec_load(0x7ffffffffffffffb, 0x0, 0x0, 0xa0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa3bffffffffffff20110280d2c09ec1fe3eb001000000"], &(0x7f0000000340)={0x0, 0x3, [0x9c3, 0x682, 0xad9, 0x3e2]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@verity_off}, {@redirect_dir_follow}, {@xino_auto}, {@uuid_on}, {@uuid_null}, {@default_permissions}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '/dee/snd/midiA#D#\x00'}}, {@dont_hash}]}) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x0, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0x7ffffffe, 0x2000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) syz_emit_ethernet(0x72, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {@rand_addr=0x64010102}, {@dev}, {@private, 0x6}, {@empty, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 2.052856258s ago: executing program 3 (id=368): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a4, &(0x7f0000000180)={{@any, 0xffffffff}, @host}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 1.834796559s ago: executing program 4 (id=369): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000004280)={0x0, 0x0, {0x0, 0x4, 0x1014, 0x4, 0xc, 0xf, 0x5, 0x5}}) creat(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x61, 0x80000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) userfaultfd(0x801) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 530.666712ms ago: executing program 2 (id=370): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000240)=""/209, 0xd1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000380)="ea069e5218a3554e7787f5923a3057ab74cb9250144d9cbec35532bd3a0de86c6d364f6fd4a946434143844874947bf15277f8b746a30c5708179586791b28b7fc5d5c809511e9e9e51c149f91fd9631ad2531ea8236477801eb0424f684ee1a6d830bad4885413eb6fbdd784ca8d4203f45f818015652bcdc3334b8537768fd36f96a862eb85aa19a2a897ce631e77e86bca78f72acb34f31b04274b4c398c98b4905cae6336e25dc9db088fd489363dcd2f341c4e29fbd0d7fb7d95a54562c1a679e1c516ef02db014e6368b", &(0x7f0000000500)=@tcp=r2, 0x4}, 0x20) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r4, 0x10, &(0x7f00000005c0)) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd26, 0x4000080, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x4014) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRES64=r4], 0xe8}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 423.373822ms ago: executing program 1 (id=371): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, 0x0, 0x0) 64.517391ms ago: executing program 1 (id=372): r0 = socket$packet(0x11, 0x3, 0x300) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000140), 0x84880) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) socket$netlink(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x593e3537, 0x2}, {0xfffffff7, 0x9}, {0x100, 0x9}, {0xe53, 0x7}, {0x7000, 0xa62c}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x1, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x32600) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) socketpair$unix(0x1, 0x3, 0x0, 0x0) 59.090314ms ago: executing program 2 (id=373): capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x35315842, 0x3, 0x0, [{0x8, 0x10000f}, {0xc, 0x7fffffff}, {0xd, 0x8}, {0x9, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x35315842, 0x3, 0x0, [{0x8, 0x10000f}, {0xc, 0x7fffffff}, {0xd, 0x8}, {0x9, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x6, 0x309102) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x6, 0x309102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r6, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r6, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000004f202ac21b07000100000001000000", @ANYRES32, @ANYRES32=r6], 0x20, 0x20008880}}], 0x2, 0x14044885) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xf6b0e210800fa1e6}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xf6b0e210800fa1e6}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) 0s ago: executing program 0 (id=374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0x0, 0x3}, 0xff}, 0x11) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000321, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, 0x0}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400000000000077, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 66.159374][ T30] audit: type=1400 audit(1748590932.674:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.162694][ T5799] cgroup: Unknown subsys name 'net' [ 66.182159][ T30] audit: type=1400 audit(1748590932.674:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.210986][ T30] audit: type=1400 audit(1748590932.734:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.346126][ T5799] cgroup: Unknown subsys name 'cpuset' [ 66.353714][ T5799] cgroup: Unknown subsys name 'rlimit' [ 66.519882][ T30] audit: type=1400 audit(1748590933.034:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.543198][ T30] audit: type=1400 audit(1748590933.034:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.577367][ T30] audit: type=1400 audit(1748590933.034:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.598239][ T30] audit: type=1400 audit(1748590933.034:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.618909][ T30] audit: type=1400 audit(1748590933.064:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.643972][ T30] audit: type=1400 audit(1748590933.064:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.645394][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.667433][ T30] audit: type=1400 audit(1748590933.084:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.554426][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.996466][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.004656][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.280063][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 71.280077][ T30] audit: type=1400 audit(1748590937.794:78): avc: denied { create } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.399059][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.413810][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.421301][ T30] audit: type=1400 audit(1748590937.794:79): avc: denied { read write } for pid=5815 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.453739][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.474004][ T30] audit: type=1400 audit(1748590937.794:80): avc: denied { open } for pid=5815 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.497676][ T30] audit: type=1400 audit(1748590937.844:81): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="socket:[4302]" dev="sockfs" ino=4302 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.525756][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.533240][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.557512][ T30] audit: type=1400 audit(1748590938.064:82): avc: denied { read } for pid=5815 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.590947][ T30] audit: type=1400 audit(1748590938.064:83): avc: denied { open } for pid=5815 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.615076][ T30] audit: type=1400 audit(1748590938.064:84): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.644121][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.652878][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.662679][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.670020][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.677949][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.685578][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.693481][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.701599][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.701883][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.709381][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.716704][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.723764][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.730714][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.737317][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.744145][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.758084][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.795890][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.803998][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.812219][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.819864][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.071422][ T30] audit: type=1400 audit(1748590938.584:85): avc: denied { module_request } for pid=5815 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 72.138748][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 72.320749][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.355189][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 72.381305][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 72.417935][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.430680][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438560][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.446099][ T5815] bridge_slave_0: entered allmulticast mode [ 72.452805][ T5815] bridge_slave_0: entered promiscuous mode [ 72.489589][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.496985][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.504253][ T5815] bridge_slave_1: entered allmulticast mode [ 72.510938][ T5815] bridge_slave_1: entered promiscuous mode [ 72.580525][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.610463][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.631774][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.639012][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.646196][ T5819] bridge_slave_0: entered allmulticast mode [ 72.652932][ T5819] bridge_slave_0: entered promiscuous mode [ 72.687466][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.694765][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.701857][ T5819] bridge_slave_1: entered allmulticast mode [ 72.709117][ T5819] bridge_slave_1: entered promiscuous mode [ 72.732397][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.739545][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.746689][ T5820] bridge_slave_0: entered allmulticast mode [ 72.753325][ T5820] bridge_slave_0: entered promiscuous mode [ 72.789342][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.796952][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.804377][ T5821] bridge_slave_0: entered allmulticast mode [ 72.810967][ T5821] bridge_slave_0: entered promiscuous mode [ 72.819622][ T5815] team0: Port device team_slave_0 added [ 72.828561][ T5815] team0: Port device team_slave_1 added [ 72.834693][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.841764][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.849361][ T5820] bridge_slave_1: entered allmulticast mode [ 72.856124][ T5820] bridge_slave_1: entered promiscuous mode [ 72.862757][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.870279][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.877681][ T5828] bridge_slave_0: entered allmulticast mode [ 72.884886][ T5828] bridge_slave_0: entered promiscuous mode [ 72.893788][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.902955][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.910579][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.918134][ T5821] bridge_slave_1: entered allmulticast mode [ 72.925705][ T5821] bridge_slave_1: entered promiscuous mode [ 72.947316][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.954463][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.961569][ T5828] bridge_slave_1: entered allmulticast mode [ 72.969013][ T5828] bridge_slave_1: entered promiscuous mode [ 72.976506][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.001281][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.008895][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.035012][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.076940][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.083920][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.109927][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.123300][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.155608][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.170607][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.190602][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.201606][ T5819] team0: Port device team_slave_0 added [ 73.209207][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.238116][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.248335][ T5819] team0: Port device team_slave_1 added [ 73.264645][ T5821] team0: Port device team_slave_0 added [ 73.272358][ T5820] team0: Port device team_slave_0 added [ 73.296646][ T5821] team0: Port device team_slave_1 added [ 73.311271][ T5820] team0: Port device team_slave_1 added [ 73.352892][ T5815] hsr_slave_0: entered promiscuous mode [ 73.359393][ T5815] hsr_slave_1: entered promiscuous mode [ 73.386012][ T5828] team0: Port device team_slave_0 added [ 73.392588][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.400382][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.426684][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.448131][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.455380][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.481390][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.493175][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.500226][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.526851][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.539381][ T5828] team0: Port device team_slave_1 added [ 73.555030][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.561966][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.587864][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.611220][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.618248][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.644402][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.655047][ T5137] Bluetooth: hci0: command tx timeout [ 73.661972][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.668988][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.695756][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.714623][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.721563][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.747506][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.776692][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.784071][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.810199][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.822643][ T5137] Bluetooth: hci3: command tx timeout [ 73.873682][ T5137] Bluetooth: hci2: command tx timeout [ 73.884302][ T5137] Bluetooth: hci4: command tx timeout [ 73.889993][ T5137] Bluetooth: hci1: command tx timeout [ 73.900891][ T5819] hsr_slave_0: entered promiscuous mode [ 73.907789][ T5819] hsr_slave_1: entered promiscuous mode [ 73.913756][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.921507][ T5819] Cannot create hsr debugfs directory [ 73.930221][ T5821] hsr_slave_0: entered promiscuous mode [ 73.937370][ T5821] hsr_slave_1: entered promiscuous mode [ 73.943210][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.951177][ T5821] Cannot create hsr debugfs directory [ 73.963311][ T5820] hsr_slave_0: entered promiscuous mode [ 73.969717][ T5820] hsr_slave_1: entered promiscuous mode [ 73.975625][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.983158][ T5820] Cannot create hsr debugfs directory [ 74.013394][ T5828] hsr_slave_0: entered promiscuous mode [ 74.019773][ T5828] hsr_slave_1: entered promiscuous mode [ 74.026043][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.033581][ T5828] Cannot create hsr debugfs directory [ 74.355199][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.365880][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.383698][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.403500][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.456733][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.471250][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.486194][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.497302][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.554675][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.588712][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.598783][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.619221][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.632406][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.690031][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.700019][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.710510][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.720045][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.730823][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.767721][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.775050][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.788298][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.795398][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.843507][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.867008][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.877503][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.887954][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.899059][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.992245][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.000797][ T30] audit: type=1400 audit(1748590941.524:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.027039][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.034181][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.082462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.089601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.130009][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.170367][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.222471][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.239592][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.249839][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.276446][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.289921][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.317382][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.324526][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.336326][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.343402][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.356903][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.364029][ T4470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.381550][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.388709][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.402341][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.409492][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.430253][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.437423][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.515803][ T5815] veth0_vlan: entered promiscuous mode [ 75.575156][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.609805][ T5815] veth1_vlan: entered promiscuous mode [ 75.644768][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.718254][ T5137] Bluetooth: hci0: command tx timeout [ 75.752960][ T5815] veth0_macvtap: entered promiscuous mode [ 75.818595][ T5815] veth1_macvtap: entered promiscuous mode [ 75.847063][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.877350][ T5137] Bluetooth: hci3: command tx timeout [ 75.912021][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.939418][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.954604][ T5137] Bluetooth: hci1: command tx timeout [ 75.957462][ T5827] Bluetooth: hci2: command tx timeout [ 75.965539][ T5137] Bluetooth: hci4: command tx timeout [ 75.980777][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.004164][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.012892][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.031638][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.092667][ T5819] veth0_vlan: entered promiscuous mode [ 76.107784][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.121484][ T5819] veth1_vlan: entered promiscuous mode [ 76.150680][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.171108][ T5821] veth0_vlan: entered promiscuous mode [ 76.198287][ T5821] veth1_vlan: entered promiscuous mode [ 76.278713][ T5819] veth0_macvtap: entered promiscuous mode [ 76.298555][ T5821] veth0_macvtap: entered promiscuous mode [ 76.315439][ T5819] veth1_macvtap: entered promiscuous mode [ 76.331944][ T4470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.342528][ T5821] veth1_macvtap: entered promiscuous mode [ 76.356104][ T4470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.372824][ T5828] veth0_vlan: entered promiscuous mode [ 76.402980][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.461546][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.471225][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.489807][ T5820] veth0_vlan: entered promiscuous mode [ 76.497785][ T5828] veth1_vlan: entered promiscuous mode [ 76.507964][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.517009][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.533655][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.548756][ T5820] veth1_vlan: entered promiscuous mode [ 76.559817][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.568850][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.578113][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.587234][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607591][ T30] audit: type=1400 audit(1748590943.124:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.uqOw8f/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.616683][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639837][ T30] audit: type=1400 audit(1748590943.124:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.649444][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.663280][ T30] audit: type=1400 audit(1748590943.124:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.uqOw8f/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.696971][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.700177][ T30] audit: type=1400 audit(1748590943.124:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.727549][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.749146][ T30] audit: type=1400 audit(1748590943.124:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.uqOw8f/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.787349][ T30] audit: type=1400 audit(1748590943.154:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.uqOw8f/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.795136][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.815153][ T30] audit: type=1400 audit(1748590943.154:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.855797][ T30] audit: type=1400 audit(1748590943.254:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.878851][ T30] audit: type=1400 audit(1748590943.254:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.901946][ T30] audit: type=1400 audit(1748590943.264:96): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.931909][ T5820] veth0_macvtap: entered promiscuous mode [ 76.961731][ T5820] veth1_macvtap: entered promiscuous mode [ 76.992798][ T5828] veth0_macvtap: entered promiscuous mode [ 77.118718][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.277899][ T5828] veth1_macvtap: entered promiscuous mode [ 77.304584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.336875][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.354726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.398326][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.407451][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.445857][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.508743][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.527557][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.530519][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.538055][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.557095][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.568409][ T5904] random: crng reseeded on system resumption [ 77.585616][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.615392][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.654641][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.663445][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.694436][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.763526][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.793972][ T5827] Bluetooth: hci0: command tx timeout [ 77.809592][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.843633][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852352][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955724][ T5827] Bluetooth: hci3: command tx timeout [ 77.970356][ T4470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.991872][ T4470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.023029][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.034253][ T5827] Bluetooth: hci2: command tx timeout [ 78.034739][ T5137] Bluetooth: hci4: command tx timeout [ 78.040392][ T5827] Bluetooth: hci1: command tx timeout [ 78.064151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.083982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.096698][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.154266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.377159][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 78.446415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.455162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.463339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.988602][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.000824][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.132530][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.183923][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.252116][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.299750][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.337124][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 79.572544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.777479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.923168][ T5827] Bluetooth: hci0: command tx timeout [ 80.035204][ T5827] Bluetooth: hci3: command tx timeout [ 80.076036][ T5939] program syz.1.