last executing test programs: 11m45.618767417s ago: executing program 0 (id=207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) landlock_restrict_self(r3, 0x6) r4 = syz_io_uring_setup(0xc37, &(0x7f0000000100)={0x0, 0x679d, 0x80, 0x2, 0x34b}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0x1e, 0x50, 0x20, 0x1039, 0x2120, 0x2a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0xc0, 0x0, [{{0x9, 0x4, 0x7d, 0xf6, 0x0, 0xe4, 0x40, 0x98, 0x2}}]}}]}}, 0x0) syz_usb_disconnect(r7) r8 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r8, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x2, 0x0, 0x0) 11m40.794874561s ago: executing program 0 (id=204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000340)) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r4, r2, 0x80000) syz_pidfd_open(r1, 0x0) 11m39.919803659s ago: executing program 0 (id=206): r0 = io_uring_setup(0xfc8, &(0x7f0000000180)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x26b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="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", 0x1c8}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m38.868449321s ago: executing program 0 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) read(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 11m35.349277469s ago: executing program 0 (id=216): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)=""/223, 0xdf}], 0xc}, 0x40010002) gettid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) rt_sigsuspend(0x0, 0x0) ioperm(0x8, 0x1, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) ftruncate(0xffffffffffffffff, 0x4) ioctl$BLKRRPART(r0, 0x125f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0xfe) fsopen(0x0, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 11m30.328006097s ago: executing program 0 (id=234): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) bind$can_raw(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) iopl(0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000100)={r8, 0x1, r7, 0x7, 0x80000}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x6}, 0x4f) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) 11m15.130370406s ago: executing program 32 (id=234): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) bind$can_raw(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) iopl(0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000100)={r8, 0x1, r7, 0x7, 0x80000}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x6}, 0x4f) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) 16.458665586s ago: executing program 1 (id=1623): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x8, &(0x7f0000006680)) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400020000000001]}) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) mkdir(&(0x7f0000000b40)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='grpquota,grpquota_block_hardlimit=3']) 15.661019021s ago: executing program 5 (id=1625): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x20000}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) 14.280619873s ago: executing program 5 (id=1628): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500000000000000000006000000", @ANYRES32, @ANYBLOB="1c00e700cb592dfd47ed2b9c9fc28b14ccfedf0d4a91629124888ffad82ab8c507fc7dc2ddaab0ec9df47627ef306ba022e594541b5ecc63700f4b7f879d013c82f448bfc3ac58edf770e3896276c7b378b89a72cf1d7e2d01c6cae8e47bbbbb93369cd99bcd24fd11a5f41b94"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08c1e4bd7000fcdbdf25320000000800", @ANYRES32, @ANYBLOB="0c009900060000000d000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000015}, 0xc084) 12.176931861s ago: executing program 3 (id=1631): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) syz_open_dev$video(0x0, 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1800, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x7, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) socket$nl_route(0x10, 0x3, 0x0) 12.117757965s ago: executing program 1 (id=1632): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r3, 0x99a, 0x40) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaabaaaa0086dd60003a0400000000008000000000000000000000000000bbff02000000000080000000000000000102009078000000006050835900000000fc010000000000000000000000000000fe880000000000000000001000000001abd5e199efaa513b8c7083bc93bbdcc8d2705b132fd9c1e7f9767e561b707dcd75fdd171e950ed3d243fe6120c"], 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r5 = epoll_create1(0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x4, 0x40100000, 0x5, 0x0, 0x1, "362e851f84882fb90efa3fa665d2eb144970e2", 0x8, 0x81}) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 11.268290061s ago: executing program 5 (id=1636): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_macvtap\x00'}]}}]}, 0x4c}}, 0x24044094) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000380)=0x8, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x300, 0x100, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 10.833762202s ago: executing program 4 (id=1637): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 10.547267929s ago: executing program 5 (id=1638): syz_io_uring_setup(0x24f7, &(0x7f0000000080)={0x0, 0x40e3, 0x2000, 0x1}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r7, 0x10000000005, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000019300)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="151416"], 0x0, 0x0, 0x0, 0x0, 0x0}) 9.705852668s ago: executing program 4 (id=1639): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) keyctl$revoke(0x3, r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 9.470316055s ago: executing program 3 (id=1640): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfff, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x111382, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010100, @empty}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) mount(0x0, 0x0, &(0x7f0000000600)='debugfs\x00', 0x6b000, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r3 = syz_clone(0x88202200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) setpgid(0x0, r3) r4 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x903) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESHEX=r1], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0x50) mq_open(&(0x7f0000000640)='[\v\xdbX\xae[\x1a\xa9\xfd\x97,l\xa1\xc5\xc2l\xde\x9f1;$\xc3\x9c\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0b;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x7f\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*Tt\xa5\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\x06\x00\x00\x00\x00\x00\x00\x00\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd1d\x80\x13\x8fX\xb4\x19\xc4\\\xc3\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\x04\xf0pV!y\xe3', 0x40, 0x82, &(0x7f00000000c0)={0x2, 0x1940000, 0x1531b10a, 0x2}) 9.188821824s ago: executing program 1 (id=1641): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000440)="9f870afe3c1c6c10e8151d5199ab11e66b4e0de2f79ac8c65d6356e0a3c9b44227eeccf8cb8f41714283537855459f278b4c40ffbbb0276601e31659ed38b92295a32b9176cdd102befb3f850a53dff73233018be37d1b733f846dfb90a13e6d996c5e5c5daff386dab026dde5d4a1dd8cce432f6d176ce09c154074b5", 0x0, &(0x7f0000000500)="5765525c5b192f2cd7170943adc7ff1ccd9237881a0aef4fb8cae2a2e948635893ec14ba14fc20c3f06ab2c209aad8ff0b3e1d575480cb8157d8742521a64f8d9bf38db5f70d6b0d1a1ed9fb556a6a612e248e79d6cfcf5651e44fa58e04f9a4a9491766b76275ebb1558aa495e421360b7458c438ecb7ae1a3f39791441eb1c24c913262bdffc37ab822d957e35b4a1be54a88aa9aa7b5d5d74f1c687ea0223ecda2aabb9122d0c1529933e987e7d7d07d411c8aa43f2", &(0x7f0000000680)="972bd846362b299efc0d8bf9e57d27320000fedfd727f3d9dd64f7b91eee4a42b28ef7e8e6cf076bbb0c4169ebc6e94684b4f09e9acb08b34fd0e0f975f2c66965ed95dc5654ce53386ba23912f846ae18ba5f22ccec65edd84e9d", 0x9f46, r2}, 0x38) unshare(0x400) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f00000017c0)={0x3, "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"}, 0x30b, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) mount_setattr(r6, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 8.902167315s ago: executing program 2 (id=1642): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x20000}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) 7.962312s ago: executing program 2 (id=1643): socket$inet(0x2, 0x2, 0x1) clock_adjtime(0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) close(0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x10c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.942374727s ago: executing program 2 (id=1644): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) mount(0x0, 0x0, 0x0, 0x12000, &(0x7f0000000840)='/dev/media#\x00') creat(0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) fcntl$setsig(r0, 0xa, 0x91) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 6.436376682s ago: executing program 4 (id=1645): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x20000}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) ppoll(&(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) 5.420716754s ago: executing program 4 (id=1646): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r5, 0x4, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x138, 0x210, 0x2d8, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xff000000]}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="666086c42e9fb11a0eccc0a0e3f5af4791267debf59e59355a2ae59366d276311d2a4331911641a4eafce9cfbb8c2817c16bae7e2fcc4f2fe9971c7d2fc12367584e7419721cd7342805595f2d02d129c006c32e690d07912552cbe348074881d9859121a42d11ec0873e5a70c57076d4bcbc93c6b91a243facc8c419494981222012126eba5c1db1e62b0ec58532015afd8cdc544f1b00ec4cd0da945c8bb3d95585aa04ac9ac9c0cdfc1acda8f7bd8f49532047a9978b89117e292206417c7e9c83e", @ANYRES32=r1], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff26bd70008000000000000000", @ANYRES32=0x0, @ANYBLOB="05160000102f00002c0012800b00010067726574617000001c00028006000e000100000008000700e0000001060010000100000008000a00", @ANYRES32=r10, @ANYBLOB], 0x54}}, 0x4000) 5.271092085s ago: executing program 1 (id=1647): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8cd9df7287d7cbb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(0xffffffffffffffff, &(0x7f0000000ac0)=""/4068, 0xfe4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) init_module(0x0, 0xa10, 0x0) 4.663429455s ago: executing program 5 (id=1648): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, 0x0) syz_usb_disconnect(r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) syz_emit_ethernet(0xe7, &(0x7f0000001540)={@local, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tipc={{0x2b, 0x4, 0x2, 0x2c, 0xd5, 0x67, 0x0, 0x10, 0x6, 0x0, @remote, @empty, {[@timestamp={0x44, 0x2c, 0x80, 0x0, 0x4, [0x9, 0x7, 0x1, 0xfffff901, 0x2, 0xc, 0x40, 0x7, 0x6, 0x0]}, @end, @lsrr={0x83, 0xb, 0x72, [@private=0xa010102, @loopback]}, @end, @rr={0x7, 0x1f, 0xfc, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback]}, @lsrr={0x83, 0x17, 0xe4, [@loopback, @rand_addr=0x64010100, @empty, @remote, @empty]}, @end, @ssrr={0x89, 0x27, 0x4a, [@broadcast, @broadcast, @broadcast, @private=0xa010102, @multicast2, @broadcast, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x11}]}]}}, @payload_direct={{{{0x29, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0x9, 0x0, 0x2, 0x3, 0x1, 0x3, 0xbd, 0x5, 0x3, 0x4e22, 0x4e22}, 0x2, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300000000fcffffff0c000000080003004d8a1c"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000480)=[{{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3}, {0x4, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}], 0x48) close(r5) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) 4.663138238s ago: executing program 3 (id=1649): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xd94}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000018c0)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4021) pipe2$9p(&(0x7f0000000040), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r5, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r5, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) 4.021116387s ago: executing program 3 (id=1650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x38100, 0x0) write$sequencer(r7, &(0x7f0000000180)=[@e={0xff, 0x0, 0x9, 0xfa, @SEQ_NOTEON=@note=0x63, 0x5, 0x7, 0xf8}, @l={0x92, 0x3, 0xb0, 0x6, 0x2, 0xc}, @generic={0x82}, @l={0x92, 0xf, 0xe0, 0x15, 0xf8, 0x2, 0x5}, @v={0x93, 0xe, 0x80, 0xe, @MIDI_NOTEON=@special, 0x4, 0x5}], 0x21) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 3.544591829s ago: executing program 2 (id=1651): mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.471549256s ago: executing program 1 (id=1652): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x34ba01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff, 0x1, r0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x5, 0x0) mkdir(0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x1) socket(0x40000000015, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000ce00"]) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0xdddd0000, 0x80000000, 0x6, 0x4, 0x0, [{0xbd, 0x15, 0x5, '\x00', 0x7a}, {0x8, 0x0, 0x40, '\x00', 0xd}, {0x3, 0x8, 0x4}, {0x5, 0x4, 0x6, '\x00', 0x20}, {0x55, 0x5, 0xa, '\x00', 0xfc}, {0x8, 0x5, 0x3, '\x00', 0x7}, {0x9, 0x6, 0x7f}, {0x9, 0x9, 0x4, '\x00', 0x1}, {0x7, 0x2, 0xb, '\x00', 0x1f}, {0x6, 0x78, 0x2, '\x00', 0x6d}, {0x80, 0xff, 0x2, '\x00', 0x1}, {0x81, 0x3, 0xf, '\x00', 0x8f}, {0x4, 0x9, 0xc4, '\x00', 0x7f}, {0xa, 0x9, 0x9, '\x00', 0x6}, {0x5, 0x8, 0x9, '\x00', 0x7}, {0x2, 0x1, 0x1, '\x00', 0x3}, {0x7f, 0x1, 0x89, '\x00', 0x6}, {0x3, 0xa, 0x5, '\x00', 0x76}, {0xab, 0xb7, 0x3, '\x00', 0x9}, {0x7, 0xfa, 0xfc, '\x00', 0x80}, {0x6, 0x81, 0xfc, '\x00', 0x8}, {0xd8, 0x8, 0x3, '\x00', 0x55}, {0x0, 0x5, 0xfb, '\x00', 0xf}, {0x2, 0x1, 0x6, '\x00', 0xc6}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r5}, 0x38) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) 3.275925309s ago: executing program 2 (id=1653): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000001a40), 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) 2.779783581s ago: executing program 3 (id=1654): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) syz_open_dev$video(0x0, 