last executing test programs: 27m55.732430751s ago: executing program 1 (id=419): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FITRIM(r1, 0xc0185879, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r3, 0xfffffffc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000280)="10085f2f83343ad2712a1a2ae451095f36ab496f153057d002765c35a90178fbe21da68e68906d5fb0e1b11b2a0c2a8c38b1cad7041ba54f1639a6aff08c6d9657a2d4aa2625daaf31f0c3fe593b20d0663a17ba7b6c213df4e0036d264b98bb1e5a1d87827510b8cc8620bbb3da4ff940650d784d0def521a5d4ee7831ebda6c243bedcbb4f9ba25e783b783d1539b5212bc27144385b5c08b6b3fe360c29f19cdd9ce4035a262a9864def67d5eb41fdbaea9a1ca", 0xb5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27m54.493405433s ago: executing program 1 (id=422): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0xff}, 0x28) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r5, r5}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24048f0d, 0x0, 0x0) 27m53.225317634s ago: executing program 1 (id=426): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 27m50.920652593s ago: executing program 1 (id=429): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) dup3(r3, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1101, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 27m49.846800124s ago: executing program 1 (id=432): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 27m48.806254764s ago: executing program 1 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 27m33.602689505s ago: executing program 32 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x1000000009, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26m7.954252319s ago: executing program 0 (id=583): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f911000000030000000003"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) lseek(0xffffffffffffffff, 0x38, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r5, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 26m6.443599941s ago: executing program 0 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) sendfile(r4, r5, 0x0, 0x20000000000002) connect$inet(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) 25m59.997083689s ago: executing program 0 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000a, 0x8010, r1, 0x8e175000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0xc040024) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000100)=0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfdfdffff}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) poll(&(0x7f0000000240)=[{r8, 0x3104}], 0x1, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) 25m57.454439507s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x7}}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000003300)={0x4, 0x5, 0x1}) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f00000005c0)=[{&(0x7f0000000380)="c867", 0x2}], 0x1, 0x31, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) 25m55.801725131s ago: executing program 0 (id=598): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x40, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x11e, 0x1, 0x0, 0x53) r4 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) mq_timedsend(r4, 0x0, 0x0, 0x5, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0003021ebee62dbe0000000203"], 0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f00000009c0)={0x7, 0x1000}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x3, "0fa70c"}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x5, 0x8000, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @local, {[@lsrr={0x83, 0x23, 0xa, [@multicast2, @local, @loopback, @local, @rand_addr=0x64010102, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x22, 0xf, {0xf, 0x36, "6bc96819dea2563e9481aa1795"}}, &(0x7f0000000580)={0x0, 0x3, 0x57, @string={0x57, 0x3, "183a4b1e667499521504c8bc7ff7a8e143b685459b10ecd76e141d2abb0db85e73315c77353771cf2bbc7a161a8b2fdcd9b901faba6237f877ea8cf3560d9d6c7b2232b28f61b84e25bdd364eec7e54db7d199b540"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="202e610000000700ff00000000006f9cef7c94a2e6f266484e9b059b7d07b51053f00d24488c808f6a85407a72ad725455d1bdb478009d26b131b9579e703b714f2b83259e8e8d464b94ad97ccda5893203d88e17050284b1303"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'F'}, &(0x7f00000004c0)=ANY=[@ANYBLOB="10dd684bc202b35c00"], &(0x7f0000000a80)=ANY=[@ANYBLOB="212b32da931edefc610abe1dbbf0a2529f0a"], &(0x7f0000000380)={0x20, 0x84, 0x1, "c2"}, 0x0}) 25m52.636333272s ago: executing program 0 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x4}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfd47}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x884c) 25m37.568924752s ago: executing program 33 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x4}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfd47}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x884c) 19m22.636048553s ago: executing program 5 (id=1472): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x40041) r1 = dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2141}], 0x1, 0x8000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) pread64$ublk_ch(r1, &(0x7f00000009c0)=@buf_max_buf, 