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.113906][ T5825] Bluetooth: hci2: command tx timeout [ 80.119505][ T5827] Bluetooth: hci4: command tx timeout [ 80.125782][ T5825] Bluetooth: hci1: command tx timeout [ 80.715764][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.945746][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 81.945763][ T30] audit: type=1400 audit(1748590948.124:158): avc: denied { setopt } for pid=5953 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.949255][ T24] cfg80211: failed to load regulatory.db [ 82.179922][ T30] audit: type=1400 audit(1748590948.694:159): avc: denied { create } for pid=5967 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.193828][ T5137] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 82.199064][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.339055][ T5869] usb 1-1: device descriptor read/all, error -71 [ 82.461248][ T30] audit: type=1400 audit(1748590948.704:160): avc: denied { bind } for pid=5967 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.502011][ T30] audit: type=1400 audit(1748590948.934:161): avc: denied { create } for pid=5970 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.599900][ T5975] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 82.708284][ T30] audit: type=1400 audit(1748590949.014:162): avc: denied { listen } for pid=5970 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.779604][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.280549][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.929245][ T5971] sctp: failed to load transform for md5: -4 [ 83.953398][ T30] audit: type=1400 audit(1748590949.054:163): avc: denied { kexec_image_load } for pid=5970 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 84.059126][ T30] audit: type=1400 audit(1748590950.554:164): avc: denied { read write } for pid=5974 comm="syz.0.18" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.355079][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 84.386815][ T30] audit: type=1400 audit(1748590950.554:165): avc: denied { open } for pid=5974 comm="syz.0.18" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.415788][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.469019][ T30] audit: type=1400 audit(1748590950.554:166): avc: denied { read write } for pid=5974 comm="syz.0.18" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.500996][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 84.512844][ T30] audit: type=1400 audit(1748590950.554:167): avc: denied { open } for pid=5974 comm="syz.0.18" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.537049][ T9] usb 4-1: can't read configurations, error -71 [ 84.663876][ T3078] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.680222][ T5968] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm [ 84.793783][ T978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.813674][ T3078] usb 2-1: Using ep0 maxpacket: 8 [ 84.821643][ T3078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.831884][ T3078] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.853913][ T3078] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 84.862993][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.874099][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.883173][ T3078] usb 2-1: config 0 descriptor?? [ 85.036786][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 85.045673][ T978] usb 1-1: device descriptor read/64, error -71 [ 85.497594][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.519743][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.529852][ T5869] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 85.540979][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.553827][ T978] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.554831][ T5869] usb 5-1: config 0 descriptor?? [ 85.835129][ T978] usb 1-1: device descriptor read/64, error -71 [ 86.014521][ T978] usb usb1-port1: attempt power cycle [ 86.146003][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 86.167371][ T5869] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 86.174751][ T5869] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 86.181979][ T5869] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 86.191634][ T5869] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 86.201925][ T5869] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 86.233098][ T5869] macally 0003:060B:0001.0001: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.4-1/input0 [ 86.357060][ T976] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.364737][ T978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.424584][ T978] usb 1-1: device descriptor read/8, error -71 [ 86.441278][ T5991] fuse: Unknown parameter '0x0000000000000000' [ 86.449213][ T9] usb 5-1: USB disconnect, device number 2 [ 86.557396][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.567579][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 86.578871][ T976] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 86.588064][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.602515][ T976] usb 4-1: config 0 descriptor?? [ 86.663740][ T978] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.694410][ T978] usb 1-1: device descriptor read/8, error -71 [ 86.805108][ T978] usb usb1-port1: unable to enumerate USB device [ 86.820504][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.831093][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.849573][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.857132][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.875625][ T976] ath6kl: Failed to submit usb control message: -71 [ 86.885222][ T976] ath6kl: unable to send the bmi data to the device: -71 [ 86.892342][ T976] ath6kl: Unable to send get target info: -71 [ 86.908240][ T976] ath6kl: Failed to init ath6kl core: -71 [ 86.916105][ T976] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 86.932296][ T976] usb 4-1: USB disconnect, device number 4 [ 87.739092][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 87.739107][ T30] audit: type=1400 audit(1748590954.254:178): avc: denied { create } for pid=6028 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.779589][ T30] audit: type=1400 audit(1748590954.294:179): avc: denied { setopt } for pid=6028 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.806404][ T976] usb 2-1: USB disconnect, device number 2 [ 87.830381][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.855119][ T30] audit: type=1400 audit(1748590954.344:180): avc: denied { ioctl } for pid=6028 comm="syz.3.30" path="socket:[6903]" dev="sockfs" ino=6903 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.945961][ T30] audit: type=1400 audit(1748590954.424:181): avc: denied { write } for pid=6028 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.967749][ T30] audit: type=1400 audit(1748590954.434:182): avc: denied { getopt } for pid=6031 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.205450][ T30] audit: type=1400 audit(1748590954.684:183): avc: denied { firmware_load } for pid=6028 comm="syz.3.30" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 88.946537][ T30] audit: type=1400 audit(1748590954.704:184): avc: denied { read } for pid=6028 comm="syz.3.30" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.982341][ T30] audit: type=1400 audit(1748590954.704:185): avc: denied { open } for pid=6028 comm="syz.3.30" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 89.006591][ T6030] syz.3.30 (6030) used greatest stack depth: 17784 bytes left [ 89.088398][ T6044] befs: (nbd2): No write support. Marking filesystem read-only [ 89.097572][ T6044] syz.2.34: attempt to access beyond end of device [ 89.097572][ T6044] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 89.110120][ T6044] befs: (nbd2): unable to read superblock [ 89.225347][ T30] audit: type=1400 audit(1748590954.944:186): avc: denied { setopt } for pid=6031 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.253979][ T30] audit: type=1400 audit(1748590955.524:187): avc: denied { accept } for pid=6043 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 89.311095][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 91.171979][ T6068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40'. [ 91.208596][ T6071] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure [ 92.277537][ T6087] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 92.619779][ T6097] Invalid source name [ 92.623979][ T6097] UBIFS error (pid: 6097): cannot open "./file0", error -22 [ 92.763735][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 92.763788][ T30] audit: type=1400 audit(1748590959.244:204): avc: denied { write } for pid=6091 comm="syz.2.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.286551][ T30] audit: type=1400 audit(1748590960.794:205): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.496529][ T6110] loop6: detected capacity change from 0 to 63 [ 95.289768][ T30] audit: type=1400 audit(1748590960.804:206): avc: denied { append } for pid=6109 comm="syz.3.54" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.313288][ T30] audit: type=1400 audit(1748590960.854:207): avc: denied { read write } for pid=6109 comm="syz.3.54" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.337274][ T30] audit: type=1400 audit(1748590960.854:208): avc: denied { open } for pid=6109 comm="syz.3.54" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 96.100512][ T30] audit: type=1400 audit(1748590962.164:209): avc: denied { ioctl } for pid=6112 comm="syz.1.55" path="socket:[7062]" dev="sockfs" ino=7062 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.233867][ T976] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.352263][ T30] audit: type=1400 audit(1748590962.864:210): avc: denied { bind } for pid=6123 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.489891][ T30] audit: type=1400 audit(1748590962.864:211): avc: denied { name_bind } for pid=6123 comm="syz.2.56" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 96.511649][ T30] audit: type=1400 audit(1748590962.864:212): avc: denied { node_bind } for pid=6123 comm="syz.2.56" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 96.545905][ T30] audit: type=1400 audit(1748590962.864:213): avc: denied { write } for pid=6123 comm="syz.2.56" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.546241][ T976] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 96.594225][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.897567][ T6134] Cannot find add_set index 1 as target [ 97.268740][ T976] usb 1-1: config 0 has no interface number 0 [ 97.353811][ T976] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 97.607598][ T976] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.678199][ T976] usb 1-1: string descriptor 0 read error: -71 [ 97.706009][ T976] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 97.715101][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.725894][ T976] usb 1-1: config 0 descriptor?? [ 97.731821][ T976] usb 1-1: can't set config #0, error -71 [ 97.739862][ T976] usb 1-1: USB disconnect, device number 8 [ 97.912965][ T6145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.62'. [ 