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 2.32017808s ago: executing program 1 (id=1655): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 2.258320693s ago: executing program 4 (id=1656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2.015102187s ago: executing program 2 (id=1657): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 1.916936424s ago: executing program 4 (id=1658): io_setup(0x10000, &(0x7f0000000800)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 338.226311ms ago: executing program 3 (id=1659): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff47, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 0s ago: executing program 5 (id=1660): openat$rfkill(0xffffffffffffff9c, 0x0, 0x80040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fspick(0xffffffffffffff9c, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="020200090d00000000000000000000000200081c08002000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff0000000000000000030005000000000002000000000000000000000000000000010014009b71000000"], 0x68}, 0x1, 0x7}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x121500) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x3) kernel console output (not intermixed with test programs): comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 646.289893][T12130] gretap0: entered allmulticast mode [ 646.331110][T12127] vhci_hcd: connection closed [ 646.331424][ T6436] vhci_hcd: stop threads [ 646.340673][ T6436] vhci_hcd: release socket [ 646.353260][ T6436] vhci_hcd: disconnect device [ 646.364382][ T9] vhci_hcd: vhci_device speed not set [ 646.652647][ T30] audit: type=1400 audit(2000000397.493:1427): avc: denied { connect } for pid=12101 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 646.789174][T12132] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=144 sclass=netlink_xfrm_socket pid=12132 comm=syz.3.1170 [ 647.464321][ T30] audit: type=1400 audit(2000000397.493:1428): avc: denied { write } for pid=12124 comm="syz.1.1171" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 648.023898][T12135] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 648.140290][T12142] siw: device registration error -23 [ 648.424902][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 648.445228][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 648.455326][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 648.467183][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 648.476746][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 648.658389][T12151] mkiss: ax0: crc mode is auto. [ 649.205008][T12160] fuse: Unknown parameter 'group_id00000000000000000000' [ 649.213903][T12160] validate_nla: 44 callbacks suppressed [ 649.213919][T12160] netlink: 'syz.4.1178': attribute type 2 has an invalid length. [ 649.632613][T12166] netdevsim netdevsim2: Direct firmware load for . [ 649.632613][T12166] failed with error -2 [ 649.643745][ T30] audit: type=1400 audit(649.578:1429): avc: denied { watch watch_reads } for pid=12155 comm="syz.2.1177" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 649.670260][T12166] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 649.670260][T12166] [ 649.978375][ T30] audit: type=1400 audit(649.578:1430): avc: denied { read write } for pid=12155 comm="syz.2.1177" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 650.552950][ T30] audit: type=1400 audit(649.578:1431): avc: denied { open } for pid=12155 comm="syz.2.1177" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 650.577561][ C0] vkms_vblank_simulate: vblank timer overrun [ 650.801764][ T30] audit: type=1400 audit(649.638:1432): avc: denied { firmware_load } for pid=12155 comm="syz.2.1177" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 650.907437][ T30] audit: type=1400 audit(650.618:1433): avc: denied { wake_alarm } for pid=12164 comm="syz.4.1179" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 650.928044][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.933691][T12186] siw: device registration error -23 [ 652.428281][T12198] vxcan1 speed is unknown, defaulting to 1000 [ 652.506714][T12202] netlink: 35863 bytes leftover after parsing attributes in process `syz.2.1186'. [ 652.518958][T12201] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1185'. [ 652.535089][ T30] audit: type=1400 audit(652.488:1434): avc: denied { sqpoll } for pid=12197 comm="syz.5.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 652.703997][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1185'. [ 652.744623][T12206] fuse: Unknown parameter 'group_id00000000000000000000' [ 652.752899][T12206] netlink: 'syz.2.1189': attribute type 2 has an invalid length. [ 653.201217][T12201] tipc: Started in network mode [ 653.206247][T12201] tipc: Node identity de321cb2ffac, cluster identity 4711 [ 653.213574][T12201] tipc: Enabled bearer , priority 0 [ 653.306591][T12222] CIFS mount error: No usable UNC path provided in device string! [ 653.306591][T12222] [ 653.316883][T12222] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 653.717209][T12221] xt_l2tp: invalid flags combination: 0 [ 653.745300][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1190'. [ 653.836234][T12197] tipc: Disabling bearer [ 653.953153][ T30] audit: type=1400 audit(653.918:1435): avc: denied { create } for pid=12226 comm="syz.4.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 653.981439][T12228] gretap1: entered allmulticast mode [ 654.184144][ T30] audit: type=1400 audit(654.098:1436): avc: denied { write } for pid=12226 comm="syz.4.1191" path="socket:[28035]" dev="sockfs" ino=28035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 654.621589][T12234] veth1_to_bond: entered allmulticast mode [ 654.661449][T12241] netlink: 'syz.5.1193': attribute type 13 has an invalid length. [ 655.372384][T12241] 8021q: adding VLAN 0 to HW filter on device .` [ 655.386915][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.563482][T12241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.074541][T12263] siw: device registration error -23 [ 656.293116][T12268] vxcan1 speed is unknown, defaulting to 1000 [ 656.703452][T12233] veth1_to_bond: left allmulticast mode [ 656.880638][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 656.974261][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.005319][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.091346][T12284] fuse: Unknown parameter 'group_id00000000000000000000' [ 657.113173][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.135368][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.163846][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.171518][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.188366][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.192760][T12284] netlink: 'syz.2.1200': attribute type 2 has an invalid length. [ 657.214191][ T847] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 657.230166][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.241854][ T9] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 657.314891][ T9] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 657.700823][ T847] usb 4-1: config 0 has no interfaces? [ 657.794272][ T847] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 657.803352][ T847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.305225][ T30] audit: type=1400 audit(657.738:1437): avc: denied { watch } for pid=12291 comm="syz.2.1201" path="/244/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 658.374208][ T847] usb 4-1: config 0 descriptor?? [ 658.388646][ T30] audit: type=1400 audit(657.738:1438): avc: denied { watch_sb watch_reads } for pid=12291 comm="syz.2.1201" path="/244/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 658.411878][ C0] vkms_vblank_simulate: vblank timer overrun [ 658.647853][ T30] audit: type=1400 audit(658.508:1439): avc: denied { append } for pid=12299 comm="syz.2.1203" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 659.791794][ T30] audit: type=1400 audit(659.648:1440): avc: denied { create } for pid=12297 comm="syz.5.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 659.791844][ T30] audit: type=1400 audit(659.738:1441): avc: denied { read } for pid=12307 comm="syz.1.1204" laddr=::ffff:127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 659.791883][ T30] audit: type=1400 audit(659.738:1442): avc: denied { read } for pid=12307 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.182254][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 660.182275][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 660.862268][T12316] netlink: 'syz.2.1205': attribute type 21 has an invalid length. [ 660.862325][T12316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1205'. [ 660.862603][T12316] netlink: 'syz.2.1205': attribute type 5 has an invalid length. [ 660.862632][T12316] netlink: 'syz.2.1205': attribute type 6 has an invalid length. [ 660.862660][T12316] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1205'. [ 661.304913][T12330] CUSE: info not properly terminated [ 661.307728][T12330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.362751][ T30] audit: type=1400 audit(661.268:1443): avc: denied { create } for pid=12323 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 661.462552][ T9] usb 4-1: USB disconnect, device number 8 [ 661.812966][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.863450][T12314] tty tty24: ldisc open failed (-12), clearing slot 23 [ 661.937272][ T30] audit: type=1400 audit(661.898:1444): avc: denied { bind } for pid=12325 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.937308][ T30] audit: type=1400 audit(661.898:1445): avc: denied { listen } for pid=12325 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.937328][ T30] audit: type=1400 audit(661.898:1446): avc: denied { accept } for pid=12325 comm="syz.1.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 663.115228][T12352] Invalid ELF header magic: != ELF [ 663.444738][ T9] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 663.567093][ T9358] IPVS: starting estimator thread 0... [ 663.645854][T12368] Invalid ELF header magic: != ELF [ 663.668773][T12366] IPVS: using max 75 ests per chain, 180000 per kthread [ 663.680955][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 663.697128][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 663.724850][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 663.753269][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 663.932522][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 664.304354][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 664.394282][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.419865][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.455934][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 664.476301][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 664.545831][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 664.553265][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 664.565751][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 664.595919][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 664.626093][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 664.650212][ T9] usb 3-1: string descriptor 0 read error: -22 [ 664.657633][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 664.674239][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.802185][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 664.811309][T12374] netlink: 'syz.4.1214': attribute type 11 has an invalid length. [ 664.825870][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 664.834932][T12374] netlink: 'syz.4.1214': attribute type 11 has an invalid length. [ 664.851805][ T6445] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.885677][ T6445] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.895493][ T6445] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.916914][ T6445] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.930435][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 666.922197][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 666.922227][ T30] audit: type=1400 audit(666.868:1450): avc: denied { listen } for pid=12378 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 667.800013][ T30] audit: type=1326 audit(667.678:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 667.832728][ T30] audit: type=1326 audit(667.678:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.553536][ T30] audit: type=1326 audit(667.678:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.638518][ T30] audit: type=1326 audit(667.678:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.692871][ T30] audit: type=1326 audit(667.678:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.792447][ T30] audit: type=1326 audit(667.678:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.870675][ T30] audit: type=1326 audit(667.678:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 668.959907][ T30] audit: type=1326 audit(667.678:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 669.027940][ T30] audit: type=1326 audit(667.678:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12402 comm="syz.5.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 669.265072][T12430] fuse: Bad value for 'user_id' [ 669.286295][T12430] fuse: Bad value for 'user_id' [ 669.322646][T12430] netlink: 'syz.3.1224': attribute type 2 has an invalid length. [ 670.071095][T12443] pim6reg: entered allmulticast mode [ 670.255821][T12449] fuse: Unknown parameter ' ' [ 670.599502][ T847] usb 3-1: USB disconnect, device number 19 [ 670.663462][T12454] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 671.006342][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 671.035875][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 671.090658][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 671.091015][T12462] netlink: 'syz.5.1229': attribute type 3 has an invalid length. [ 671.114748][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 671.171443][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 671.373014][T12468] xt_l2tp: invalid flags combination: 0 [ 671.564270][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 671.598327][T12465] gretap1: entered allmulticast mode [ 671.768195][T12477] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 671.777331][T12477] cramfs: wrong magic [ 672.972116][T12507] 0{X: left allmulticast mode [ 673.002013][T12507] 8021q: adding VLAN 0 to HW filter on device .