0x1000, 0x9) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x0, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) link(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./bus\x00') sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 19m16.988636142s ago: executing program 5 (id=1482): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FITRIM(r1, 0xc0185879, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r3, 0xfffffffc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) unlinkat(0xffffffffffffffff, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000280)="10085f2f83343ad2712a1a2ae451095f36ab496f153057d002765c35a90178fbe21da68e68906d5fb0e1b11b2a0c2a8c38b1cad7041ba54f1639a6aff08c6d9657a2d4aa2625daaf31f0c3fe593b20d0663a17ba7b6c213df4e0036d264b98bb1e5a1d87827510b8cc8620bbb3da4ff940650d784d0def521a5d4ee7831ebda6c243bedcbb4f9ba25e783b783d1539b5212bc27144385b5c08b6b3fe360c29f19cdd9ce4035a262a9864def67d5eb41fdbaea9a1ca", 0xb5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000180)={0x3e, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 19m15.972065055s ago: executing program 5 (id=1484): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x40041) r1 = dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2141}], 0x1, 0x8000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) pread64$ublk_ch(r1, &(0x7f00000009c0)=@buf_max_buf, 0x1000, 0x9) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 19m9.868309565s ago: executing program 5 (id=1494): pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fb, &(0x7f0000000500)=0x0) r2 = syz_clone(0x2100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x280000000000, &(0x7f0000000180)="4f9745fe9369804ff9c29a370b0394c216470e9532c1fdb611963471d34fd024463837a7ecc7b6d34ecabc3607bfdb888cb46b8f127915c22396ec5cc8e187da2be431269042152a18ab2ab8c602a0aae04f57f9897e7ae66197276f9eebf48091655f73233c00a6d85c17f0febeb7c8603b22a195f627c204ebeff6da14d90ceb9393d332f47324a91450bf461c89e441709519164b3d387c1c9f720c34cbf2770f9d838c27b1232fa51cb9b0a3d20f74361df9ed50aa519a07678c299d5fa4259a47ec944e4db826cc068b8ac6f1ebd07bec0b") ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x20000001) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x102) setns(r5, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="89e6261441"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x89, 0x0, 0x0, r0, 0x0}]) 19m7.136133705s ago: executing program 5 (id=1498): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) r5 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r5, 0x0, 0x1) fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRESDEC=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x376bd2ae0a1097ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) getdents64(r6, 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0), 0x0) 19m2.579555249s ago: executing program 5 (id=1504): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x40041) r1 = dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2141}], 0x1, 0x8000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) pread64$ublk_ch(r1, &(0x7f00000009c0)=@buf_max_buf, 0x1000, 0x9) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 18m47.468928528s ago: executing program 34 (id=1504): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x3, 0x40041) r1 = dup(r0) r2 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2141}], 0x1, 0x8000004) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) pread64$ublk_ch(r1, &(0x7f00000009c0)=@buf_max_buf, 0x1000, 0x9) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 4m11.026271024s ago: executing program 3 (id=3098): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d5304825) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5) 4m10.85237211s ago: executing program 3 (id=3100): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xff80, 0x7, 0x1d, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x0, 0x1ff, 0x1c}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x2, 0x95, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x2, 0x9, {0x8, 0x25, 0x1, 0x80, 0x30, 0xad, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0xfa, 0xbc, {0x8, 0x25, 0x1, 0x2, 0xfa4024f26d164786, 0x81, 0x9}}}}}}}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003ad000000ad03"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e", @ANYRES8=r0]}, 0x0) 4m8.72504125s ago: executing program 3 (id=3114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb0203"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 4m7.032777965s ago: executing program 3 (id=3125): socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xffe) 4m6.834817592s ago: executing program 3 (id=3126): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 4m5.642381354s ago: executing program 3 (id=3130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000340)={0x1, r2, 0x1}) 3m50.577060561s ago: executing program 35 (id=3130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000340)={0x1, r2, 0x1}) 7.143146912s ago: executing program 7 (id=5178): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone(0x80141000, &(0x7f0000000180), 