97.989314][ T6147] random: crng reseeded on system resumption [ 98.475491][ T6157] random: crng reseeded on system resumption [ 100.021916][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 100.021931][ T30] audit: type=1400 audit(1748590966.534:216): avc: denied { append } for pid=6179 comm="syz.1.70" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.397588][ T30] audit: type=1400 audit(1748590966.664:217): avc: denied { mount } for pid=6179 comm="syz.1.70" name="/" dev="ramfs" ino=8706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.508807][ T30] audit: type=1400 audit(1748590966.684:218): avc: denied { write } for pid=6179 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 100.648479][ T6188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.246734][ T30] audit: type=1400 audit(1748590967.714:219): avc: denied { create } for pid=6194 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.431073][ T30] audit: type=1400 audit(1748590967.724:220): avc: denied { ioctl } for pid=6194 comm="syz.1.74" path="socket:[9303]" dev="sockfs" ino=9303 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.510361][ T30] audit: type=1400 audit(1748590967.774:221): avc: denied { setopt } for pid=6187 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.329216][ T30] audit: type=1400 audit(1748590968.844:222): avc: denied { create } for pid=6206 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.423386][ T30] audit: type=1400 audit(1748590968.934:223): avc: denied { bind } for pid=6206 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.446017][ T30] audit: type=1400 audit(1748590968.934:224): avc: denied { name_bind } for pid=6206 comm="syz.4.76" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 102.469149][ T6212] bridge0: port 3(gretap0) entered blocking state [ 102.478969][ T6212] bridge0: port 3(gretap0) entered disabled state [ 102.519400][ T30] audit: type=1400 audit(1748590968.934:225): avc: denied { node_bind } for pid=6206 comm="syz.4.76" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 102.555982][ T6212] gretap0: entered allmulticast mode [ 102.574796][ T6212] gretap0: entered promiscuous mode [ 102.598322][ T6212] bridge0: port 3(gretap0) entered blocking state [ 102.605789][ T6212] bridge0: port 3(gretap0) entered forwarding state [ 103.135744][ T6213] gretap0: left allmulticast mode [ 103.148015][ T6213] gretap0: left promiscuous mode [ 103.287173][ T6213] bridge0: port 3(gretap0) entered disabled state [ 103.335555][ T6229] Zero length message leads to an empty skb [ 103.558773][ T6236] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 104.341317][ T6247] Invalid source name [ 104.345548][ T6247] UBIFS error (pid: 6247): cannot open "./file0", error -22 [ 105.986748][ T6271] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 106.001527][ T6271] [U] J"—e:ÀÆ" [ 106.008853][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 106.008869][ T30] audit: type=1400 audit(1748590972.524:273): avc: denied { write } for pid=6270 comm="syz.2.92" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 106.247017][ T976] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 107.129014][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 107.155970][ T976] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 107.167552][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.186476][ T976] usb 1-1: Product: syz [ 107.194065][ T976] usb 1-1: Manufacturer: syz [ 107.198690][ T976] usb 1-1: SerialNumber: syz [ 107.237517][ T976] usb 1-1: config 0 descriptor?? [ 107.276675][ T976] hub 1-1:0.0: bad descriptor, ignoring hub [ 107.303542][ T30] audit: type=1400 audit(1748590973.794:274): avc: denied { bind } for pid=6284 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.323313][ T976] hub 1-1:0.0: probe with driver hub failed with error -5 [ 107.325812][ T976] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.406793][ T976] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 107.774105][ T6295] autofs: Bad value for 'fd' [ 108.353896][ T30] audit: type=1400 audit(1748590974.304:275): avc: denied { shutdown } for pid=6288 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.462040][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.510111][ T30] audit: type=1400 audit(1748590975.014:276): avc: denied { write } for pid=6299 comm="syz.2.100" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.596600][ T30] audit: type=1400 audit(1748590975.054:277): avc: denied { setopt } for pid=6291 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.624425][ T30] audit: type=1400 audit(1748590975.064:278): avc: denied { nlmsg_read } for pid=6291 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.645427][ T30] audit: type=1400 audit(1748590975.104:279): avc: denied { execute } for pid=6291 comm="syz.3.98" name="file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.672469][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 108.805822][ T6292] process 'syz.3.98' launched './file0' with NULL argv: empty string added [ 108.815585][ T30] audit: type=1400 audit(1748590975.334:280): avc: denied { execute_no_trans } for pid=6291 comm="syz.3.98" path="/12/file0" dev="tmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.404436][ T978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.590798][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 109.598296][ T978] usb 3-1: config 0 has an invalid interface number: 84 but max is 1 [ 109.598477][ T6298] random: crng reseeded on system resumption [ 109.620713][ T978] usb 3-1: config 0 has an invalid interface number: 84 but max is 1 [ 109.715086][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 109.753722][ T978] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.867492][ T978] usb 3-1: config 0 has no interface number 0 [ 109.928829][ T978] usb 3-1: config 0 interface 84 has no altsetting 1 [ 109.977904][ T978] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=6c.3e [ 109.987832][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.995877][ T978] usb 3-1: Product: syz [ 110.003646][ T978] usb 3-1: Manufacturer: syz [ 110.017295][ T978] usb 3-1: SerialNumber: syz [ 110.149884][ T978] usb 3-1: config 0 descriptor?? [ 110.285500][ T43] usb 1-1: USB disconnect, device number 9 [ 110.573969][ T30] audit: type=1400 audit(1748590977.074:281): avc: denied { ioctl } for pid=6299 comm="syz.2.100" path="socket:[9069]" dev="sockfs" ino=9069 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.602425][ T6300] overlay: ./bus is not a directory [ 110.641274][ T30] audit: type=1400 audit(1748590977.114:282): avc: denied { mounton } for pid=6299 comm="syz.2.100" path="/24/bus" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.679030][ T6300] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 110.694856][ T978] usb 3-1: USB disconnect, device number 2 [ 111.441010][ T6338] autofs: Unknown parameter '0x0000000000000000' [ 111.981786][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 111.982187][ T30] audit: type=1400 audit(1748590978.494:287): avc: denied { getopt } for pid=6341 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.406524][ T30] audit: type=1400 audit(1748590978.494:288): avc: denied { write } for pid=6341 comm="syz.2.112" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.505884][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 112.588973][ T30] audit: type=1400 audit(1748590978.494:289): avc: denied { open } for pid=6341 comm="syz.2.112" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.641814][ T6354] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 112.769077][ T6354] veth0_macvtap: left promiscuous mode [ 112.791853][ T6354] batman_adv: batadv0: Adding interface: macvtap0 [ 112.800287][ T30] audit: type=1400 audit(1748590978.974:290): avc: denied { block_suspend } for pid=6329 comm="syz.4.108" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.826350][ T30] audit: type=1400 audit(1748590979.154:291): avc: denied { mount } for pid=6353 comm="syz.2.113" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 112.836517][ T6354] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.893709][ T3078] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 112.979942][ T6354] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 113.138134][ T6368] Invalid source name [ 113.142187][ T6368] UBIFS error (pid: 6368): cannot open "./file0", error -22 [ 113.240288][ T3078] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.244452][ T30] audit: type=1400 audit(1748590979.664:292): avc: denied { connect } for pid=6360 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.279197][ T3078] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.279276][ T3078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.279430][ T3078] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 113.279485][ T3078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.283496][ T3078] usb 4-1: config 0 descriptor?? [ 113.648350][ T30] audit: type=1400 audit(1748590980.164:293): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 113.825566][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.857816][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.871850][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.890615][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.910078][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.935984][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.943275][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.952967][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 113.960895][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 114.055335][ T6382] random: crng reseeded on system resumption [ 114.141701][ T30] audit: type=1400 audit(1748590980.594:294): avc: denied { open } for pid=6355 comm="syz.3.115" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 114.233157][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 114.297866][ T6387] autofs: Unknown parameter '0x0000000000000000' [ 114.316639][ T3078] hid-alps 0003:044E:120B.0002: unknown main item tag 0x0 [ 114.368783][ T30] audit: type=1400 audit(1748590980.604:295): avc: denied { ioctl } for pid=6355 comm="syz.3.115" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 114.549592][ T3078] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 114.948452][ T3078] usb 4-1: USB disconnect, device number 5 [ 114.989214][ T6394] netlink: 156 bytes leftover after parsing attributes in process `syz.2.122'. [ 115.330371][ T30] audit: type=1400 audit(1748590981.844:296): avc: denied { create } for pid=6412 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.594228][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.748834][ T5920] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 115.765645][ T5920] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 115.796345][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 115.805791][ T3078] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.816456][ T5920] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 115.831134][ T5920] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.849922][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 115.863444][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.881705][ T5920] usb 3-1: Product: syz [ 115.888368][ T5920] usb 3-1: Manufacturer: syz [ 115.893792][ T5920] usb 3-1: SerialNumber: syz [ 115.913739][ T5920] usb 3-1: config 0 descriptor?? [ 115.923972][ T6413] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.151793][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.164827][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.304997][ T3078] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 116.415671][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.577052][ T3078] usb 2-1: config 0 descriptor?? [ 116.624907][ T3078] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 116.768855][ T5920] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 116.794189][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 116.813071][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 116.833021][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 116.860766][ T3078] usb 2-1: Detected FT232A [ 116.869518][ T3078] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 116.896075][ T3078] usb 2-1: USB disconnect, device number 3 [ 116.924634][ T978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.926624][ T3078] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 116.959145][ T3078] ftdi_sio 2-1:0.0: device disconnected [ 116.968760][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 