` [ 673.019889][T12507] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.304694][T12507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.597052][T12514] CIFS mount error: No usable UNC path provided in device string! [ 673.597052][T12514] [ 673.597102][T12514] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 673.804368][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 674.314724][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 674.315011][ T30] audit: type=1400 audit(674.268:1535): avc: denied { write } for pid=12518 comm="syz.3.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 674.402232][T12520] CIFS mount error: No usable UNC path provided in device string! [ 674.402232][T12520] [ 674.412671][T12520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 674.423227][T12523] lo: entered allmulticast mode [ 674.701144][T12530] dvmrp8: entered allmulticast mode [ 675.029515][T12528] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 675.078089][ T847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 675.414901][ T847] usb 4-1: config 0 has no interfaces? [ 675.433905][ T847] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 675.455513][ T847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.560892][T12539] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 675.968474][ T847] usb 4-1: config 0 descriptor?? [ 676.014206][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 676.096066][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 676.734182][T12546] 0{X: left allmulticast mode [ 676.737810][T12546] team0: left promiscuous mode [ 676.737823][T12546] team_slave_0: left promiscuous mode [ 676.737897][T12546] team_slave_1: left promiscuous mode [ 676.737969][T12546] team0: left allmulticast mode [ 676.737976][T12546] team_slave_0: left allmulticast mode [ 676.737984][T12546] team_slave_1: left allmulticast mode [ 676.759407][T12546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.788276][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 676.835405][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 676.845374][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 676.857635][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 676.858823][ T24] usb 3-1: config 57 has an invalid interface number: 229 but max is 0 [ 676.896586][ T24] usb 3-1: config 57 has no interface number 0 [ 676.909597][ T24] usb 3-1: config 57 interface 229 has no altsetting 0 [ 676.926628][ T24] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 677.056738][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 677.075924][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.087288][ T24] usb 3-1: Product: syz [ 677.091514][ T24] usb 3-1: Manufacturer: syz [ 677.096584][ T24] usb 3-1: SerialNumber: syz [ 677.230419][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.622693][T12537] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 677.682352][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 678.291897][ T9] usb 4-1: USB disconnect, device number 9 [ 678.545967][ T24] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 679.027217][T12568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.125409][T12570] xt_l2tp: invalid flags combination: 0 [ 679.146976][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1246'. [ 679.274406][ T24] usb 3-1: USB disconnect, device number 20 [ 679.620637][ T30] audit: type=1400 audit(679.588:1536): avc: denied { name_bind } for pid=12572 comm="syz.1.1248" src=20008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 679.642821][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.642090][ T30] audit: type=1400 audit(680.598:1537): avc: denied { unlink } for pid=12575 comm="syz.5.1250" name="#13" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 680.886592][ T30] audit: type=1400 audit(680.598:1538): avc: denied { mount } for pid=12575 comm="syz.5.1250" name="/" dev="overlay" ino=979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 680.961494][T12584] CIFS mount error: No usable UNC path provided in device string! [ 680.961494][T12584] [ 680.971612][T12584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 681.004178][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 681.036978][ T9358] usb 5-1: USB disconnect, device number 7 [ 681.436641][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.459697][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 681.710141][T12591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1252'. [ 681.778475][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.869047][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 681.980006][ T9] usb 6-1: SerialNumber: syz [ 682.200793][T12599] vxcan1 speed is unknown, defaulting to 1000 [ 683.320929][ T30] audit: type=1400 audit(683.288:1539): avc: denied { write } for pid=12607 comm="syz.1.1256" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 683.557942][T12605] macvlan2: entered promiscuous mode [ 683.563445][T12605] macvlan2: entered allmulticast mode [ 683.571867][T12605] bond1: entered promiscuous mode [ 683.578795][T12605] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 683.666822][ T30] audit: type=1400 audit(683.578:1540): avc: denied { read } for pid=12607 comm="syz.1.1256" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 683.709522][T12605] bond1: left promiscuous mode [ 683.715039][ T30] audit: type=1400 audit(683.578:1541): avc: denied { open } for pid=12607 comm="syz.1.1256" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 684.224861][ T9] usb 6-1: can't set config #1, error -71 [ 684.404204][ T30] audit: type=1400 audit(684.368:1542): avc: denied { unmount } for pid=7267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 684.516618][ T9] usb 6-1: USB disconnect, device number 5 [ 684.793346][T12625] siw: device registration error -23 [ 685.087930][ T30] audit: type=1326 audit(685.008:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.089726][ T1152] Bluetooth: hci3: Frame reassembly failed (-84) [ 685.168805][ T30] audit: type=1326 audit(685.008:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.203186][ T30] audit: type=1326 audit(685.008:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.243229][T12633] xt_l2tp: invalid flags combination: 0 [ 685.374437][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.396850][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 685.433247][ T30] audit: type=1326 audit(685.008:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.551095][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 685.561387][T12638] netlink: 'syz.2.1262': attribute type 30 has an invalid length. [ 685.713464][ T30] audit: type=1326 audit(685.008:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.829777][ T30] audit: type=1326 audit(685.008:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 685.970668][ T30] audit: type=1326 audit(685.008:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 686.009367][ T30] audit: type=1326 audit(685.018:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 686.066274][ T30] audit: type=1326 audit(685.018:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 686.254297][ T30] audit: type=1326 audit(685.018:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12628 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 687.114411][T12489] Bluetooth: hci3: command 0x1003 tx timeout [ 687.117329][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 687.903675][T12664] comedi comedi0: comedi_config --init_data is deprecated [ 688.901914][T12670] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 689.538697][T12680] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 690.996858][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 691.002017][ T30] audit: type=1400 audit(690.528:1584): avc: denied { ioctl } for pid=12686 comm="syz.4.1274" path="socket:[29966]" dev="sockfs" ino=29966 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 691.004499][T12700] xt_l2tp: invalid flags combination: 0 [ 691.524762][T12697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1272'. [ 691.681146][T12700] gretap0: entered allmulticast mode [ 693.228669][T12712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 694.322519][ T30] audit: type=1400 audit(694.278:1585): avc: denied { map } for pid=12719 comm="syz.2.1279" path="socket:[30744]" dev="sockfs" ino=30744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 694.323964][T12715] batadv2: entered promiscuous mode [ 694.744401][ T36] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 695.066030][T12732] vxcan1 speed is unknown, defaulting to 1000 [ 695.575815][ T30] audit: type=1326 audit(695.528:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 695.726806][ T30] audit: type=1326 audit(695.538:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.267617][ T30] audit: type=1326 audit(695.538:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.312753][T12747] CIFS mount error: No usable UNC path provided in device string! [ 696.312753][T12747] [ 696.324027][T12747] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 696.384354][ T30] audit: type=1326 audit(695.538:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.506873][ T30] audit: type=1326 audit(695.538:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.531782][ T30] audit: type=1326 audit(695.538:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.555511][ C1] vkms_vblank_simulate: vblank timer overrun [ 696.771659][ T30] audit: type=1326 audit(695.538:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 696.833895][ T30] audit: type=1326 audit(695.538:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 697.130556][ T30] audit: type=1326 audit(695.538:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f947d38d810 code=0x7ffc0000 [ 697.212145][ T30] audit: type=1326 audit(695.538:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 697.244211][T12758] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 697.281930][T12758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 697.334745][ T30] audit: type=1326 audit(695.538:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 697.359010][ T30] audit: type=1326 audit(695.538:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12734 comm="syz.5.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f947d38efc9 code=0x7ffc0000 [ 697.543740][T12758] bond2: (slave veth3): Enslaving as an active interface with a down link [ 698.560055][T12761] vlan2: entered allmulticast mode [ 698.568053][T12761] veth1: entered allmulticast mode [ 698.591760][T12761] veth1: entered promiscuous mode [ 698.726120][T12761] veth1: left promiscuous mode [ 698.752645][T12761] bond2: (slave vlan2): making interface the new active one [ 698.762085][T12761] veth1: entered promiscuous mode [ 698.769052][T12761] vlan2: entered promiscuous mode [ 698.841173][T12761] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 700.678479][ T5927] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 700.847227][ T5927] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 700.959515][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.983956][ T5927] usb 2-1: config 0 has no interface number 0 [ 701.125522][ T5927] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 701.188591][T12792] xt_l2tp: invalid flags combination: 0 [ 701.218094][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 701.598400][ T5927] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.675831][ T5927] usb 2-1: config 0 interface 11 has no altsetting 0 [ 701.682641][ T5927] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 701.729747][T12795] ceph: No mds server is up or the cluster is laggy [ 701.736676][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.746572][ T5927] usb 2-1: config 0 descriptor?? [ 701.805457][ T5927] usb 2-1: can't set config #0, error -71 [ 701.814318][ T5927] usb 2-1: USB disconnect, device number 8 [ 703.641442][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 703.641457][ T30] audit: type=1400 audit(703.608:1604): avc: denied { read write } for pid=12816 comm="syz.4.1298" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 703.705690][ T30] audit: type=1400 audit(703.648:1605): avc: denied { open } for pid=12816 comm="syz.4.1298" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 703.769136][ T30] audit: type=1400 audit(703.728:1606): avc: denied { create } for pid=12818 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 703.929305][ T30] audit: type=1400 audit(703.738:1607): avc: denied { setopt } for pid=12818 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 704.088429][T12826] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 704.402808][T12833] bridge0: entered promiscuous mode [ 704.447616][ T30] audit: type=1400 audit(704.068:1608): avc: denied { ioctl } for pid=12816 comm="syz.4.1298" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 704.846799][ T30] audit: type=1400 audit(704.808:1609): avc: denied { getopt } for pid=12838 comm="syz.1.1301" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 704.866629][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.072186][ T30] audit: type=1400 audit(705.928:1610): avc: denied { mount } for pid=12851 comm="syz.2.1303" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 707.280727][T12873] vxcan1 speed is unknown, defaulting to 1000 [ 707.735556][T12887] xt_l2tp: invalid flags combination: 0 [ 707.795771][T12887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 708.277672][T12899] batadv3: entered promiscuous mode [ 709.053272][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1310'. [ 709.138402][T12898] libceph: resolve '0..' (ret=-3): failed [ 709.550456][T12916] netlink: 'syz.1.1311': attribute type 21 has an invalid length. [ 709.558462][T12916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1311'. [ 709.570629][T12916] netlink: 'syz.1.1311': attribute type 21 has an invalid length. [ 709.578536][T12916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1311'. [ 710.936275][T12936] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 711.815075][T12958] bridge0: entered promiscuous mode [ 714.244265][T12975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.845122][ T6445] vlan2: left promiscuous mode [ 715.907989][T13002] team0: left allmulticast mode [ 715.913282][T13002] team_slave_0: left allmulticast mode [ 715.918889][T13002] team_slave_1: left allmulticast mode [ 715.924470][T13002] team0: left promiscuous mode [ 715.930746][T13002] team_slave_0: left promiscuous mode [ 715.936497][T13002] team_slave_1: left promiscuous mode [ 715.942212][T13002] bridge0: port 1(team0) entered disabled state [ 716.957879][ T30] audit: type=1400 audit(716.928:1611): avc: denied { bind } for pid=13012 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 717.247786][T13015] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 717.965856][T13028] CIFS mount error: No usable UNC path provided in device string! [ 717.965856][T13028] [ 717.976064][T13028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 718.644185][ T847] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 718.881408][ T847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 718.892596][ T847] usb 3-1: not running at top speed; connect to a high speed hub [ 718.905337][ T847] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 719.009582][ T847] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 719.060774][ T847] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 719.335684][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1332'. [ 719.362882][ T847] usb 3-1: config 129 has no interface number 0 [ 719.774766][ T847] usb 3-1: config 129 has no interface number 1 [ 719.784208][ T847] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 719.810847][ T847] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 719.832900][ T847] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 720.163059][T13057] syz.4.1334 (13057): drop_caches: 2 [ 720.188163][ T30] audit: type=1400 audit(720.018:1612): avc: denied { call } for pid=13054 comm="syz.4.