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="9f8e7da84a3fec2a051ecb6afc3ce6f62b781c3ea0d47883c1636e327c3a4b") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0xfff, 0x0) 7.016128546s ago: executing program 7 (id=5179): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 6.881912586s ago: executing program 7 (id=5180): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x6) 5.752070251s ago: executing program 6 (id=5188): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) fsopen(&(0x7f0000000080)='pstore\x00', 0x0) 4.54125051s ago: executing program 4 (id=5197): io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x0}]) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff7fffa}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}}], 0x1, 0x931766f6319e6d44) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x7fff, 0xffffff6a}, 0x10) 4.453133877s ago: executing program 4 (id=5199): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x35, 0x3, 0x46d, 0xc21c, 0x0, 0x0, "0600ff0900a10185010901150026ff007508950781028502090275089501b1028505090575089504b1028507090775089504b102c0"}}, 0x14d) read(r0, &(0x7f0000001000)=""/4380, 0x111c) read(r0, 0x0, 0x0) write(r0, &(0x7f0000002000)="0a000000010000000000", 0xa) 4.27323745s ago: executing program 6 (id=5204): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.164924577s ago: executing program 4 (id=5205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 3.768125646s ago: executing program 7 (id=5206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.528201364s ago: executing program 6 (id=5208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x201, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xa, 0xfff1}, {0xfff3, 0x9}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c8}, 0x2004c8d4) 3.494391246s ago: executing program 4 (id=5210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000300)="09000000ffffffffb79e08da88a8a5a186dd6fbde6d75d2074904159267b95021ad33b196d9ef6a2", 0x0, 0x1000fe1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.350377032s ago: executing program 7 (id=5212): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/20, &(0x7f00000000c0)=0x14) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r6, 0x1) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) 2.510992295s ago: executing program 4 (id=5214): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) 2.470706986s ago: executing program 6 (id=5215): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) fsopen(&(0x7f0000000080)='pstore\x00', 0x0) 2.407914475s ago: executing program 4 (id=5216): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='@\x00'], 0x6) 2.40562547s ago: executing program 7 (id=5217): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.701923689s ago: executing program 8 (id=5220): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="78010000031401"], 0x178}, 0x1, 0x0, 0x0, 0x4002090}, 0x8084) 1.458464296s ago: executing program 8 (id=5222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 1.392402575s ago: executing program 2 (id=5223): io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x0}]) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='L', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff7fffa}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319e6d44) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x7fff, 0xffffff6a}, 0x10) 1.311081798s ago: executing program 2 (id=5224): r0 = syz_io_uring_setup(0x315b, &(0x7f00000006c0)={0x0, 0xc7ca, 0x40, 0x0, 0x800001c1}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_op={0x1, 0x23}, @ioring_restriction_sqe_flags_required={0x3, 0x1c}], 0x2) 1.218465867s ago: executing program 8 (id=5225): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x201, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xa, 0xfff1}, {0xfff3, 0x9}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c8}, 0x2004c8d4) 1.202776652s ago: executing program 2 (id=5226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86", 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.099282767s ago: executing program 8 (id=5227): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 995.10957ms ago: executing program 2 (id=5228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x108}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce, r0}, 0x38) 994.456614ms ago: executing program 8 (id=5229): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 904.229102ms ago: executing program 2 (id=5230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 902.968838ms ago: executing program 6 (id=5231): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 72.786321ms ago: executing program 2 (id=5232): r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={&(0x7f0000001000)}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) 51.643033ms ago: executing program 6 (id=5233): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknod(0x0, 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001150300ef000000040000000000000010000500000000002000000000000000"], 0x24, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000380)={[0x4]}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 8 (id=5234): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) kernel