116.989966][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 116.989980][ T30] audit: type=1400 audit(1748590983.504:320): avc: denied { read write } for pid=6440 comm="syz.1.133" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.051492][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9769 sclass=netlink_route_socket pid=6442 comm=syz.1.133 [ 117.135922][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.221182][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.309574][ T978] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 117.408777][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.224390][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 118.286641][ T978] usb 1-1: config 0 descriptor?? [ 118.359123][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 118.772355][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 119.010889][ T6451] Invalid source name [ 119.016379][ T6451] UBIFS error (pid: 6451): cannot open "./file0", error -22 [ 119.106506][ T30] audit: type=1400 audit(1748590983.504:321): avc: denied { open } for pid=6440 comm="syz.1.133" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.388150][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 119.408777][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 119.425047][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 119.426556][ T3078] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.435159][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 119.448409][ T5920] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 119.467162][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB4 [ 119.561738][ T5920] usb 3-1: USB disconnect, device number 3 [ 119.602479][ T5920] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 119.665605][ T3078] usb 2-1: Using ep0 maxpacket: 8 [ 119.692052][ T3078] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.714616][ T5920] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 119.741711][ T3078] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.775269][ T978] usbhid 1-1:0.0: can't add hid device: -71 [ 119.781280][ T978] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 119.793015][ T5920] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 119.874668][ T6462] befs: (nbd2): No write support. Marking filesystem read-only [ 119.884625][ T6462] syz.2.137: attempt to access beyond end of device [ 119.884625][ T6462] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 119.887958][ T3078] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.927673][ T5920] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 119.944683][ T978] usb 1-1: USB disconnect, device number 10 [ 119.947664][ T3078] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.174997][ T5920] keyspan 3-1:0.0: device disconnected [ 120.183768][ T6462] befs: (nbd2): unable to read superblock [ 120.203095][ T3078] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.302290][ T6467] Invalid source name [ 120.306604][ T6467] UBIFS error (pid: 6467): cannot open "./file0", error -22 [ 120.402163][ T3078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.606940][ T3078] usb 2-1: can't set config #16, error -71 [ 120.927308][ T3078] usb 2-1: USB disconnect, device number 4 [ 122.817444][ T6473] random: crng reseeded on system resumption [ 123.269301][ T30] audit: type=1400 audit(1748590989.784:322): avc: denied { read write } for pid=6496 comm="syz.3.146" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 123.510588][ T30] audit: type=1400 audit(1748590989.784:323): avc: denied { open } for pid=6496 comm="syz.3.146" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 124.043853][ T3078] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 124.066425][ T6515] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 124.213732][ T3078] usb 1-1: device descriptor read/64, error -71 [ 124.475768][ T3078] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.644013][ T3078] usb 1-1: device descriptor read/64, error -71 [ 124.809485][ T3078] usb usb1-port1: attempt power cycle [ 125.127490][ T30] audit: type=1400 audit(1748590991.634:324): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.272553][ T30] audit: type=1400 audit(1748590991.784:325): avc: denied { read } for pid=6536 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 125.303698][ T3078] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.356789][ T3078] usb 1-1: device descriptor read/8, error -71 [ 125.403761][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.445108][ T6541] can0: slcan on ttyS3. [ 125.452226][ T30] audit: type=1400 audit(1748590991.964:326): avc: denied { search } for pid=5481 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.474785][ T30] audit: type=1400 audit(1748590991.994:327): avc: denied { search } for pid=5481 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.523678][ T30] audit: type=1400 audit(1748590991.994:328): avc: denied { search } for pid=5481 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.561383][ T30] audit: type=1400 audit(1748590991.994:329): avc: denied { read } for pid=5481 comm="dhcpcd" name="n100" dev="tmpfs" ino=2435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.583066][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.583854][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.597545][ T6540] can0 (unregistered): slcan off ttyS3. [ 125.603687][ T3078] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 125.605985][ T10] usb 2-1: no configurations [ 125.624578][ T10] usb 2-1: can't read configurations, error -22 [ 125.625702][ T3078] usb 1-1: device descriptor read/8, error -71 [ 125.645260][ T30] audit: type=1400 audit(1748590991.994:330): avc: denied { open } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.668201][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.688100][ T30] audit: type=1400 audit(1748590991.994:331): avc: denied { getattr } for pid=5481 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 125.773885][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.783863][ T3078] usb usb1-port1: unable to enumerate USB device [ 125.925190][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 125.983816][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 125.991705][ T10] usb 2-1: no configurations [ 126.012384][ T6559] befs: (nbd2): No write support. Marking filesystem read-only [ 126.024911][ T10] usb 2-1: can't read configurations, error -22 [ 126.025263][ T6559] syz.2.159: attempt to access beyond end of device [ 126.025263][ T6559] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 126.045378][ T6559] befs: (nbd2): unable to read superblock [ 126.086244][ T10] usb usb2-port1: attempt power cycle [ 126.115082][ T5920] usb 1-1: device descriptor read/64, error -71 [ 126.386066][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 126.397060][ T6563] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 126.487110][ T6568] Invalid source name [ 126.491376][ T6568] UBIFS error (pid: 6568): cannot open "./file0", error -22 [ 126.643878][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.773040][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 126.779365][ T10] usb 2-1: no configurations [ 126.788415][ T10] usb 2-1: can't read configurations, error -22 [ 126.944368][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.037010][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 127.049015][ T10] usb 2-1: no configurations [ 127.071494][ T10] usb 2-1: can't read configurations, error -22 [ 127.093958][ T10] usb usb2-port1: unable to enumerate USB device [ 127.366831][ T6570] random: crng reseeded on system resumption [ 128.412378][ T6614] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 129.050889][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 129.050904][ T30] audit: type=1400 audit(1748590995.564:347): avc: denied { write } for pid=6628 comm="syz.2.176" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.095050][ T6631] Failed to initialize the IGMP autojoin socket (err -2) [ 129.202502][ T6636] FAULT_INJECTION: forcing a failure. [ 129.202502][ T6636] name failslab, interval 1, probability 0, space 0, times 1 [ 129.215466][ T6636] CPU: 1 UID: 0 PID: 6636 Comm: syz.4.177 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 129.215490][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.215501][ T6636] Call Trace: [ 129.215507][ T6636] [ 129.215514][ T6636] dump_stack_lvl+0x16c/0x1f0 [ 129.215539][ T6636] should_fail_ex+0x512/0x640 [ 129.215561][ T6636] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 129.215592][ T6636] should_failslab+0xc2/0x120 [ 129.215611][ T6636] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 129.215639][ T6636] ? audit_log_start+0x2c5/0x7f0 [ 129.215664][ T6636] audit_log_start+0x2c5/0x7f0 [ 129.215687][ T6636] ? __pfx_audit_log_start+0x10/0x10 [ 129.215715][ T6636] ? migrate_enable+0x1ed/0x260 [ 129.215740][ T6636] ? __pfx_migrate_enable+0x10/0x10 [ 129.215769][ T6636] audit_seccomp+0x60/0x290 [ 129.215790][ T6636] __seccomp_filter+0x7b6/0xea0 [ 129.215811][ T6636] ? __pfx___seccomp_filter+0x10/0x10 [ 129.215842][ T6636] __secure_computing+0x287/0x3b0 [ 129.215864][ T6636] syscall_trace_enter+0x89/0x260 [ 129.215891][ T6636] do_syscall_64+0x347/0x4c0 [ 129.215913][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.215930][ T6636] RIP: 0033:0x7fafb878e969 [ 129.215945][ T6636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.215961][ T6636] RSP: 002b:00007fafb9531038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 129.215978][ T6636] RAX: ffffffffffffffda RBX: 00007fafb89b6080 RCX: 00007fafb878e969 [ 129.215989][ T6636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 129.215999][ T6636] RBP: 00007fafb9531090 R08: 0000000000000000 R09: 0000000000000000 [ 129.216009][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.216018][ T6636] R13: 0000000000000000 R14: 00007fafb89b6080 R15: 00007ffdc20272d8 [ 129.216042][ T6636] [ 129.216057][ T6636] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 129.432931][ T6636] audit: out of memory in audit_log_start [ 129.483742][ T5920] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.180278][ T30] audit: type=1326 audit(1748590995.704:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 130.203688][ T30] audit: type=1326 audit(1748590995.704:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 130.226952][ T30] audit: type=1326 audit(1748590995.704:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 130.254591][ T30] audit: type=1326 audit(1748590995.704:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 130.278758][ T30] audit: type=1326 audit(1748590995.714:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 130.302473][ T30] audit: type=1326 audit(1748590995.714:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafb878d2d0 code=0x7ffc0000 [ 130.353767][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 130.399609][ T5920] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 130.408907][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.422829][ T5920] usb 3-1: Product: syz [ 132.226198][ T30] audit: type=1326 audit(1748590995.714:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6632 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafb878d41f code=0x7ffc0000 [ 132.239706][ T5920] usb 3-1: Manufacturer: syz [ 132.255224][ T5920] usb 3-1: SerialNumber: syz [ 132.292408][ T5920] usb 3-1: can't set config #1, error -71 [ 132.423774][ T5869] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.487322][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.505433][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.599115][ T5920] usb 3-1: USB disconnect, device number 4 [ 132.794322][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 132.801708][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.815200][ T5869] usb 4-1: config 0 has no interfaces? [ 132.825622][ T5869] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 132.863680][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.872987][ T5869] usb 4-1: Product: syz [ 133.081583][ T5869] usb 4-1: Manufacturer: syz [ 133.112561][ T5869] usb 4-1: SerialNumber: syz [ 133.303687][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 133.337567][ T5869] usb 4-1: config 0 descriptor?? [ 133.526075][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 133.620162][ T976] usb 4-1: USB disconnect, device number 6 [ 133.778024][ T10] usb 1-1: too many configurations: 166, using maximum allowed: 8 [ 133.937211][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 133.980206][ T10] usb 1-1: can't read