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 720.254129][ T847] usb 3-1: config 129 interface 135 has no altsetting 0 [ 720.363783][T13061] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 720.384118][ T847] usb 3-1: config 129 interface 5 has no altsetting 0 [ 720.425550][ T847] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 720.470596][ T847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.539535][ T847] usb 3-1: Product: syz [ 720.549081][ T847] usb 3-1: Manufacturer: syz [ 720.578458][ T847] usb 3-1: SerialNumber: syz [ 721.606723][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 721.770518][ T847] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 721.791887][ T847] usb 3-1: MIDIStreaming interface descriptor not found [ 721.866655][ T847] usb 3-1: USB disconnect, device number 21 [ 721.895555][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.946518][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 721.994908][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.086278][T13084] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1339'. [ 722.283407][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 722.330679][ T10] usb 2-1: SerialNumber: syz [ 722.558251][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 724.242494][ T847] usb 2-1: USB disconnect, device number 9 [ 724.539730][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.549260][T13112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.770915][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.783623][ T30] audit: type=1400 audit(724.748:1613): avc: denied { bind } for pid=13106 comm="syz.5.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 724.804832][T13116] overlayfs: missing 'lowerdir' [ 724.815936][ T30] audit: type=1400 audit(724.778:1614): avc: denied { mounton } for pid=13106 comm="syz.5.1346" path="/file0" dev="ramfs" ino=31789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 724.861365][T13117] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 724.868567][T13117] overlayfs: failed to set xattr on upper [ 724.874316][T13117] overlayfs: ...falling back to redirect_dir=nofollow. [ 724.881157][T13117] overlayfs: ...falling back to index=off. [ 724.887003][T13117] overlayfs: ...falling back to uuid=null. [ 724.892931][T13117] overlayfs: conflicting lowerdir path [ 724.899846][T13112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.281261][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 725.990737][T13128] CIFS mount error: No usable UNC path provided in device string! [ 725.990737][T13128] [ 726.000778][T13128] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 726.415563][T13135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.386881][ T30] audit: type=1326 audit(727.328:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 727.410514][ T6859] Bluetooth: hci3: Frame reassembly failed (-84) [ 727.449614][ T30] audit: type=1326 audit(727.328:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 727.654718][ T30] audit: type=1326 audit(727.328:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 727.726180][ T30] audit: type=1326 audit(727.328:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 727.749078][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.855068][ T30] audit: type=1326 audit(727.328:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 728.204637][ T30] audit: type=1326 audit(727.328:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 728.288609][ T30] audit: type=1326 audit(727.328:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 729.005061][ T30] audit: type=1326 audit(727.338:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13140 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 729.503610][T12489] Bluetooth: hci3: command 0x1003 tx timeout [ 729.511300][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 730.958924][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 730.958941][ T30] audit: type=1400 audit(730.448:1655): avc: denied { read append } for pid=13174 comm="syz.3.1358" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 731.001970][T13180] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 731.135025][ T30] audit: type=1400 audit(730.458:1656): avc: denied { create } for pid=13174 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 731.158171][ T30] audit: type=1400 audit(730.468:1657): avc: denied { bind } for pid=13174 comm="syz.3.1358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 732.128509][T13192] bridge0: left promiscuous mode [ 732.754844][T13199] CIFS mount error: No usable UNC path provided in device string! [ 732.754844][T13199] [ 732.764867][T13199] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 732.864382][T13201] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1361'. [ 734.296178][ T30] audit: type=1400 audit(733.718:1658): avc: denied { write } for pid=13206 comm="syz.3.1365" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 734.883918][T13209] netlink: 'syz.5.1364': attribute type 20 has an invalid length. [ 734.892275][T13209] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.957310][T13209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 734.964648][T13209] IPv6: NLM_F_CREATE should be set when creating new route [ 735.066405][ T30] audit: type=1400 audit(735.018:1659): avc: denied { mount } for pid=13213 comm="syz.2.1367" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 735.370736][T13231] mkiss: ax0: crc mode is auto. [ 735.458386][T13233] batadv1: entered promiscuous mode [ 735.622189][ T30] audit: type=1326 audit(735.508:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 735.997707][ T30] audit: type=1326 audit(735.508:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.214209][ T30] audit: type=1326 audit(735.508:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.254248][ T30] audit: type=1326 audit(735.508:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.389920][ T30] audit: type=1326 audit(735.508:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.504161][ T30] audit: type=1326 audit(735.508:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.544144][ T30] audit: type=1326 audit(735.508:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.567005][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.624396][ T30] audit: type=1326 audit(735.518:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.669077][ T30] audit: type=1326 audit(735.518:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.696002][ T30] audit: type=1326 audit(735.518:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.718776][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.729106][ T30] audit: type=1326 audit(735.518:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13223 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 736.751954][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.694528][T12489] Bluetooth: hci3: command 0x1003 tx timeout [ 737.701693][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 738.948752][T13266] geneve2: entered allmulticast mode [ 739.170520][T13274] xt_l2tp: invalid flags combination: 0 [ 739.178877][T13274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1377'. [ 739.197694][T13274] gretap0: entered allmulticast mode [ 740.989640][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 741.021237][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 741.021253][ T30] audit: type=1400 audit(740.978:1702): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 741.047830][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.221586][ T30] audit: type=1400 audit(741.068:1703): avc: denied { create } for pid=13289 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 741.257641][ T30] audit: type=1400 audit(741.068:1704): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.281221][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.288277][T13284] sp0: Synchronizing with TNC [ 741.374325][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 741.544437][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 741.737168][ T30] audit: type=1400 audit(741.078:1705): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.819104][ T30] audit: type=1400 audit(741.078:1707): avc: denied { read write } for pid=13281 comm="syz.4.1379" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 741.846265][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.865767][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.015641][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 742.030833][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.041789][ T24] usb 5-1: Product: syz [ 742.051289][ T24] usb 5-1: Manufacturer: syz [ 742.057627][ T24] usb 5-1: SerialNumber: syz [ 742.289821][ T24] usb 5-1: config 0 descriptor?? [ 742.312983][ T30] audit: type=1400 audit(741.078:1708): avc: denied { open } for pid=13281 comm="syz.4.1379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.472198][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 742.480904][ T30] audit: type=1400 audit(741.078:1709): avc: denied { ioctl } for pid=13281 comm="syz.4.1379" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.514601][ T30] audit: type=1400 audit(741.098:1710): avc: denied { prog_load } for pid=13289 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 743.083784][ T50] usb 5-1: Failed to submit usb control message: -71 [ 743.084364][ T5870] usb 5-1: USB disconnect, device number 8 [ 743.304991][T13281] [U] [ 743.306276][ T30] audit: type=1400 audit(741.098:1711): avc: denied { bpf } for pid=13289 comm="syz.1.1380" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 743.355841][T13310] siw: device registration error -23 [ 743.359305][ T50] usb 5-1: unable to send the bmi data to the device: -71 [ 743.672743][ T50] usb 5-1: unable to get target info from device [ 743.688690][ T50] usb 5-1: could not get target info (-71) [ 743.750777][ T50] usb 5-1: could not probe fw (-71) [ 743.765857][ T30] audit: type=1400 audit(741.098:1712): avc: denied { perfmon } for pid=13289 comm="syz.1.1380" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 743.834054][T13315] bridge0: left promiscuous mode [ 745.248998][T13338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1388'. [ 746.144291][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 746.144307][ T30] audit: type=1400 audit(745.658:1785): avc: denied { unlink } for pid=13334 comm="syz.5.1390" name="#17" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 746.205664][T13342] siw: device registration error -23 [ 746.490417][ T30] audit: type=1400 audit(745.668:1786): avc: denied { mount } for pid=13334 comm="syz.5.1390" name="/" dev="overlay" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 746.548278][ T30] audit: type=1400 audit(746.308:1787): avc: denied { unmount } for pid=7267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 746.690184][ T30] audit: type=1400 audit(746.568:1788): avc: denied { create } for pid=13346 comm="syz.4.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 746.873311][ T30] audit: type=1400 audit(746.578:1789): avc: denied { getopt } for pid=13346 comm="syz.4.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 746.903787][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.931968][ T30] audit: type=1400 audit(746.608:1790): avc: denied { mount } for pid=13346 comm="syz.4.1392" name="/" dev="autofs" ino=33002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 747.431588][ T30] audit: type=1400 audit(746.678:1791): avc: denied { create } for pid=13349 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.450948][ T30] audit: type=1400 audit(746.888:1792): avc: denied { create } for pid=13349 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 747.602603][ T30] audit: type=1400 audit(746.988:1793): avc: denied { setopt } for pid=13351 comm="syz.5.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 747.797219][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 748.061761][T13366] vxcan1 speed is unknown, defaulting to 1000 [ 748.294223][ T30] audit: type=1400 audit(747.528:1794): avc: denied { bind } for pid=13349 comm="syz.2.