console output (not intermixed with test programs): terface batadv_slave_0 (retrying later): interface not active [ 1692.763274][T19417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.770339][T19417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.136411][T13906] Bluetooth: hci3: command tx timeout [ 1693.190523][T19417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.262993][T19417] hsr_slave_0: entered promiscuous mode [ 1693.281048][T19417] hsr_slave_1: entered promiscuous mode [ 1693.293849][T19417] debugfs: 'hsr0' already exists in 'hsr' [ 1693.334538][T19417] Cannot create hsr debugfs directory [ 1693.486427][T19563] kvm: pic: level sensitive irq not supported [ 1693.638720][T19572] input: syz1 as /devices/virtual/input/input47 [ 1693.920351][ T29] audit: type=1400 audit(1785978579.787:822): avc: denied { write } for pid=19544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.068415][ T29] audit: type=1400 audit(1785978579.937:823): avc: denied { write } for pid=19589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1694.224356][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1694.411839][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1694.457299][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1694.505408][ T24] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 1694.563546][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.626243][ T24] usb 5-1: Product: syz [ 1694.657849][ T24] usb 5-1: Manufacturer: syz [ 1694.688538][ T24] usb 5-1: SerialNumber: syz [ 1695.200871][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1695.219691][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1695.267627][ T24] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1695.406145][ T29] audit: type=1400 audit(1785978581.277:824): avc: denied { read write } for pid=19599 comm="syz.7.3250" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1695.439140][T19417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1695.453481][ T24] usb 5-1: USB disconnect, device number 51 [ 1695.528501][T18270] udevd[18270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1695.567549][T19417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1695.614473][T19417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1695.627973][ T29] audit: type=1400 audit(1785978581.287:825): avc: denied { open } for pid=19599 comm="syz.7.3250" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1695.702123][T19417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1695.766617][T19417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1695.854999][T19417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1695.906033][T19417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1695.958304][T19417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1696.405214][T19417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.042662][ T29] audit: type=1400 audit(1785978582.847:826): avc: denied { firmware_load } for pid=19632 comm="syz.2.3260" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1697.413279][T19417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.438590][T19648] syz.2.3260 (19648) used greatest stack depth: 19392 bytes left [ 1697.462727][ T29] audit: type=1400 audit(1785978583.297:827): avc: denied { write } for pid=19604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1697.534252][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.541396][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.569368][ T29] audit: type=1400 audit(1785978583.437:828): avc: denied { mmap_zero } for pid=19652 comm="syz.6.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1697.607616][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.614773][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.780847][ T29] audit: type=1400 audit(1785978583.477:829): avc: denied { getopt } for pid=19655 comm="syz.2.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1697.829907][ T29] audit: type=1400 audit(1785978583.697:830): avc: denied { write } for pid=19657 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1698.379511][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1698.763334][ T29] audit: type=1400 audit(1785978584.637:831): avc: denied { write } for pid=19666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.032305][ T29] audit: type=1400 audit(1785978584.897:832): avc: denied { write } for pid=19680 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1699.204320][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1699.335383][T19691] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1699.750642][T19709] tipc: Trying to set illegal importance in message [ 1699.769586][ T29] audit: type=1400 audit(1785978585.617:833): avc: denied { setopt } for pid=19694 comm="syz.4.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1700.304542][T19417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.382123][ T5730] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1700.543555][ T5730] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1700.565406][ T5730] usb 7-1: string descriptor 0 read error: -22 [ 1700.584518][ T5730] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1700.597712][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.611305][ T29] audit: type=1400 audit(1785978586.477:834): avc: denied { map_create } for pid=19734 comm="syz.2.