configurations, error -61 [ 134.133716][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.315372][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 134.323118][ T10] usb 1-1: too many configurations: 166, using maximum allowed: 8 [ 134.361889][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 134.392003][ T10] usb 1-1: can't read configurations, error -61 [ 134.426230][ T10] usb usb1-port1: attempt power cycle [ 134.445225][ T6692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13071 sclass=netlink_route_socket pid=6692 comm=syz.1.192 [ 135.213821][ T6707] Invalid source name [ 135.217935][ T6707] UBIFS error (pid: 6707): cannot open "./file0", error -22 [ 135.427853][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 135.828160][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 135.971359][ T10] usb 1-1: too many configurations: 166, using maximum allowed: 8 [ 136.089434][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 136.102657][ T10] usb 1-1: can't read configurations, error -71 [ 136.354026][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.431078][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 136.536360][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.583697][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 136.591934][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.692012][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 136.789868][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.844396][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 136.889451][ T9] usb 4-1: config 0 descriptor?? [ 136.898952][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.947845][ T24] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 136.948367][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 136.965604][ T24] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.991653][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 137.030271][ T24] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 137.049271][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.061652][ T24] usb 5-1: Product: syz [ 137.069329][ T24] usb 5-1: Manufacturer: syz [ 137.074159][ T24] usb 5-1: SerialNumber: syz [ 137.083545][ T24] usb 5-1: config 0 descriptor?? [ 137.320404][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 137.719902][ T976] usb 5-1: USB disconnect, device number 3 [ 137.757871][ T6746] audit_log_lost: 57 callbacks suppressed [ 137.757893][ T6746] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 137.771329][ T6746] audit: out of memory in audit_log_start [ 138.528896][ T30] audit: type=1326 audit(1748591004.264:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb998e969 code=0x7ffc0000 [ 138.552137][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.555384][ T9] gspca_vc032x: reg_w err -110 [ 138.779891][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 138.794589][ T30] audit: type=1326 audit(1748591004.264:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb998e969 code=0x7ffc0000 [ 138.818444][ T30] audit: type=1326 audit(1748591004.264:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9eb998e969 code=0x7ffc0000 [ 138.847994][ T30] audit: type=1326 audit(1748591004.264:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb998e969 code=0x7ffc0000 [ 138.873945][ T30] audit: type=1326 audit(1748591004.264:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb998e969 code=0x7ffc0000 [ 138.901519][ T30] audit: type=1326 audit(1748591004.274:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9eb998d2d0 code=0x7ffc0000 [ 138.925990][ T30] audit: type=1326 audit(1748591004.274:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9eb998d41f code=0x7ffc0000 [ 138.949122][ T30] audit: type=1326 audit(1748591004.294:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9eb998d37c code=0x7ffc0000 [ 139.000116][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'. [ 139.743740][ T6767] overlayfs: missing 'lowerdir' [ 139.956607][ T24] usb 4-1: USB disconnect, device number 7 [ 140.053722][ T976] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.699749][ T976] usb 1-1: Using ep0 maxpacket: 8 [ 140.771176][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 140.786244][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.808862][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.829155][ T976] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 140.905886][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.924976][ T976] usb 1-1: Product: syz [ 140.929561][ T976] usb 1-1: Manufacturer: syz [ 140.936982][ T976] usb 1-1: SerialNumber: syz [ 140.950518][ T976] usb 1-1: config 0 descriptor?? [ 141.015826][ T6800] fuse: Unknown parameter 'À\øÇÛ~ç;ú¸â)ç#ö…nÕÅ: èð¦KA‰Öή®jÙ0ëÛÓÄfw«™H® ªpqò"”Øü“µ¤¯ßAõ2ßMÿAÁ•ùÝì#GíN÷wTCíâBâ ÄÂîø¿£§à' [ 141.195805][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 142.715332][ T5867] usb 1-1: USB disconnect, device number 21 [ 143.034465][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 143.034479][ T30] audit: type=1400 audit(1748591009.554:506): avc: denied { write } for pid=6813 comm="syz.3.222" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.166258][ T30] audit: type=1400 audit(1748591009.554:507): avc: denied { open } for pid=6813 comm="syz.3.222" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.621010][ T30] audit: type=1400 audit(1748591009.564:508): avc: denied { ioctl } for pid=6813 comm="syz.3.222" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.764134][ T6826] capability: warning: `syz.1.220' uses 32-bit capabilities (legacy support in use) [ 143.913675][ T978] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.383962][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 144.479245][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.653369][ T6840] befs: (nbd2): No write support. Marking filesystem read-only [ 144.662241][ T6840] syz.2.228: attempt to access beyond end of device [ 144.662241][ T6840] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 144.676142][ T6840] befs: (nbd2): unable to read superblock [ 144.888601][ T978] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 144.950600][ T6843] Failed to initialize the IGMP autojoin socket (err -2) [ 144.979562][ T978] usb 5-1: can't read configurations, error -71 [ 145.072770][ T30] audit: type=1400 audit(1748591011.584:509): avc: denied { mount } for pid=6845 comm="syz.0.231" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.448525][ T30] audit: type=1326 audit(1748591011.964:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.482875][ T30] audit: type=1326 audit(1748591011.964:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.579564][ T30] audit: type=1326 audit(1748591011.964:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.604114][ T30] audit: type=1326 audit(1748591011.964:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.628359][ T30] audit: type=1326 audit(1748591011.964:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.651713][ T30] audit: type=1326 audit(1748591011.964:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.4.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fafb878e969 code=0x7ffc0000 [ 145.743861][ T6867] Invalid source name [ 145.747924][ T6867] UBIFS error (pid: 6867): cannot open "./file0", error -22 [ 146.093041][ T6862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 146.257897][ T6879] Invalid source name [ 146.262000][ T6879] UBIFS error (pid: 6879): cannot open "./file0", error -22 [ 146.533655][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 146.629645][ T6883] netlink: 156 bytes leftover after parsing attributes in process `syz.1.240'. [ 146.793784][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 146.807435][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.897201][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.976642][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 147.020797][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.048832][ T10] usb 4-1: Product: syz [ 147.058625][ T10] usb 4-1: Manufacturer: syz [ 147.066075][ T10] usb 4-1: SerialNumber: syz [ 147.072924][ T10] usb 4-1: config 0 descriptor?? [ 147.454320][ T5867] usb 4-1: USB disconnect, device number 8 [ 148.256962][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 148.256984][ T30] audit: type=1400 audit(1748591014.574:548): avc: denied { append } for pid=6910 comm="syz.0.248" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.923680][ T6915] Failed to initialize the IGMP autojoin socket (err -2) [ 148.941046][ T30] audit: type=1400 audit(1748591014.584:549): avc: denied { bind } for pid=6910 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.166492][ T6926] Invalid source name [ 149.170664][ T6926] UBIFS error (pid: 6926): cannot open "./file0", error -22 [ 149.509068][ T6930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 150.171457][ T6940] netlink: 156 bytes leftover after parsing attributes in process `syz.4.256'. [ 151.419384][ T30] audit: type=1400 audit(1748591017.937:550): avc: denied { connect } for pid=6964 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.561570][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 151.588276][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.645408][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.033711][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 152.041653][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.052204][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.067590][ T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 152.179451][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.198309][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 152.216020][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 152.223007][ T10] usb 2-1: Product: syz [ 152.228954][ T10] usb 2-1: Manufacturer: syz [ 152.233928][ T10] usb 2-1: SerialNumber: syz [ 152.238847][ T24] usb 1-1: can't read configurations, error -71 [ 152.248096][ T10] usb 2-1: config 0 descriptor?? [ 152.857165][ T5867] usb 2-1: USB disconnect, device number 9 [ 152.968868][ T6988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.270'. [ 153.159781][ T7000] Failed to initialize the IGMP autojoin socket (err -2) [ 153.180017][ T30] audit: type=1400 audit(1748591019.697:551): avc: denied { read } for pid=6996 comm="syz.2.274" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.219400][ T30] audit: type=1400 audit(1748591019.727:552): avc: denied { open } for pid=6996 comm="syz.2.274" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.244990][ T30] audit: type=1400 audit(1748591019.727:553): avc: denied { ioctl } for pid=6996 comm="syz.2.274" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 153.491688][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 153.546552][ T30] audit: type=1400 audit(1748591019.737:554): avc: denied { create } for pid=6996 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.583710][ T30] audit: type=1400 audit(1748591019.877:555): avc: denied { read } for pid=7004 comm="syz.4.276" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.744576][ T30] audit: type=1400 audit(1748591019.877:556): avc: denied { open } for pid=7004 comm="syz.4.276" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 153.867480][ T30] audit: type=1400 audit(1748591019.877:557): avc: denied { ioctl } for pid=7004 comm="syz.4.276" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 154.020086][ T7020] loop6: detected capacity change from 0 to 63 [ 154.180956][ T30] audit: type=1400 audit(1748591019.887:558): avc: denied { read append } for pid=7004 comm="syz.4.276" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.315421][ T7025] syz.1.281 uses obsolete (PF_INET,SOCK_PACKET) [ 154.359523][ T30] audit: type=1400 audit(1748591020.867:559): avc: denied { ioctl } for pid=7022 comm="syz.1.281" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.414755][ T30] audit: type=1400 audit(1748591020.937:560): avc: denied { ioctl } for pid=7026 comm="syz.0.283" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 154.919853][ T7043] netlink: 156 bytes leftover after parsing attributes in process `syz.0.287'. [ 154.995737][ T7044] random: crng reseeded on system resumption [ 155.724156][ T7065] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 155.731869][ T7065] netlink: 244 bytes leftover after parsing attributes in process `syz.0.291'. [ 156.843673][ T978] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 156.873716][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.963643][ T43] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 