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 749.063002][T13370] netlink: 'syz.5.1395': attribute type 20 has an invalid length. [ 749.083668][T13370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.165761][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 751.166475][ T30] audit: type=1400 audit(751.118:1797): avc: denied { bind } for pid=13383 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.284606][ T30] audit: type=1400 audit(751.118:1798): avc: denied { setopt } for pid=13383 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.438789][T13389] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 751.494162][ T30] audit: type=1400 audit(751.128:1799): avc: denied { accept } for pid=13383 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.529308][ T30] audit: type=1400 audit(751.138:1800): avc: denied { write } for pid=13383 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 751.553565][T13397] CIFS mount error: No usable UNC path provided in device string! [ 751.553565][T13397] [ 751.563607][T13397] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 751.589047][ T30] audit: type=1400 audit(751.518:1801): avc: denied { read } for pid=13395 comm="syz.4.1402" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 751.611934][ T30] audit: type=1400 audit(751.518:1802): avc: denied { open } for pid=13395 comm="syz.4.1402" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 751.640804][ T30] audit: type=1400 audit(751.518:1803): avc: denied { execute } for pid=13391 comm="syz.3.1400" name="file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 751.663245][ T30] audit: type=1400 audit(751.518:1804): avc: denied { execute_no_trans } for pid=13391 comm="syz.3.1400" path="/284/file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 751.687825][ T30] audit: type=1400 audit(751.518:1805): avc: denied { mounton } for pid=13391 comm="syz.3.1400" path="/284/file0" dev="tmpfs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 751.726410][T13390] gretap0: entered promiscuous mode [ 751.745743][ T30] audit: type=1400 audit(751.658:1806): avc: denied { mounton } for pid=13391 comm="syz.3.1400" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 751.991605][T13389] macvlan3: entered promiscuous mode [ 751.997240][T13389] macvlan3: entered allmulticast mode [ 752.167378][T13389] bond5: entered promiscuous mode [ 752.181935][T13389] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 752.222819][T13389] bond5: left promiscuous mode [ 753.839314][T13417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.607251][T13449] vxcan1 speed is unknown, defaulting to 1000 [ 756.751366][T13435] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 756.956694][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 756.956710][ T30] audit: type=1400 audit(756.928:1832): avc: denied { write } for pid=13458 comm="syz.3.1412" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 757.549963][ T30] audit: type=1400 audit(757.508:1833): avc: denied { getopt } for pid=13462 comm="syz.2.1413" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 757.830688][ T30] audit: type=1400 audit(757.768:1834): avc: denied { mount } for pid=13462 comm="syz.2.1413" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 757.851905][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.348549][ T30] audit: type=1400 audit(758.168:1835): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 758.381751][T13472] CIFS mount error: No usable UNC path provided in device string! [ 758.381751][T13472] [ 758.391886][T13472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 758.504908][ T30] audit: type=1400 audit(758.478:1836): avc: denied { read write } for pid=13476 comm="syz.2.1416" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 758.897193][ T30] audit: type=1400 audit(758.478:1837): avc: denied { open } for pid=13476 comm="syz.2.1416" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 758.919751][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.554248][ T30] audit: type=1400 audit(759.108:1838): avc: denied { write } for pid=13480 comm="syz.1.1417" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.079662][T13497] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 760.100565][ T6445] Bluetooth: hci3: Frame reassembly failed (-84) [ 760.144895][ T30] audit: type=1400 audit(760.038:1839): avc: denied { name_bind } for pid=13491 comm="syz.3.1418" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 760.177106][ T30] audit: type=1400 audit(760.058:1840): avc: denied { create } for pid=13491 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 760.434120][ T30] audit: type=1400 audit(760.058:1841): avc: denied { connect } for pid=13491 comm="syz.3.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 760.672108][T13502] netlink: 'syz.1.1420': attribute type 10 has an invalid length. [ 760.688843][T13502] team0: left promiscuous mode [ 760.693831][T13502] team_slave_0: left promiscuous mode [ 760.704832][T13502] team_slave_1: left promiscuous mode [ 760.713490][T13502] team0: left allmulticast mode [ 760.719075][T13502] team_slave_0: left allmulticast mode [ 760.964665][T13509] CIFS mount error: No usable UNC path provided in device string! [ 760.964665][T13509] [ 760.974684][T13509] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 761.065374][T13502] team_slave_1: left allmulticast mode [ 761.281755][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1421'. [ 761.751609][T13517] siw: device registration error -23 [ 762.128641][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 762.128652][ T30] audit: type=1400 audit(762.098:1852): avc: denied { create } for pid=13522 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 762.157085][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 762.194023][ T30] audit: type=1400 audit(762.158:1853): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 762.745829][T13529] xt_l2tp: invalid flags combination: 0 [ 762.746081][T13529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1426'. [ 762.761645][T13529] gretap1: entered allmulticast mode [ 762.891321][T13525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 762.950160][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 763.456524][ T30] audit: type=1400 audit(763.228:1854): avc: denied { create } for pid=13536 comm="syz.4.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 763.574272][ T30] audit: type=1400 audit(763.288:1855): avc: denied { write } for pid=13536 comm="syz.4.1429" path="socket:[33415]" dev="sockfs" ino=33415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 763.723223][T13535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.842245][ T30] audit: type=1400 audit(763.788:1856): avc: denied { ioctl } for pid=13536 comm="syz.4.1429" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32374 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 764.071660][ T30] audit: type=1400 audit(764.038:1857): avc: denied { read } for pid=13545 comm="syz.1.1433" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 764.222104][ T30] audit: type=1400 audit(764.038:1858): avc: denied { open } for pid=13545 comm="syz.1.1433" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 764.245382][ T30] audit: type=1400 audit(764.038:1859): avc: denied { ioctl } for pid=13545 comm="syz.1.1433" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 764.333821][T13555] CIFS mount error: No usable UNC path provided in device string! [ 764.333821][T13555] [ 764.416486][T13558] wg1: entered promiscuous mode [ 764.421458][T13558] wg1: entered allmulticast mode [ 764.853142][T13555] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 764.994831][T13564] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 765.002802][T13564] cramfs: wrong magic [ 765.015203][ T30] audit: type=1400 audit(764.958:1860): avc: denied { append } for pid=13550 comm="syz.4.1434" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 765.038019][ T30] audit: type=1400 audit(764.958:1861): avc: denied { ioctl } for pid=13550 comm="syz.4.1434" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 765.611253][T13573] xt_l2tp: invalid flags combination: 0 [ 765.618300][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1435'. [ 765.634002][T13573] gretap0: entered allmulticast mode [ 767.488650][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 767.488660][ T30] audit: type=1400 audit(767.458:1863): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 768.052479][T13600] vxcan1 speed is unknown, defaulting to 1000 [ 768.471012][ T30] audit: type=1400 audit(768.358:1864): avc: denied { bind } for pid=13578 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.534592][T13598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1437'. [ 768.606260][ T30] audit: type=1400 audit(768.498:1865): avc: denied { setopt } for pid=13578 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 768.607887][ T5870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 768.626205][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.974124][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 769.057346][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.168812][ T5870] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 769.184262][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.192786][ T5870] usb 5-1: Product: syz [ 769.197298][ T5870] usb 5-1: Manufacturer: syz [ 769.201943][ T5870] usb 5-1: SerialNumber: syz [ 769.298236][ T5870] usb 5-1: config 0 descriptor?? [ 769.308013][ T5870] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 769.393328][T13606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.701223][T13611] netlink: 'syz.5.1443': attribute type 5 has an invalid length. [ 769.758542][T13611] ip6erspan0: entered promiscuous mode [ 769.891242][ T30] audit: type=1400 audit(769.768:1866): avc: denied { create } for pid=13607 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 770.014663][ T5870] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 770.916680][ T5870] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 770.921411][ T30] audit: type=1400 audit(769.768:1867): avc: denied { write } for pid=13607 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 771.241453][ T5870] usb 5-1: USB disconnect, device number 9 [ 771.645231][T13628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.949353][ T30] audit: type=1400 audit(771.908:1868): avc: denied { write } for pid=13618 comm="syz.4.1445" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 771.998569][T13632] netlink: 'syz.5.1447': attribute type 4 has an invalid length. [ 772.222744][T13637] xt_l2tp: invalid flags combination: 0 [ 772.229358][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1448'. [ 772.245183][T13637] gretap0: entered allmulticast mode [ 772.726601][T13642] CIFS mount error: No usable UNC path provided in device string! [ 772.726601][T13642] [ 772.794214][T13642] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 773.594639][T13654] xt_l2tp: invalid flags combination: 0 [ 773.601454][T13654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1451'. [ 773.955288][T13654] gretap0: entered allmulticast mode [ 775.185918][T13680] netlink: 1296 bytes leftover after parsing attributes in process `syz.2.1459'. [ 775.266954][ T30] audit: type=1400 audit(775.148:1869): avc: denied { ioctl } for pid=13675 comm="syz.2.1459" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 775.537243][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 775.664177][ T30] audit: type=1400 audit(775.598:1870): avc: denied { write } for pid=13678 comm="syz.1.1460" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 775.687234][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.891410][ T5870] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 775.891439][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.891458][ T5870] usb 4-1: Product: syz [ 775.891472][ T5870] usb 4-1: Manufacturer: syz [ 775.891487][ T5870] usb 4-1: SerialNumber: syz [ 775.900301][ T5870] usb 4-1: config 0 descriptor?? [ 776.553933][T13690] vxcan1 speed is unknown, defaulting to 1000 [ 776.671688][ T5870] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 776.821566][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 776.846330][ T5870] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 776.870195][ T5870] usb 4-1: media controller created [ 777.045034][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.235950][T13699] dvb-usb: bulk message failed: -22 (7/0) [ 777.797531][ T5870] DVB: Unable to find symbol mt352_attach() [ 777.843313][T13702] CIFS mount error: No usable UNC path provided in device string! [ 777.843313][T13702] [ 778.101554][T13702] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 778.372850][ T5870] DVB: Unable to find symbol nxt6000_attach() [ 778.386233][ T5870] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 778.462747][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 778.601385][ T5870] dvb-usb: schedule remote query interval to 1000 msecs. [ 778.634831][ T30] audit: type=1400 audit(778.568:1871): avc: denied { read } for pid=5167 comm="acpid" name="event4" dev="devtmpfs" ino=3303 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.657059][ T30] audit: type=1400 audit(778.568:1872): avc: denied { open } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3303 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.687577][ T30] audit: type=1400 audit(778.568:1873): avc: denied { ioctl } for pid=5167 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3303 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 778.805926][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 778.827952][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 778.834002][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 778.843703][ T5870] usb 4-1: USB disconnect, device number 10 [ 778.989212][T13714] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 778.997197][T13714] cramfs: wrong magic [ 779.196450][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 779.441832][T13721] xt_l2tp: invalid flags combination: 0 [ 779.452454][T13721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 779.483531][T13721] gretap0: entered allmulticast mode [ 779.894148][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 780.126870][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 780.135828][T13730] netlink: 'syz.5.1468': attribute type 30 has an invalid length. [ 780.207570][ T50] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.225585][ T50] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.250595][ T5870] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 780.267619][ T50] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.274095][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 780.299075][ T30] audit: type=1326 audit(780.258:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 780.321950][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.333697][ T5870] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 780.352765][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 780.361676][ T5870] usb 4-1: Product: syz [ 780.362079][ T50] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.366520][ T5870] usb 4-1: Manufacturer: syz [ 780.434304][ T5870] usb 4-1: SerialNumber: syz [ 780.449975][ T5870] usb 4-1: config 0 descriptor?? [ 780.455646][ T30] audit: type=1326 audit(780.268:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 780.482973][ T5870] usb 4-1: selecting invalid altsetting 0 [ 780.497740][ T30] audit: type=1326 audit(780.268:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 780.527452][ T30] audit: type=1326 audit(780.268:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 780.880906][ T30] audit: type=1326 audit(780.268:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.088533][ T30] audit: type=1326 audit(780.268:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.138575][ T30] audit: type=1326 audit(780.268:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.506902][ T30] audit: type=1326 audit(780.268:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.556094][ T30] audit: type=1326 audit(780.268:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.608915][ T30] audit: type=1326 audit(780.268:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13723 comm="syz.4.