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1700.667882][ T29] audit: type=1400 audit(1785978586.477:835): avc: denied { map_read map_write } for pid=19734 comm="syz.2.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1700.689648][T19417] veth0_vlan: entered promiscuous mode [ 1700.734767][T19417] veth1_vlan: entered promiscuous mode [ 1700.783596][T19417] veth0_macvtap: entered promiscuous mode [ 1700.792322][T19417] veth1_macvtap: entered promiscuous mode [ 1700.841344][T19417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.245886][ T5730] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1701.259815][T19417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.402150][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.455936][ T5730] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1701.470732][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.512661][T19185] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.549616][T19185] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.591022][ T5730] usb 7-1: USB disconnect, device number 65 [ 1701.636062][T19187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.671460][T19187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.769921][T19185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.788649][T19185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.005545][ T29] audit: type=1400 audit(1785978587.867:836): avc: denied { append } for pid=19757 comm="syz.8.3198" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1702.242829][T19764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1702.265327][T19764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1703.190933][ T29] audit: type=1400 audit(1785978588.917:837): avc: denied { prog_load } for pid=19775 comm="syz.4.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1703.232931][ T29] audit: type=1400 audit(1785978588.957:838): avc: denied { bpf } for pid=19775 comm="syz.4.3291" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1703.996351][ T29] audit: type=1400 audit(1785978589.867:839): avc: denied { perfmon } for pid=19789 comm="syz.7.3296" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.123760][ T29] audit: type=1400 audit(1785978590.997:840): avc: denied { prog_run } for pid=19811 comm="syz.8.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1705.225488][T19815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19815 comm=syz.8.3305 [ 1705.314660][ T5711] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1705.536885][ T5711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1705.549852][ T5711] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1705.562393][ T5711] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1705.571843][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.579896][ T5711] usb 3-1: Product: syz [ 1705.584686][ T5711] usb 3-1: Manufacturer: syz [ 1705.590496][ T5711] usb 3-1: SerialNumber: syz [ 1705.826414][ T5711] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1706.041791][T12300] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1706.073687][ T5711] usb 3-1: USB disconnect, device number 67 [ 1706.108416][ T5711] usblp0: removed [ 1706.231723][T12300] usb 7-1: Using ep0 maxpacket: 32 [ 1706.238653][T12300] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1706.247887][T12300] usb 7-1: config 0 has no interface number 0 [ 1706.254832][T12300] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.266090][T19848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1706.266675][T12300] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.290422][T12300] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1706.299890][T12300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.314216][T12300] usb 7-1: config 0 descriptor?? [ 1706.389960][T19853] netlink: 'syz.4.3319': attribute type 2 has an invalid length. [ 1706.391681][ T5752] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1706.399241][T19853] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.3319'. [ 1706.574157][ T5752] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.584789][ T5752] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 2 [ 1706.603540][ T5752] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.632668][ T5752] usb 9-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1706.648222][ T5752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.657105][ T5752] usb 9-1: Product: syz [ 1706.661344][ T5752] usb 9-1: Manufacturer: syz [ 1706.668255][ T5752] usb 9-1: SerialNumber: syz [ 1706.678707][T19840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1706.702555][ T5752] usbserial_generic 9-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1706.715870][ T5752] usbserial_generic 9-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1706.727346][ T5752] usbserial_generic 9-1:1.0: generic converter detected [ 1706.740787][ T5752] usb 9-1: generic converter now attached to ttyUSB0 [ 1707.255578][ T5752] usb 9-1: USB disconnect, device number 2 [ 