156.997019][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 157.004833][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.027973][ T978] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.033728][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 157.075741][ T978] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 157.085587][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.111691][ T978] usb 3-1: Product: syz [ 157.122350][ T978] usb 3-1: Manufacturer: syz [ 157.131671][ T978] usb 3-1: SerialNumber: syz [ 157.164997][ T978] usb 3-1: config 0 descriptor?? [ 157.292933][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.314230][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.327184][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.339279][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.354695][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.365534][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.376529][ T43] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 157.388475][ T976] usb 3-1: USB disconnect, device number 5 [ 157.415702][ T24] usb 4-1: Product: syz [ 157.431645][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.439774][ T24] usb 4-1: Manufacturer: syz [ 157.446151][ T24] usb 4-1: SerialNumber: syz [ 157.478540][ T43] usb 1-1: config 0 descriptor?? [ 157.937907][ T7083] netlink: 156 bytes leftover after parsing attributes in process `syz.4.296'. [ 158.282879][ T24] usb 4-1: 0:2 : does not exist [ 158.812965][ T7090] Failed to initialize the IGMP autojoin socket (err -2) [ 158.960192][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 159.005897][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 159.047857][ T43] usb 1-1: USB disconnect, device number 24 [ 159.270296][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'. [ 159.309852][ T976] usb 4-1: USB disconnect, device number 9 [ 159.372640][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.232196][ T30] audit: type=1400 audit(1748591026.087:561): avc: denied { getopt } for pid=7099 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.421701][ T30] audit: type=1400 audit(1748591026.927:562): avc: denied { ioctl } for pid=7102 comm="syz.3.299" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 160.487640][ T7107] netlink: 156 bytes leftover after parsing attributes in process `syz.1.301'. [ 161.541058][ T7138] netlink: 'syz.3.309': attribute type 4 has an invalid length. [ 162.683468][ T7136] random: crng reseeded on system resumption [ 165.394321][ T7187] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 165.697512][ T7187] netlink: 244 bytes leftover after parsing attributes in process `syz.3.316'. [ 167.117289][ T7201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.863859][ T30] audit: type=1400 audit(1748591033.277:563): avc: denied { setopt } for pid=7199 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.883730][ T30] audit: type=1400 audit(1748591033.557:564): avc: denied { connect } for pid=7199 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.963645][ T5869] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 168.264163][ T7210] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 168.278944][ T5869] usb 4-1: device descriptor read/all, error -71 [ 169.301245][ T7227] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.327'. [ 171.903754][ T30] audit: type=1326 audit(1748591036.047:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 171.940477][ T30] audit: type=1326 audit(1748591036.047:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 171.964453][ T30] audit: type=1326 audit(1748591036.057:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 171.988035][ T30] audit: type=1326 audit(1748591036.057:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 172.032842][ T30] audit: type=1326 audit(1748591036.057:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 172.155526][ T30] audit: type=1326 audit(1748591036.057:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 172.179745][ T30] audit: type=1326 audit(1748591036.057:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 172.203326][ T30] audit: type=1326 audit(1748591036.057:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7229 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feca418e969 code=0x7ffc0000 [ 172.775672][ T7239] FAULT_INJECTION: forcing a failure. [ 172.775672][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 172.788538][ T7239] CPU: 1 UID: 0 PID: 7239 Comm: syz.3.330 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 172.788562][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.788573][ T7239] Call Trace: [ 172.788579][ T7239] [ 172.788585][ T7239] dump_stack_lvl+0x16c/0x1f0 [ 172.788611][ T7239] should_fail_ex+0x512/0x640 [ 172.788637][ T7239] should_failslab+0xc2/0x120 [ 172.788658][ T7239] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 172.788678][ T7239] ? sidtab_sid2str_get+0x17a/0x680 [ 172.788707][ T7239] kmemdup_noprof+0x29/0x60 [ 172.788725][ T7239] sidtab_sid2str_get+0x17a/0x680 [ 172.788752][ T7239] sidtab_entry_to_string+0x33/0x110 [ 172.788776][ T7239] security_sid_to_context_core+0x35c/0x640 [ 172.788802][ T7239] selinux_lsmprop_to_secctx+0xe4/0x1b0 [ 172.788825][ T7239] ? __pfx_selinux_lsmprop_to_secctx+0x10/0x10 [ 172.788849][ T7239] ? map_id_range_up+0x2ce/0x3b0 [ 172.788880][ T7239] security_lsmprop_to_secctx+0x94/0x260 [ 172.788906][ T7239] audit_log_task_context+0x122/0x190 [ 172.788928][ T7239] ? __pfx_audit_log_task_context+0x10/0x10 [ 172.788951][ T7239] ? from_kuid+0x8d/0xd0 [ 172.788975][ T7239] ? __pfx_from_kuid+0x10/0x10 [ 172.789000][ T7239] ? __pfx_audit_log_start+0x10/0x10 [ 172.789025][ T7239] audit_log_task+0x1c2/0x3f0 [ 172.789051][ T7239] ? __pfx_audit_log_task+0x10/0x10 [ 172.789078][ T7239] ? __pfx_migrate_enable+0x10/0x10 [ 172.789108][ T7239] audit_seccomp+0x79/0x290 [ 172.789130][ T7239] __seccomp_filter+0x7b6/0xea0 [ 172.789152][ T7239] ? __pfx___seccomp_filter+0x10/0x10 [ 172.789185][ T7239] __secure_computing+0x287/0x3b0 [ 172.789206][ T7239] syscall_trace_enter+0x89/0x260 [ 172.789233][ T7239] do_syscall_64+0x347/0x4c0 [ 172.789256][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.789274][ T7239] RIP: 0033:0x7f3f55b8d37c [ 172.789289][ T7239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.789305][ T7239] RSP: 002b:00007f3f56a9b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.789322][ T7239] RAX: ffffffffffffffda RBX: 00007f3f55db6080 RCX: 00007f3f55b8d37c [ 172.789333][ T7239] RDX: 000000000000000f RSI: 00007f3f56a9b0a0 RDI: 0000000000000008 [ 172.789343][ T7239] RBP: 00007f3f56a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 172.789353][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.789363][ T7239] R13: 0000000000000000 R14: 00007f3f55db6080 R15: 00007ffe668eda68 [ 172.789387][ T7239] [ 173.323707][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 173.323742][ T30] audit: type=1326 audit(1748591039.287:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f55b8e969 code=0x7ffc0000 [ 173.503046][ T30] audit: type=1326 audit(1748591039.287:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f55b8e969 code=0x7ffc0000 [ 174.202110][ T7252] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 174.210389][ T7252] netlink: 244 bytes leftover after parsing attributes in process `syz.4.334'. [ 174.733738][ T5867] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 174.937791][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.116311][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.810506][ T5867] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 176.058956][ T30] audit: type=1326 audit(1748591039.287:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3f55b8e969 code=0x7ffc0000 [ 176.104510][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.186515][ T7265] Failed to initialize the IGMP autojoin socket (err -2) [ 176.207333][ T30] audit: type=1326 audit(1748591039.287:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f55b8e969 code=0x7ffc0000 [ 176.231519][ T5867] usb 5-1: config 0 descriptor?? [ 176.239224][ T30] audit: type=1326 audit(1748591039.287:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f55b8d2d0 code=0x7ffc0000 [ 176.269148][ T30] audit: type=1326 audit(1748591039.297:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f55b8d41f code=0x7ffc0000 [ 176.301821][ T30] audit: type=1326 audit(1748591039.297:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3f55b8e969 code=0x7ffc0000 [ 176.427231][ T30] audit: type=1326 audit(1748591039.297:612): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f55b8d37c code=0x7ffc0000 [ 176.497457][ T30] audit: type=1326 audit(1748591039.307:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f55b8d41f code=0x7ffc0000 [ 176.553036][ T30] audit: type=1326 audit(1748591039.307:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.3.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3f55b8d5ca code=0x7ffc0000 [ 177.029073][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 177.358048][ T5867] usbhid 5-1:0.0: can't add hid device: -71 [ 177.391234][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 177.475974][ T5867] usb 5-1: USB disconnect, device number 6 [ 177.560743][ T7289] Invalid source name [ 177.564762][ T7289] UBIFS error (pid: 7289): cannot open "./file0", error -22 [ 177.580389][ T7291] netlink: 'syz.0.344': attribute type 8 has an invalid length. [ 177.928115][ T7293] random: crng reseeded on system resumption [ 178.483206][ T7307] netlink: 156 bytes leftover after parsing attributes in process `syz.3.348'. [ 178.567832][ T7310] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 178.963683][ T7322] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 179.728509][ T7320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.484956][ T7342] netlink: 156 bytes leftover after parsing attributes in process `syz.1.356'. [ 181.776578][ T7356] Invalid source name [ 181.780581][ T7356] UBIFS error (pid: 7356): cannot open "./file0", error -22 [ 182.222469][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 182.222484][ T30] audit: type=1400 audit(1748591048.737:621): avc: denied { getopt } for pid=7363 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.628968][ T30] audit: type=1400 audit(1748591049.147:622): avc: denied { bind } for pid=7348 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.662014][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 183.569107][ T7390] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 184.113384][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.751201][ T7386] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.777449][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 185.209218][ T30] audit: type=1400 audit(1748591051.727:623): avc: denied { recv } for pid=5799 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.23 dest=46980 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 185.295419][ T30] audit: type=1400 audit(1748591051.817:624): avc: denied { create } for pid=7400 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.350257][ T30] audit: type=1400 audit(1748591051.867:625): avc: denied { write } for pid=7400 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 185.350605][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 185.381314][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 185.381330][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.381338][ T5825] Workqueue: hci1 hci_rx_work [ 185.381356][ T5825] Call Trace: [ 185.381361][ T5825] [ 185.381366][ T5825] dump_stack_lvl+0x16c/0x1f0 [ 185.381381][ T5825] sysfs_warn_dup+0x7f/0xa0 [ 185.381393][ T5825] sysfs_create_dir_ns+0x24b/0x2b0 [ 185.381406][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.381417][ T5825] ? find_held_lock+0x2b/0x80 [ 185.381438][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 185.381457][ T5825] kobject_add_internal+0x2c4/0x9b0 [ 185.381474][ T5825] kobject_add+0x16e/0x240 [ 185.381488][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 185.381504][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 185.381521][ T5825] ? kobject_put+0xab/0x5a0 [ 185.381539][ T5825] device_add+0x288/0x1a70 [ 185.381556][ T5825] ? __pfx_dev_set_name+0x10/0x10 [ 185.381567][ T5825] ? __pfx_device_add+0x10/0x10 [ 185.381584][ T5825] ? mgmt_send_event_skb+0x2fb/0x460 [ 185.381600][ T5825] hci_conn_add_sysfs+0x17e/0x230 [ 185.381614][ T5825] le_conn_complete_evt+0x1075/0x1d70 [ 185.381631][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.381642][ T5825] ? hci_event_packet+0x459/0x11c0 [ 