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 781.733132][ T5870] usb 4-1: USB disconnect, device number 11 [ 782.447160][T13748] netlink: 'syz.2.1473': attribute type 4 has an invalid length. [ 782.455042][T13748] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1473'. [ 784.371248][T13769] use of bytesused == 0 is deprecated and will be removed in the future, [ 784.381588][T13769] use the actual size instead. [ 785.060826][T13776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.250529][T13779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1476'. [ 785.705576][T13785] vxcan1 speed is unknown, defaulting to 1000 [ 786.105219][T13779] gretap1: entered allmulticast mode [ 786.494603][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 786.985900][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 786.985916][ T30] audit: type=1400 audit(786.957:1919): avc: denied { ioctl } for pid=13795 comm="syz.1.1482" path="socket:[34900]" dev="sockfs" ino=34900 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 787.016199][ C1] vkms_vblank_simulate: vblank timer overrun [ 787.495476][ T30] audit: type=1400 audit(786.957:1920): avc: denied { bind } for pid=13795 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 787.708008][T13807] ISOFS: Unable to identify CD-ROM format. [ 787.732624][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 787.767831][T13804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.900886][T13822] xt_l2tp: invalid flags combination: 0 [ 788.918164][T13822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1487'. [ 789.104192][ T30] audit: type=1400 audit(788.957:1921): avc: denied { connect } for pid=13800 comm="syz.5.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 789.181630][ T30] audit: type=1400 audit(788.957:1922): avc: denied { write } for pid=13800 comm="syz.5.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 789.202232][ T30] audit: type=1400 audit(789.007:1923): avc: denied { read } for pid=13800 comm="syz.5.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 789.444295][ T30] audit: type=1400 audit(789.057:1924): avc: denied { setopt } for pid=13816 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 789.524099][ T30] audit: type=1400 audit(789.147:1925): avc: denied { write } for pid=13816 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 790.186567][T13829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.904295][ T30] audit: type=1400 audit(790.767:1926): avc: denied { ioctl } for pid=13835 comm="syz.5.1490" path="socket:[33989]" dev="sockfs" ino=33989 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 790.928407][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.246602][ T30] audit: type=1400 audit(790.847:1927): avc: denied { mounton } for pid=13835 comm="syz.5.1490" path="/229/file1" dev="autofs" ino=33991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 791.589603][T13851] vxcan1 speed is unknown, defaulting to 1000 [ 792.054524][ T30] audit: type=1400 audit(791.197:1928): avc: denied { write } for pid=13841 comm="syz.4.1489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 792.147403][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1492'. [ 792.207326][ T30] audit: type=1400 audit(792.167:1929): avc: denied { read } for pid=13842 comm="syz.2.1492" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 792.461144][T13853] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1492'. [ 792.487879][T13853] debugfs: '`] Iq!>s*!)\+`iF=' already exists in 'ieee80211' [ 792.594772][ T30] audit: type=1400 audit(792.167:1930): avc: denied { open } for pid=13842 comm="syz.2.1492" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 792.709971][ T30] audit: type=1400 audit(792.177:1931): avc: denied { ioctl } for pid=13842 comm="syz.2.1492" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 792.799163][ T30] audit: type=1400 audit(792.217:1932): avc: denied { bind } for pid=13842 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 792.904175][ T9358] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 792.949309][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 792.974739][T13862] siw: device registration error -23 [ 793.018889][ T6436] Bluetooth: hci3: Frame reassembly failed (-84) [ 793.024418][ T30] audit: type=1400 audit(792.217:1933): avc: denied { write } for pid=13842 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 793.145986][ T9358] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 793.154343][ T9358] usb 5-1: config 0 has no interface number 0 [ 793.160476][ T9358] usb 5-1: config 0 interface 104 has no altsetting 0 [ 793.176574][T13866] wg1: entered promiscuous mode [ 793.181486][T13866] wg1: entered allmulticast mode [ 793.214757][ T9358] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 793.272550][ T9358] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 793.284941][ T9358] usb 5-1: Product: syz [ 793.284962][ T9358] usb 5-1: Manufacturer: syz [ 793.284977][ T9358] usb 5-1: SerialNumber: syz [ 793.293385][ T9358] usb 5-1: config 0 descriptor?? [ 793.393231][ T30] audit: type=1400 audit(793.357:1934): avc: denied { read } for pid=13857 comm="syz.1.1494" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 793.477812][ T30] audit: type=1400 audit(793.447:1935): avc: denied { shutdown } for pid=13871 comm="syz.3.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 793.677290][ T30] audit: type=1400 audit(793.467:1936): avc: denied { open } for pid=13872 comm="syz.2.1500" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 794.154346][ T30] audit: type=1400 audit(793.677:1937): avc: denied { open } for pid=13857 comm="syz.1.1494" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 794.389568][T13879] netlink: 'syz.4.1495': attribute type 14 has an invalid length. [ 795.034533][T12489] Bluetooth: hci3: command 0x1003 tx timeout [ 795.054201][ T5821] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 796.176295][ T9358] usb 5-1: USB disconnect, device number 10 [ 796.932212][T13904] vxcan1 speed is unknown, defaulting to 1000 [ 797.576273][ T9358] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 797.914595][T13912] vxcan1 speed is unknown, defaulting to 1000 [ 798.534305][ T9358] usb 3-1: Using ep0 maxpacket: 32 [ 798.542765][ T9358] usb 3-1: config 0 has no interfaces? [ 798.556157][ T9358] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 798.565404][ T9358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.573454][ T9358] usb 3-1: Product: syz [ 798.679047][ T9358] usb 3-1: Manufacturer: syz [ 798.683985][ T9358] usb 3-1: SerialNumber: syz [ 798.709144][ T9358] usb 3-1: config 0 descriptor?? [ 799.360421][T13920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 799.856244][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 799.856260][ T30] audit: type=1400 audit(799.827:1942): avc: denied { read } for pid=13922 comm="syz.4.1508" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 800.021317][ T30] audit: type=1400 audit(799.857:1943): avc: denied { open } for pid=13922 comm="syz.4.1508" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 800.062176][ T30] audit: type=1400 audit(799.877:1944): avc: denied { ioctl } for pid=13922 comm="syz.4.1508" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 800.759015][ T9358] usb 3-1: USB disconnect, device number 22 [ 800.963512][ T30] audit: type=1400 audit(800.917:1945): avc: denied { write } for pid=13939 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 800.969722][T13940] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 801.149504][ T30] audit: type=1400 audit(800.927:1946): avc: denied { attach_queue } for pid=13939 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 802.244367][ T30] audit: type=1400 audit(802.097:1947): avc: denied { read write } for pid=13949 comm="syz.4.1514" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 802.408109][T13957] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 802.416000][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 802.712827][ T30] audit: type=1400 audit(802.097:1948): avc: denied { open } for pid=13949 comm="syz.4.1514" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 803.018027][T13966] vxcan1 speed is unknown, defaulting to 1000 [ 803.424367][ T30] audit: type=1800 audit(802.167:1949): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1515" name="bus" dev="tmpfs" ino=1637 res=0 errno=0 [ 803.492580][ T30] audit: type=1400 audit(802.167:1950): avc: denied { shutdown } for pid=13955 comm="syz.3.1515" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 804.570065][T13978] vxcan1 speed is unknown, defaulting to 1000 [ 805.217468][T13983] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 805.513825][ T30] audit: type=1400 audit(805.457:1951): avc: denied { create } for pid=13984 comm="syz.5.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 805.573924][T13995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 805.704945][ T30] audit: type=1400 audit(805.607:1952): avc: denied { accept } for pid=13990 comm="syz.3.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 807.284393][T14016] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 807.496611][T14021] vxcan1 speed is unknown, defaulting to 1000 [ 808.155070][ T30] audit: type=1400 audit(808.097:1953): avc: denied { block_suspend } for pid=14024 comm="syz.3.1527" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 808.202432][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.278328][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.192555][ T30] audit: type=1400 audit(809.147:1954): avc: denied { create } for pid=14030 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 810.249889][ T30] audit: type=1400 audit(809.147:1955): avc: denied { setopt } for pid=14030 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 810.294113][ T30] audit: type=1400 audit(809.187:1956): avc: denied { bind } for pid=14030 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 810.477651][ T30] audit: type=1400 audit(809.187:1957): avc: denied { bind } for pid=14030 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 810.515571][ T30] audit: type=1400 audit(809.197:1958): avc: denied { setopt } for pid=14030 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 810.588777][T14046] lo speed is unknown, defaulting to 1000 [ 810.594926][T14046] lo speed is unknown, defaulting to 1000 [ 810.606161][T14046] lo speed is unknown, defaulting to 1000 [ 810.687380][T14046] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 810.800415][T14046] lo speed is unknown, defaulting to 1000 [ 810.817902][T14046] lo speed is unknown, defaulting to 1000 [ 810.835133][T14046] lo speed is unknown, defaulting to 1000 [ 810.850322][T14046] lo speed is unknown, defaulting to 1000 [ 810.865987][T14046] lo speed is unknown, defaulting to 1000 [ 810.882089][T14046] lo speed is unknown, defaulting to 1000 [ 810.929738][ T30] audit: type=1400 audit(809.197:1959): avc: denied { ioctl } for pid=14030 comm="syz.5.1528" path="socket:[35410]" dev="sockfs" ino=35410 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 810.954337][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.020962][T14044] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 811.891181][T14052] vxcan1 speed is unknown, defaulting to 1000 [ 811.985283][T14052] lo speed is unknown, defaulting to 1000 [ 812.109389][T14056] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 812.635934][T14064] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 813.036015][ T30] audit: type=1400 audit(812.617:1960): avc: denied { create } for pid=14061 comm="syz.5.