1707.265273][T12300] uclogic 0003:28BD:0094.000D: pen parameters not found [ 1707.281808][T12300] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 1707.316503][ T5752] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1707.338361][ T5752] usbserial_generic 9-1:1.0: device disconnected [ 1707.413637][T19866] af_packet: tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 1707.499938][T12300] usb 7-1: USB disconnect, device number 66 [ 1707.964563][ T5711] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1708.131760][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 1708.215430][ T5711] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1708.308790][ T5711] usb 3-1: config 0 has no interface number 0 [ 1708.367192][ T5711] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1708.469894][ T5711] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1708.536722][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.557035][ T5711] usb 3-1: Product: syz [ 1708.563402][ T5730] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1708.571024][ T5711] usb 3-1: Manufacturer: syz [ 1708.576327][ T5711] usb 3-1: SerialNumber: syz [ 1708.584076][ T5711] usb 3-1: config 0 descriptor?? [ 1708.589590][T19878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1708.725514][ T5730] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1708.734812][ T5730] usb 7-1: not running at top speed; connect to a high speed hub [ 1708.746614][ T5730] usb 7-1: string descriptor 0 read error: -22 [ 1708.753089][ T5730] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1708.763048][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.779262][ T5730] usb 7-1: selecting invalid altsetting 1 [ 1708.792405][ T5730] usb 7-1: unit 12 not found! [ 1708.801577][T19878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1708.811816][ T5752] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1708.971742][ T5752] usb 9-1: Using ep0 maxpacket: 32 [ 1708.980079][ T5752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.009758][ T5752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.023026][ T5752] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1709.024349][ T5711] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1709.032753][ T5752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.076697][ T5711] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1709.631157][T16572] usb 3-1: USB disconnect, device number 68 [ 1709.805073][ T5730] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1709.878809][ T5730] usb 7-1: USB disconnect, device number 67 [ 1710.012398][ T5752] usb 9-1: config 0 descriptor?? [ 1710.021207][ T5752] hub 9-1:0.0: USB hub found [ 1710.242006][ T5752] hub 9-1:0.0: 1 port detected [ 1710.316730][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3339'. [ 1710.531763][ T5730] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1710.686134][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.700109][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.712443][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1710.736144][ T5730] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1710.745515][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.765259][ T5730] usb 3-1: config 0 descriptor?? [ 1711.331763][ T5752] hub 9-1:0.0: activate --> -90 [ 1711.496479][ T29] audit: type=1400 audit(1785978597.367:841): avc: denied { write } for pid=19903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.552419][ T5730] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 1711.626293][ T5730] plantronics 0003:047F:FFFF.000E: report_id 0 is invalid [ 1711.658740][ T5730] plantronics 0003:047F:FFFF.000E: item 0 1 1 8 parsing failed [ 1711.679797][ T5730] plantronics 0003:047F:FFFF.000E: parse failed [ 1711.694995][ T5730] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 1711.758564][ T29] audit: type=1400 audit(1785978597.627:842): avc: denied { write } for pid=19942 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.760371][ T5730] usb 3-1: USB disconnect, device number 69 [ 1711.836586][T19947] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3348'. [ 1711.882468][T13577] usb 9-1: USB disconnect, device number 3 [ 1711.932172][T16572] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1712.098462][T16572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.115394][T16572] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1712.125138][T16572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.136516][T16572] usb 7-1: config 0 descriptor?? [ 1712.213973][ T29] audit: type=1400 audit(1785978598.087:843): avc: denied { write } for pid=19950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.279646][ T29] audit: type=1400 audit(1785978598.147:844): avc: denied { write } for pid=19969 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.332110][ T5752] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1712.364183][T16572] usbhid 7-1:0.0: can't add hid device: -71 [ 1712.383537][T16572] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1712.394947][T16572] usb 7-1: USB disconnect, device number 68 [ 1712.503275][ T5752] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.514483][ T5752] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1712.534672][ T5752] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1712.569610][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.705327][T19977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19977 comm=syz.2.3353 [ 1712.993225][T16572] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1713.310713][T16572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.374245][T16572] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1713.425803][T16572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.488954][T16572] usb 7-1: config 0 descriptor?? [ 1713.547312][ T5752] usb 5-1: Product: syz [ 1713.555968][ T5752] usb 5-1: Manufacturer: syz [ 1713.562108][ T5752] usb 5-1: SerialNumber: syz [ 1713.578369][ T5752] cdc_mbim 5-1:1.0: skipping garbage [ 1713.784631][T19984] syzkaller0: entered promiscuous mode [ 1713.817162][T19984] syzkaller0: entered allmulticast mode [ 1714.132586][T19963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1714.153515][T19944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.163779][T19944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.192523][ T29] audit: type=1400 audit(1785978600.057:845): avc: denied { write } for pid=19974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.349520][T16572] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 1714.377548][T16572] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input48 [ 1714.395271][ T29] audit: type=1400 audit(1785978600.267:846): avc: denied { write } for pid=19995 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.595724][ T29] audit: type=1400 audit(1785978600.467:847): avc: denied { setopt } for pid=20001 comm="syz.8.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1714.733311][T16572] usb 7-1: USB disconnect, device number 69 [ 1714.733380][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1714.760670][T19963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1714.805561][ T5752] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 1715.014976][ T5752] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 1715.049895][ T5752] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1715.075507][ T5752] wwan wwan0: port wwan0mbim0 attached [ 1715.097156][T19185] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1715.515006][T20014] "syz.6.3362" (20014) uses obsolete ecb(arc4) skcipher [ 1715.659811][ T29] audit: type=1326 audit(1785978601.527:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20025 comm="syz.6.3366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9e0d9 code=0x7ffc0000 [ 1715.687416][ T29] audit: type=1326 audit(1785978601.527:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20025 comm="syz.6.3366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9e0d9 code=0x7ffc0000 [ 1715.735872][ T29] audit: type=1326 audit(1785978601.537:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20025 comm="syz.6.3366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4dd9e0d9 code=0x7ffc0000 [ 1715.830709][T20008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1716.110406][T20039] Bluetooth: MGMT ver 1.23 [ 1716.534655][T20047] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3368'. [ 1716.574262][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1716.574294][ T29] audit: type=1326 audit(1785978602.437:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20025 comm="syz.6.3366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2a4dd9e0d9 code=0x7ffc0000 [ 1716.904719][ T29] audit: type=1400 audit(1785978602.507:884): avc: denied { setattr } for pid=20043 comm="syz.8.3368" name="" dev="pipefs" ino=83905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1716.955134][ T29] audit: type=1326 audit(1785978602.557:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20025 comm="syz.6.3366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2a4dd9e0d9 code=0x7ffc0000 [ 1717.089293][ T29] audit: type=1400 audit(1785978602.957:886): avc: denied { mounton } for pid=20049 comm="syz.6.3369" path="/541/file0" dev="tmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1718.437375][ T5752] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, b2:30:32:87:60:e8 [ 1718.457279][ T5752] usb 5-1: USB disconnect, device number 52 [ 1718.465471][ T5752] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1718.561037][T20054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3370'. [ 1718.593664][T20054] openvswitch: netlink: Flow key attr not present in new flow. [ 1718.714748][ T29] audit: type=1400 audit(1785978604.587:887): avc: denied { create } for pid=20058 comm="syz.4.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1718.740933][ T29] audit: type=1400 audit(1785978604.607:888): avc: denied { write } for pid=20058 comm="syz.4.