185.381658][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 185.381673][ T5825] hci_le_meta_evt+0x354/0x5e0 [ 185.381687][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 185.381701][ T5825] hci_event_packet+0x685/0x11c0 [ 185.381713][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.381727][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 185.381740][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 185.381756][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.381771][ T5825] hci_rx_work+0x2c5/0x16b0 [ 185.381784][ T5825] ? rcu_is_watching+0x12/0xc0 [ 185.381797][ T5825] process_one_work+0x9cc/0x1b70 [ 185.381819][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 185.381838][ T5825] ? assign_work+0x1a0/0x250 [ 185.381853][ T5825] worker_thread+0x6c8/0xf10 [ 185.381875][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 185.381890][ T5825] kthread+0x3c2/0x780 [ 185.381905][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.381919][ T5825] ? rcu_is_watching+0x12/0xc0 [ 185.381929][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.381943][ T5825] ret_from_fork+0x5d4/0x6f0 [ 185.381955][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.381969][ T5825] ret_from_fork_asm+0x1a/0x30 [ 185.381987][ T5825] [ 185.382003][ T5825] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.634360][ T5825] Bluetooth: hci1: failed to register connection device [ 185.643737][ T30] audit: type=1400 audit(1748591051.867:626): avc: denied { listen } for pid=7398 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.676516][ T5825] ================================================================== [ 185.684613][ T5825] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 185.692663][ T5825] Read of size 8 at addr ffff88804d7fe188 by task kworker/u9:3/5825 [ 185.700624][ T5825] [ 185.702925][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 185.702940][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.702948][ T5825] Workqueue: hci1 hci_rx_work [ 185.702965][ T5825] Call Trace: [ 185.702970][ T5825] [ 185.702975][ T5825] dump_stack_lvl+0x116/0x1f0 [ 185.702990][ T5825] print_report+0xcd/0x680 [ 185.703002][ T5825] ? __virt_addr_valid+0x81/0x610 [ 185.703020][ T5825] ? __phys_addr+0xe8/0x180 [ 185.703038][ T5825] ? l2cap_sock_ready_cb+0x16a/0x170 [ 185.703052][ T5825] kasan_report+0xe0/0x110 [ 185.703064][ T5825] ? l2cap_sock_ready_cb+0x16a/0x170 [ 185.703078][ T5825] l2cap_sock_ready_cb+0x16a/0x170 [ 185.703093][ T5825] l2cap_le_start+0x1ea/0xe40 [ 185.703109][ T5825] ? l2cap_connect_cfm+0x819/0xf80 [ 185.703121][ T5825] ? __pfx_l2cap_le_start+0x10/0x10 [ 185.703139][ T5825] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 185.703151][ T5825] ? __l2cap_chan_add+0x3e6/0xa20 [ 185.703164][ T5825] l2cap_connect_cfm+0x8f4/0xf80 [ 185.703178][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 185.703190][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 185.703201][ T5825] le_conn_complete_evt+0x1662/0x1d70 [ 185.703216][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.703227][ T5825] ? hci_event_packet+0x459/0x11c0 [ 185.703240][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 185.703253][ T5825] hci_le_meta_evt+0x354/0x5e0 [ 185.703266][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 185.703278][ T5825] hci_event_packet+0x685/0x11c0 [ 185.703289][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.703307][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 185.703319][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 185.703335][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.703349][ T5825] hci_rx_work+0x2c5/0x16b0 [ 185.703362][ T5825] ? rcu_is_watching+0x12/0xc0 [ 185.703372][ T5825] process_one_work+0x9cc/0x1b70 [ 185.703392][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 185.703409][ T5825] ? assign_work+0x1a0/0x250 [ 185.703423][ T5825] worker_thread+0x6c8/0xf10 [ 185.703440][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 185.703455][ T5825] kthread+0x3c2/0x780 [ 185.703469][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.703486][ T5825] ? rcu_is_watching+0x12/0xc0 [ 185.703499][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.703518][ T5825] ret_from_fork+0x5d4/0x6f0 [ 185.703538][ T5825] ? __pfx_kthread+0x10/0x10 [ 185.703559][ T5825] ret_from_fork_asm+0x1a/0x30 [ 185.703581][ T5825] [ 185.703587][ T5825] [ 185.944775][ T5825] Allocated by task 7402: [ 185.949074][ T5825] kasan_save_stack+0x33/0x60 [ 185.953735][ T5825] kasan_save_track+0x14/0x30 [ 185.958389][ T5825] __kasan_kmalloc+0xaa/0xb0 [ 185.962968][ T5825] __kmalloc_noprof+0x223/0x510 [ 185.967794][ T5825] sk_prot_alloc+0x1a8/0x2a0 [ 185.972368][ T5825] sk_alloc+0x36/0xc20 [ 185.976408][ T5825] bt_sock_alloc+0x3b/0x3a0 [ 185.980889][ T5825] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 185.986682][ T5825] l2cap_sock_create+0x123/0x1f0 [ 185.991613][ T5825] bt_sock_create+0x185/0x350 [ 185.996271][ T5825] __sock_create+0x335/0x8d0 [ 186.000847][ T5825] __sys_socket+0x14d/0x260 [ 186.005340][ T5825] __x64_sys_socket+0x72/0xb0 [ 186.010002][ T5825] do_syscall_64+0xcd/0x4c0 [ 186.014479][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.020360][ T5825] [ 186.022659][ T5825] Freed by task 7402: [ 186.026610][ T5825] kasan_save_stack+0x33/0x60 [ 186.031268][ T5825] kasan_save_track+0x14/0x30 [ 186.035924][ T5825] kasan_save_free_info+0x3b/0x60 [ 186.040925][ T5825] __kasan_slab_free+0x51/0x70 [ 186.045661][ T5825] kfree+0x2b4/0x4d0 [ 186.049532][ T5825] __sk_destruct+0x740/0x980 [ 186.054094][ T5825] sk_destruct+0xc2/0xf0 [ 186.058309][ T5825] __sk_free+0xf4/0x3e0 [ 186.062436][ T5825] sk_free+0x6a/0x90 [ 186.066302][ T5825] l2cap_sock_kill+0x171/0x2d0 [ 186.071042][ T5825] l2cap_sock_release+0x189/0x210 [ 186.076054][ T5825] __sock_release+0xb3/0x270 [ 186.080619][ T5825] sock_close+0x1c/0x30 [ 186.084750][ T5825] __fput+0x3ff/0xb70 [ 186.088705][ T5825] task_work_run+0x150/0x240 [ 186.093276][ T5825] exit_to_user_mode_loop+0xeb/0x110 [ 186.098539][ T5825] do_syscall_64+0x3f6/0x4c0 [ 186.103114][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.109011][ T5825] [ 186.111323][ T5825] The buggy address belongs to the object at ffff88804d7fe000 [ 186.111323][ T5825] which belongs to the cache kmalloc-2k of size 2048 [ 186.125363][ T5825] The buggy address is located 392 bytes inside of [ 186.125363][ T5825] freed 2048-byte region [ffff88804d7fe000, ffff88804d7fe800) [ 186.139228][ T5825] [ 186.141531][ T5825] The buggy address belongs to the physical page: [ 186.147926][ T5825] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d7f8 [ 186.156658][ T5825] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.165138][ T5825] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 186.173104][ T5825] page_type: f5(slab) [ 186.177064][ T5825] raw: 00fff00000000040 ffff88801b442000 0000000000000000 0000000000000001 [ 186.185637][ T5825] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 186.194195][ T5825] head: 00fff00000000040 ffff88801b442000 0000000000000000 0000000000000001 [ 186.202849][ T5825] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 186.211499][ T5825] head: 00fff00000000003 ffffea000135fe01 00000000ffffffff 00000000ffffffff [ 186.220141][ T5825] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 186.228782][ T5825] page dumped because: kasan: bad access detected [ 186.235164][ T5825] page_owner tracks the page as allocated [ 186.240848][ T5825] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7100, tgid 7099 (syz.1.300), ts 159696168930, free_ts 15929276262 [ 186.262002][ T5825] post_alloc_hook+0x1c0/0x230 [ 186.266748][ T5825] get_page_from_freelist+0x135c/0x3950 [ 186.272274][ T5825] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 186.278143][ T5825] alloc_pages_mpol+0x1fb/0x550 [ 186.282972][ T5825] new_slab+0x23b/0x330 [ 186.287106][ T5825] ___slab_alloc+0xd9c/0x1940 [ 186.291760][ T5825] __slab_alloc.constprop.0+0x56/0xb0 [ 186.297110][ T5825] __kmalloc_cache_noprof+0xfb/0x3e0 [ 186.302372][ T5825] copy_verifier_state+0xbc8/0xfa0 [ 186.307456][ T5825] do_check_common+0x541e/0xc0e0 [ 186.312371][ T5825] bpf_check+0x83f0/0xbc50 [ 186.316764][ T5825] bpf_prog_load+0xe41/0x2490 [ 186.321413][ T5825] __sys_bpf+0x433c/0x4d80 [ 186.325802][ T5825] __x64_sys_bpf+0x78/0xc0 [ 186.330190][ T5825] do_syscall_64+0xcd/0x4c0 [ 186.334666][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.340531][ T5825] page last free pid 1 tgid 1 stack trace: [ 186.346306][ T5825] __free_frozen_pages+0x7fe/0x1180 [ 186.351479][ T5825] free_contig_range+0x183/0x4b0 [ 186.356392][ T5825] destroy_args+0x7f6/0xa60 [ 186.360875][ T5825] debug_vm_pgtable+0x13c4/0x2d90 [ 186.365884][ T5825] do_one_initcall+0x120/0x6e0 [ 186.370619][ T5825] kernel_init_freeable+0x5c2/0x900 [ 186.375793][ T5825] kernel_init+0x1c/0x2b0 [ 186.380101][ T5825] ret_from_fork+0x5d4/0x6f0 [ 186.384665][ T5825] ret_from_fork_asm+0x1a/0x30 [ 186.389406][ T5825] [ 186.391700][ T5825] Memory state around the buggy address: [ 186.397301][ T5825] ffff88804d7fe080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.405333][ T5825] ffff88804d7fe100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.413364][ T5825] >ffff88804d7fe180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.421395][ T5825] ^ [ 186.425693][ T5825] ffff88804d7fe200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.433726][ T5825] ffff88804d7fe280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.441770][ T5825] ================================================================== [ 186.452335][ T5825] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.459514][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:3 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 186.471295][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.481338][ T5825] Workqueue: hci1 hci_rx_work [ 186.485998][ T5825] Call Trace: [ 186.489259][ T5825] [ 186.492168][ T5825] dump_stack_lvl+0x3d/0x1f0 [ 186.496735][ T5825] panic+0x71c/0x800 [ 186.500617][ T5825] ? __pfx_panic+0x10/0x10 [ 186.505021][ T5825] ? irqentry_exit+0x3b/0x90 [ 186.509585][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.514759][ T5825] ? preempt_schedule_thunk+0x16/0x30 [ 186.520121][ T5825] ? l2cap_sock_ready_cb+0x16a/0x170 [ 186.525383][ T5825] ? preempt_schedule_common+0x44/0xc0 [ 186.530820][ T5825] ? l2cap_sock_ready_cb+0x16a/0x170 [ 186.536082][ T5825] check_panic_on_warn+0xab/0xb0 [ 186.540997][ T5825] end_report+0x107/0x170 [ 186.545301][ T5825] kasan_report+0xee/0x110 [ 186.549691][ T5825] ? l2cap_sock_ready_cb+0x16a/0x170 [ 186.554954][ T5825] l2cap_sock_ready_cb+0x16a/0x170 [ 186.560042][ T5825] l2cap_le_start+0x1ea/0xe40 [ 186.564700][ T5825] ? l2cap_connect_cfm+0x819/0xf80 [ 186.569785][ T5825] ? __pfx_l2cap_le_start+0x10/0x10 [ 186.574965][ T5825] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 186.580918][ T5825] ? __l2cap_chan_add+0x3e6/0xa20 [ 186.585918][ T5825] l2cap_connect_cfm+0x8f4/0xf80 [ 186.590844][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.596280][ T5825] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 186.601724][ T5825] le_conn_complete_evt+0x1662/0x1d70 [ 186.607075][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 186.612767][ T5825] ? hci_event_packet+0x459/0x11c0 [ 186.617855][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 186.623394][ T5825] hci_le_meta_evt+0x354/0x5e0 [ 186.628138][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 186.634182][ T5825] hci_event_packet+0x685/0x11c0 [ 186.639095][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 186.644358][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 186.649705][ T5825] ? kcov_remote_start+0x3c9/0x6d0 [ 186.654808][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.659982][ T5825] hci_rx_work+0x2c5/0x16b0 [ 186.664462][ T5825] ? rcu_is_watching+0x12/0xc0 [ 186.669205][ T5825] process_one_work+0x9cc/0x1b70 [ 186.674133][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 186.679486][ T5825] ? assign_work+0x1a0/0x250 [ 186.684056][ T5825] worker_thread+0x6c8/0xf10 [ 186.688629][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 186.693718][ T5825] kthread+0x3c2/0x780 [ 186.697765][ T5825] ? __pfx_kthread+0x10/0x10 [ 186.702332][ T5825] ? rcu_is_watching+0x12/0xc0 [ 186.707069][ T5825] ? __pfx_kthread+0x10/0x10 [ 186.711649][ T5825] ret_from_fork+0x5d4/0x6f0 [ 186.716216][ T5825] ? __pfx_kthread+0x10/0x10 [ 186.720787][ T5825] ret_from_fork_asm+0x1a/0x30 [ 186.725538][ T5825] [ 186.728782][ T5825] Kernel Offset: disabled [ 186.733081][ T5825] Rebooting in 86400 seconds..