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 814.124355][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 814.534204][ T9358] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 814.592226][T14078] netlink: 'syz.4.1539': attribute type 4 has an invalid length. [ 814.641698][ T10] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 814.655253][ T10] usb 3-1: config 0 has no interface number 0 [ 814.674120][ T10] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 814.691031][ T10] usb 3-1: config 0 interface 235 has no altsetting 0 [ 814.716508][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 814.729830][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.734136][ T9358] usb 6-1: Using ep0 maxpacket: 8 [ 814.737914][ T10] usb 3-1: Product: syz [ 814.747912][ T10] usb 3-1: Manufacturer: syz [ 814.752503][ T10] usb 3-1: SerialNumber: syz [ 814.755059][ T9358] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.854156][ T5870] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 814.877804][ T9358] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 814.895055][ T9358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 814.903746][ T10] usb 3-1: config 0 descriptor?? [ 814.917963][ T10] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 814.934454][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 814.937399][ T9358] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 814.942546][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 815.317213][ T24] lo speed is unknown, defaulting to 1000 [ 815.323290][ T24] syz0: Port: 1 Link DOWN [ 815.328341][ T9358] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.351339][ T9358] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 815.412013][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 815.420067][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 815.428839][ T10] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 815.442623][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.461313][ T5870] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 815.491718][ T10] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 815.506439][ T5870] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.515848][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 815.523875][ T5870] usb 4-1: SerialNumber: syz [ 815.530723][ T9358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.541955][ T9358] usb 6-1: Product: syz [ 815.552497][ T5870] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 815.619199][ T9358] usb 6-1: Manufacturer: syz [ 815.623879][ T9358] usb 6-1: SerialNumber: syz [ 815.877953][ T9358] usb 6-1: config 0 descriptor?? [ 816.541239][ T5870] usb 3-1: USB disconnect, device number 23 [ 816.564336][ T5870] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 816.579165][ T5870] keyspan 3-1:0.235: device disconnected [ 816.935821][T14093] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1537'. [ 817.081109][ T5870] usb 4-1: USB disconnect, device number 12 [ 817.577623][T14106] vxcan1 speed is unknown, defaulting to 1000 [ 817.800094][ T30] audit: type=1400 audit(817.247:1961): avc: denied { map } for pid=14070 comm="syz.5.1537" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 817.855044][T14106] lo speed is unknown, defaulting to 1000 [ 817.885441][ T30] audit: type=1400 audit(817.267:1962): avc: denied { execute } for pid=14070 comm="syz.5.1537" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 819.095011][T14124] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 819.185643][ T9358] rc_core: IR keymap rc-imon-rsc not found [ 819.200663][ T9358] Registered IR keymap rc-empty [ 819.210555][ T9358] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 819.251147][T14125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.289102][ T9358] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 819.306131][ T9358] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 819.415317][ T9358] usb 6-1: USB disconnect, device number 6 [ 819.658189][ T30] audit: type=1400 audit(819.617:1963): avc: denied { nlmsg_write } for pid=14126 comm="syz.1.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 819.815511][ T30] audit: type=1400 audit(819.697:1964): avc: denied { bind } for pid=14126 comm="syz.1.1547" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 820.171853][ T30] audit: type=1400 audit(819.697:1965): avc: denied { name_bind } for pid=14126 comm="syz.1.1547" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 820.520492][ T30] audit: type=1400 audit(819.697:1966): avc: denied { node_bind } for pid=14126 comm="syz.1.1547" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 820.834132][ T30] audit: type=1400 audit(819.987:1967): avc: denied { setopt } for pid=14132 comm="syz.2.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 822.572940][T14169] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 824.984257][ T30] audit: type=1326 audit(824.892:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 825.007136][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.311432][ T30] audit: type=1326 audit(824.892:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 825.358363][ T30] audit: type=1326 audit(824.892:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 825.620350][ T30] audit: type=1326 audit(824.892:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 825.884373][ T30] audit: type=1326 audit(824.892:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 826.002300][ T30] audit: type=1326 audit(824.892:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 826.372191][T14207] vxcan1 speed is unknown, defaulting to 1000 [ 826.639253][T14207] lo speed is unknown, defaulting to 1000 [ 826.673198][ T30] audit: type=1326 audit(824.892:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 826.706553][ T30] audit: type=1326 audit(824.902:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 826.747512][ T30] audit: type=1326 audit(824.902:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 826.771994][ T30] audit: type=1326 audit(824.912:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14185 comm="syz.1.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8c938efc9 code=0x7ffc0000 [ 827.079676][T14211] fuse: Unknown parameter 'use00000000000000000000' [ 827.178347][T14212] netlink: 'syz.5.1564': attribute type 2 has an invalid length. [ 828.604212][T14236] xt_l2tp: invalid flags combination: 0 [ 828.619093][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1569'. [ 829.087855][T14241] vxcan1 speed is unknown, defaulting to 1000 [ 829.504964][T14241] lo speed is unknown, defaulting to 1000 [ 830.342088][T14253] wg1: entered promiscuous mode [ 830.347267][T14253] wg1: entered allmulticast mode [ 831.066237][T14252] 0{X: left allmulticast mode [ 831.104455][T14252] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.284400][T14252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 831.769185][T14266] fuse: Unknown parameter 'user_i00000000000000000000' [ 831.779492][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 831.779507][ T30] audit: type=1400 audit(831.722:2006): avc: denied { setopt } for pid=14262 comm="syz.1.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 831.843228][T14263] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1572'. [ 831.875597][ T30] audit: type=1400 audit(831.792:2007): avc: denied { ioctl } for pid=14245 comm="syz.5.1572" path="socket:[34583]" dev="sockfs" ino=34583 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 831.912264][T14263] overlay: Unknown parameter 'fowner<00000000000000000000' [ 832.108655][ T30] audit: type=1326 audit(831.812:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 832.161251][T14270] netlink: 'syz.3.1576': attribute type 2 has an invalid length. [ 832.205099][ T30] audit: type=1326 audit(831.812:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 832.294217][ T30] audit: type=1326 audit(831.812:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 832.319555][ T30] audit: type=1326 audit(831.812:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 832.501732][ T30] audit: type=1326 audit(831.812:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 832.594271][ T30] audit: type=1326 audit(832.042:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 833.383171][ T30] audit: type=1326 audit(832.042:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 833.407079][ T30] audit: type=1326 audit(832.042:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.2.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998758efc9 code=0x7ffc0000 [ 833.530768][T14279] vxcan1 speed is unknown, defaulting to 1000 [ 833.613395][T14279] lo speed is unknown, defaulting to 1000 [ 833.990411][T14291] veth0: entered promiscuous mode [ 834.030102][T14291] veth0: left promiscuous mode [ 834.817057][T14298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1583'. [ 836.933875][T14316] vxcan1 speed is unknown, defaulting to 1000 [ 837.200575][T14316] lo speed is unknown, defaulting to 1000 [ 837.411035][T14329] ISOFS: Unable to identify CD-ROM format. [ 837.770330][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1590'. [ 838.872493][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 838.872511][ T30] audit: type=1326 audit(838.792:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.228790][ T30] audit: type=1326 audit(838.792:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.404128][ T30] audit: type=1326 audit(838.792:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.484103][ T30] audit: type=1326 audit(838.792:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.607147][ T30] audit: type=1326 audit(838.792:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.739114][ T30] audit: type=1326 audit(838.792:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.810201][ T30] audit: type=1326 audit(838.792:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 839.833507][ T30] audit: type=1326 audit(838.802:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 840.410285][ T30] audit: type=1326 audit(838.802:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d8df85e67 code=0x7ffc0000 [ 840.433276][ T30] audit: type=1326 audit(838.802:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14342 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d8df2b099 code=0x7ffc0000 [ 841.368416][T14367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.375983][T14367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.407569][T14367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.463281][T14367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.888352][T14375] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 843.239376][T14395] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 846.261232][T14432] xt_l2tp: invalid flags combination: 0 [ 846.277818][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 846.717225][T14442] netlink: 'syz.5.1609': attribute type 4 has an invalid length. [ 847.254293][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 848.126938][T14455] CIFS mount error: No usable UNC path provided in device string! [ 848.126938][T14455] [ 848.137095][T14455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 848.845945][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 848.845978][ T30] audit: type=1400 audit(848.812:2084): avc: denied { setopt } for pid=14458 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 849.132210][ T30] audit: type=1400 audit(848.812:2085): avc: denied { bind } for pid=14458 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 849.304156][ T30] audit: type=1400 audit(848.812:2086): avc: denied { write } for pid=14458 comm="syz.2.1613" path="socket:[36891]" dev="sockfs" ino=36891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 850.029456][T14476] ptrace attach of "./syz-executor exec"[5820] was attempted by "R~sۄ9!+làvs\x22~Uxa*fPyw.6iB֡O ^$ w*? ;-b?3ASѭKkr\x0aؙ:y>sy\x1bSD8\x1bu\x0a2.bfhݹ5cM+wk|(Hn'cCj<,ᨊr.u(lnvNFQ+&iЁk&ȍĤ>貥fbRs󷖾\x0c~1%^?\x1bY\x1bg-3˩VO|\x0a᳷[.'3DAzrcO ,;j!poUe{s%@OtnZbB&+4?pRN!YˑNjgiq[6hvN|ՠxiPo54(%* ħlLUD䧥7`z8h“=-ei}\x5c\x09v:-ם\x099.VE&\x09 b&hΚA`R&֕AO ݛ/\x1bL\x07&DuoO^C'S1 @#^^V156r詴tU\x0c0鴲>ŪMVj\x07=}]MXUtY[%>p*js;x9K4m{yWp5p\x0cV\x0c\x0a(UηX8'C}ħJ=6Ww&u]8?+3q(*R\x09-e\x22gNN?-݋0ުJx~~/ALI8o$a3e@JcT ̑ѧ8%p缑/܏!/%V'Rjoqsvgqc]\x09 [ 850.184145][ T30] audit: type=1400 audit(850.082:2087): avc: denied { write } for pid=14466 comm="syz.1.1616" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 850.868835][ T30] audit: type=1400 audit(850.092:2088): avc: denied { append } for pid=14466 comm="syz.1.1616" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 850.987697][ T30] audit: type=1400 audit(850.092:2089): avc: denied { map } for pid=14466 comm="syz.1.1616" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 851.144074][ T30] audit: type=1400 audit(850.092:2090): avc: denied { write execute } for pid=14466 comm="syz.1.1616" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 851.351179][ T30] audit: type=1400 audit(850.452:2091): avc: denied { connect } for pid=14473 comm="syz.2.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 851.830277][T14500] vxcan1 speed is unknown, defaulting to 1000 [ 852.169972][T14500] lo speed is unknown, defaulting to 1000 [ 852.327244][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'. [ 852.429952][T14504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.437416][T14504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.484892][T14504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.492530][T14504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.763843][ T30] audit: type=1400 audit(852.722:2092): avc: denied { mount } for pid=14505 comm="syz.1.1623" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 853.578196][ T30] audit: type=1400 audit(853.532:2093): avc: denied { append } for pid=14515 comm="syz.3.1626" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.131186][T14523] CIFS mount error: No usable UNC path provided in device string! [ 854.131186][T14523] [ 854.141237][T14523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 855.168161][T14531] block device autoloading is deprecated and will be removed. [ 856.147265][T14541] CIFS mount error: No usable UNC path provided in device string! [ 856.147265][T14541] [ 856.157372][T14541] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 856.628815][ T30] audit: type=1400 audit(856.592:2094): avc: denied { write } for pid=14535 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 856.986078][T14534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1628'. [ 857.037392][ T30] audit: type=1400 audit(856.922:2095): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 857.063141][T14547] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 857.464116][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 857.696412][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 857.839598][ T5927] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 857.857351][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.934511][T14565] siw: device registration error -23 [ 858.284081][ T5927] usb 3-1: Product: syz [ 858.329867][ T5927] usb 3-1: Manufacturer: syz [ 858.337614][ T5927] usb 3-1: SerialNumber: syz [ 858.365524][ T5927] usb 3-1: config 0 descriptor?? [ 858.686923][T14571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 858.756712][ T24] lo speed is unknown, defaulting to 1000 [ 858.762695][ T24] syz0: Port: 1 Link ACTIVE [ 859.024732][ T30] audit: type=1400 audit(858.952:2096): avc: denied { ioctl } for pid=14554 comm="syz.2.1635" path="/dev/binderfs/binder0" dev="binder" ino=82 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 859.384150][ T30] audit: type=1400 audit(858.952:2097): avc: denied { set_context_mgr } for pid=14554 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 859.490964][ T5927] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 859.493492][ T30] audit: type=1400 audit(858.982:2098): avc: denied { map } for pid=14554 comm="syz.2.1635" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 859.500846][ T5927] gspca_sunplus: reg_w_riv err -71 [ 859.551197][ T30] audit: type=1400 audit(858.992:2099): avc: denied { connect } for pid=14554 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 859.652260][ T5927] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 859.778967][ T30] audit: type=1326 audit(859.632:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 859.810048][ T5927] usb 3-1: USB disconnect, device number 24 [ 859.937606][T14584] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 859.948077][T14584] cramfs: wrong magic [ 859.965788][ T30] audit: type=1326 audit(859.632:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 860.092058][ T30] audit: type=1326 audit(859.632:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 860.269131][T14589] macsec1: entered promiscuous mode [ 860.274459][T14589] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 860.460801][T14594] CIFS mount error: No usable UNC path provided in device string! [ 860.460801][T14594] [ 860.470868][T14594] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 860.574385][ T30] audit: type=1326 audit(859.632:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8df8efc9 code=0x7ffc0000 [ 860.898904][T14589] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 860.934085][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 861.124174][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 861.639338][T14603] debugfs: 'ttyS3' already exists in 'caif_serial' [ 861.847808][ T5927] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 861.970581][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.183327][ T5927] usb 6-1: Product: syz [ 862.193417][ T5927] usb 6-1: Manufacturer: syz [ 862.314144][ T5927] usb 6-1: SerialNumber: syz [ 862.345757][ T5927] usb 6-1: config 0 descriptor?? [ 862.351967][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 862.351980][ T30] audit: type=1400 audit(862.312:2144): avc: denied { read open } for pid=14607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.414838][T14608] .`: (slave team0): Releasing backup interface [ 862.471807][T14608] team0: left allmulticast mode [ 862.479331][T14608] team_slave_0: left allmulticast mode [ 862.488083][T14608] team_slave_1: left allmulticast mode [ 862.547586][T14614] netlink: 'syz.2.1644': attribute type 10 has an invalid length. [ 862.599829][ T30] audit: type=1400 audit(862.312:2145): avc: denied { getattr } for pid=14607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.688509][T14608] .`: (slave bond_slave_0): Releasing backup interface [ 862.689225][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 862.748789][T14608] bond_slave_0: left allmulticast mode [ 862.917559][T14608] .`: (slave bond_slave_1): Releasing backup interface [ 863.018333][T14623] CIFS mount error: No usable UNC path provided in device string! [ 863.018333][T14623] [ 863.028425][T14623] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 863.525195][T14608] bond_slave_1: left allmulticast mode [ 863.557486][ T30] audit: type=1400 audit(863.522:2146): avc: denied { add_name } for pid=14605 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.649234][ T30] audit: type=1400 audit(863.522:2147): avc: denied { create } for pid=14605 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 863.724066][ T30] audit: type=1400 audit(863.522:2148): avc: denied { write } for pid=14605 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=7040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 863.794187][ T5927] usb 6-1: can't set config #0, error -71 [ 863.833833][ T5927] usb 6-1: USB disconnect, device number 7 [ 863.867642][T14608] team0: Port device team_slave_0 removed [ 863.902022][ T30] audit: type=1400 audit(863.522:2149): avc: denied { append } for pid=14605 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=7040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 863.954920][T14608] team0: Port device team_slave_1 removed [ 863.972789][T14634] xt_l2tp: invalid flags combination: 0 [ 863.982782][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1646'. [ 864.003935][ T30] audit: type=1400 audit(863.962:2150): avc: denied { remove_name } for pid=14633 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=7040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.028812][T14608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 864.071716][ T30] audit: type=1400 audit(864.012:2151): avc: denied { unlink } for pid=14633 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=7040 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 864.110097][T14612] team0: Mode changed to "loadbalance" [ 864.154871][ T30] audit: type=1400 audit(864.082:2152): avc: denied { remount } for pid=14631 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 864.266593][T14614] 8021q: adding VLAN 0 to HW filter on device .` [ 864.283166][T14639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1647'. [ 864.315133][T14614] team0: Port device .` added [ 864.388955][ T30] audit: type=1400 audit(864.352:2153): avc: denied { module_load } for pid=14631 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 865.067308][T14617] team0 (unregistering): Port device .` removed [ 865.074132][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 865.325728][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 865.511885][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 865.532636][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 865.547029][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 865.563622][ T10] usb 6-1: Product: syz [ 865.580723][ T10] usb 6-1: Manufacturer: syz [ 865.589687][ T10] usb 6-1: SerialNumber: syz [ 865.610763][ T10] usb 6-1: config 0 descriptor?? [ 865.626947][ T10] usb 6-1: selecting invalid altsetting 0 [ 865.643400][T14658] 8021q: adding VLAN 0 to HW filter on device .` [ 865.692954][T14660] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 865.705296][T14658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.350213][T14671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.420882][ T10] usb 6-1: USB disconnect, device number 8 [ 869.694695][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 974.343935][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 974.350905][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14729/1:b..l [ 974.359291][ C0] rcu: (detected by 0, t=10502 jiffies, g=51317, q=388 ncpus=2) [ 974.366976][ C0] task:sed state:R running task stack:27416 pid:14729 tgid:14729 ppid:14728 task_flags:0x400000 flags:0x00080001 [ 974.381061][ C0] Call Trace: [ 974.384325][ C0] [ 974.387235][ C0] __schedule+0x1190/0x5de0 [ 974.391728][ C0] ? kasan_save_stack+0x42/0x60 [ 974.396552][ C0] ? kasan_record_aux_stack+0x1/0xc0 [ 974.401806][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 974.407847][ C0] ? path_openat+0xeab/0x2cb0 [ 974.412498][ C0] ? do_filp_open+0x20b/0x470 [ 974.417147][ C0] ? do_sys_openat2+0x11b/0x1d0 [ 974.421972][ C0] ? __pfx___schedule+0x10/0x10 [ 974.426809][ C0] ? __lock_acquire+0x622/0x1c90 [ 974.431723][ C0] preempt_schedule_irq+0x51/0x90 [ 974.436721][ C0] irqentry_exit+0x36/0x90 [ 974.441110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 974.447065][ C0] RIP: 0010:lock_acquire+0xb/0x350 [ 974.452149][ C0] Code: 68 cd 09 eb c3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 4d 89 cf 41 56 <41> 89 f6 41 55 41 89 d5 41 54 45 89 c4 55 89 cd 53 48 89 fb 48 83 [ 974.471727][ C0] RSP: 0018:ffffc90017a3f8f0 EFLAGS: 00000246 [ 974.477761][ C0] RAX: ffffffff816c45dd RBX: 0000000000000001 RCX: 0000000000000002 [ 974.485705][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c4460 [ 974.493650][ C0] RBP: ffffc90017a3f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 974.501592][ C0] R10: 0000000000000000 R11: 000000000001258a R12: ffffffff81a83070 [ 974.509545][ C0] R13: ffffc90017a3f980 R14: 0000000000000000 R15: 0000000000000000 [ 974.517499][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.523637][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 974.528726][ C0] unwind_next_frame+0xd1/0x20a0 [ 974.533636][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 974.538732][ C0] ? kasan_save_track+0x14/0x30 [ 974.543557][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.549681][ C0] arch_stack_walk+0x94/0x100 [ 974.554335][ C0] ? kasan_save_track+0x14/0x30 [ 974.559163][ C0] stack_trace_save+0x8e/0xc0 [ 974.563811][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 974.569154][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 974.574067][ C0] kasan_save_stack+0x33/0x60 [ 974.578716][ C0] ? kasan_save_stack+0x33/0x60 [ 974.583538][ C0] ? kasan_save_track+0x14/0x30 [ 974.588383][ C0] kasan_save_track+0x14/0x30 [ 974.593042][ C0] __kasan_save_free_info+0x3b/0x60 [ 974.598212][ C0] __kasan_slab_free+0x5f/0x80 [ 974.602952][ C0] kmem_cache_free+0x2d4/0x6c0 [ 974.607697][ C0] ? putname+0x154/0x1a0 [ 974.611927][ C0] ? putname+0x154/0x1a0 [ 974.616146][ C0] putname+0x154/0x1a0 [ 974.620209][ C0] do_sys_openat2+0x152/0x1d0 [ 974.624854][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 974.630027][ C0] __x64_sys_openat+0x174/0x210 [ 974.634848][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 974.640202][ C0] ? do_user_addr_fault+0x843/0x1370 [ 974.645464][ C0] do_syscall_64+0xcd/0xfa0 [ 974.649942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.655816][ C0] RIP: 0033:0x7f8ad201c0ba [ 974.660200][ C0] RSP: 002b:00007ffed08b7d88 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 974.668581][ C0] RAX: ffffffffffffffda RBX: 00007ffed08b7e00 RCX: 00007f8ad201c0ba [ 974.676522][ C0] RDX: 0000000000080000 RSI: 00007ffed08b7e00 RDI: 00000000ffffff9c [ 974.684465][ C0] RBP: 00007ffed08b7df0 R08: 00007ffed08b7ff7 R09: 0000000000000000 [ 974.692411][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000033 [ 974.700367][ C0] R13: 00007f8ad1ff0000 R14: 00007ffed08b8010 R15: 0000000000000000 [ 974.708320][ C0] [ 974.711311][ C0] rcu: rcu_preempt kthread starved for 10489 jiffies! g51317 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 974.722474][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 974.732413][ C0] rcu: RCU grace-period kthread stack dump: [ 974.738278][ C0] task:rcu_preempt state:R running task stack:28080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 974.751727][ C0] Call Trace: [ 974.754978][ C0] [ 974.757883][ C0] __schedule+0x1190/0x5de0 [ 974.762365][ C0] ? __lock_acquire+0x622/0x1c90 [ 974.767286][ C0] ? __pfx___schedule+0x10/0x10 [ 974.772110][ C0] ? find_held_lock+0x2b/0x80 [ 974.776759][ C0] ? schedule+0x2d7/0x3a0 [ 974.781061][ C0] schedule+0xe7/0x3a0 [ 974.785101][ C0] schedule_timeout+0x123/0x290 [ 974.789926][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 974.795269][ C0] ? __pfx_process_timeout+0x10/0x10 [ 974.800529][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 974.806398][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 974.811836][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 974.816577][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 974.821835][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.827007][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 974.831915][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 974.836741][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 974.842518][ C0] rcu_gp_kthread+0x26d/0x380 [ 974.847167][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.852336][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.857081][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 974.862255][ C0] ? __kthread_parkme+0x19e/0x250 [ 974.867251][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 974.872422][ C0] kthread+0x3c5/0x780 [ 974.876463][ C0] ? __pfx_kthread+0x10/0x10 [ 974.881028][ C0] ? rcu_is_watching+0x12/0xc0 [ 974.885761][ C0] ? __pfx_kthread+0x10/0x10 [ 974.890323][ C0] ret_from_fork+0x675/0x7d0 [ 974.894885][ C0] ? __pfx_kthread+0x10/0x10 [ 974.899450][ C0] ret_from_fork_asm+0x1a/0x30 [ 974.904192][ C0] [ 974.907184][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 974.913483][ C0] Sending NMI from CPU 0 to CPUs 1: [ 974.918662][ C1] NMI backtrace for cpu 1 [ 974.918672][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 974.918688][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 974.918696][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 974.918713][ C1] Code: 97 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 95 23 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 974.918726][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 974.918738][ C1] RAX: 0000000003c56edb RBX: 0000000000000001 RCX: ffffffff8b6692a9 [ 974.918746][ C1] RDX: 0000000000000000 RSI: ffffffff8db03f46 RDI: ffffffff8bf1ea40 [ 974.918754][ C1] RBP: ffffed1003b53490 R08: 0000000000000001 R09: ffffed10170a6655 [ 974.918762][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 974.918770][ C1] R13: ffff88801da9a480 R14: ffffffff908339d0 R15: 0000000000000000 [ 974.918778][ C1] FS: 0000000000000000(0000) GS:ffff888124ad6000(0000) knlGS:0000000000000000 [ 974.918792][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.918801][ C1] CR2: 0000562bae3c7be0 CR3: 0000000061810000 CR4: 00000000003526f0 [ 974.918809][ C1] Call Trace: [ 974.918813][ C1] [ 974.918818][ C1] default_idle+0x13/0x20 [ 974.918835][ C1] default_idle_call+0x6c/0xb0 [ 974.918851][ C1] do_idle+0x38d/0x500 [ 974.918864][ C1] ? __pfx_do_idle+0x10/0x10 [ 974.918876][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 974.918896][ C1] cpu_startup_entry+0x4f/0x60 [ 974.918908][ C1] start_secondary+0x21d/0x2b0 [ 974.918922][ C1] ? __pfx_start_secondary+0x10/0x10 [ 974.918938][ C1] common_startup_64+0x13e/0x148 [ 974.918961][ C1] [ 975.088806][ C0] vkms_vblank_simulate: vblank timer overrun