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1718.794148][ T5752] wwan wwan0: port wwan0mbim0 disconnected [ 1719.790556][T20074] ieee802154 phy0 wpan0: encryption failed: -90 [ 1719.797299][ T29] audit: type=1400 audit(1785978605.657:889): avc: denied { write } for pid=20073 comm="syz.4.3376" path="socket:[85058]" dev="sockfs" ino=85058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1720.289864][ T29] audit: type=1400 audit(1785978606.157:890): avc: denied { read } for pid=20088 comm="syz.4.3379" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1720.429009][ T29] audit: type=1400 audit(1785978606.297:891): avc: denied { write } for pid=20062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.668289][ T29] audit: type=1400 audit(1785978606.537:892): avc: denied { write } for pid=20101 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.691750][T13906] Bluetooth: hci3: command tx timeout [ 1722.267247][T20144] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1724.181791][T13906] Bluetooth: hci0: command 0x0406 tx timeout [ 1724.349973][T20189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1725.192829][T20203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1726.359017][T20223] Unsupported ieee802154 address type: 0 [ 1726.369765][ T3106] IPVS: starting estimator thread 0... [ 1726.376056][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1726.376071][ T29] audit: type=1400 audit(1785978612.227:894): avc: denied { bind } for pid=20222 comm="syz.7.3425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1726.415089][T20223] pim6reg: entered allmulticast mode [ 1726.427597][T20223] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1726.501716][T20224] IPVS: using max 32 ests per chain, 76800 per kthread [ 1729.120154][ T29] audit: type=1400 audit(1785978614.977:895): avc: denied { load_policy } for pid=20295 comm="syz.7.3453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1729.276291][T20296] SELinux: security policydb version 18 (MLS) not backwards compatible [ 1729.285779][T20296] SELinux: failed to load policy [ 1729.670233][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3456'. [ 1729.846650][T20306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20306 comm=syz.7.3454 [ 1730.172401][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.178817][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.498040][ T29] audit: type=1400 audit(1785978617.357:896): avc: denied { map } for pid=20323 comm="syz.2.3465" path="socket:[85845]" dev="sockfs" ino=85845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1731.618890][ T29] audit: type=1400 audit(1785978617.397:897): avc: denied { read accept } for pid=20323 comm="syz.2.3465" path="socket:[85845]" dev="sockfs" ino=85845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1731.708120][T20335] overlayfs: missing 'lowerdir' [ 1732.932319][T20381] netlink: 'syz.4.3490': attribute type 4 has an invalid length. [ 1733.418137][T20406] xt_CT: No such helper "snmp" [ 1734.789571][T20432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 1734.896934][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3509'. [ 1734.946727][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3509'. [ 1735.570859][T20470] overlayfs: missing 'workdir' [ 1736.011374][T20486] Unsupported ieee802154 address type: 0 [ 1736.069683][T12300] IPVS: starting estimator thread 0... [ 1736.098735][T20486] pim6reg: entered allmulticast mode [ 1736.123985][T20486] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1736.165801][T20497] overlayfs: missing 'workdir' [ 1736.183205][T20489] IPVS: using max 36 ests per chain, 86400 per kthread [ 1738.634017][T20541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1738.643340][T20541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1739.247822][ T29] audit: type=1400 audit(1785978625.117:898): avc: denied { bind } for pid=20550 comm="syz.7.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1739.676058][ T29] audit: type=1400 audit(1785978625.547:899): avc: denied { map } for pid=20566 comm="syz.6.3565" path="socket:[86276]" dev="sockfs" ino=86276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1739.728695][ T29] audit: type=1400 audit(1785978625.547:900): avc: denied { read write } for pid=20566 comm="syz.6.3565" path="socket:[86276]" dev="sockfs" ino=86276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1739.926024][ T29] audit: type=1400 audit(1785978625.797:901): avc: denied { write } for pid=20550 comm="syz.7.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1740.015457][ T29] audit: type=1400 audit(1785978625.837:902): avc: denied { read write } for pid=18198 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.057854][T20583] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3573'. [ 1740.087210][T20583] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3573'. [ 1740.109431][ T29] audit: type=1400 audit(1785978625.837:903): avc: denied { open } for pid=18198 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.151543][T20587] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3573'. [ 1740.215272][ T29] audit: type=1400 audit(1785978625.837:904): avc: denied { ioctl } for pid=18198 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1740.215925][T20590] žÿ: renamed from team_slave_1 (while UP) [ 1740.268104][T20593] Unsupported ieee802154 address type: 0 [ 1740.284848][ T29] audit: type=1400 audit(1785978625.917:905): avc: denied { prog_load } for pid=20578 comm="syz.6.3571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1740.307288][ T29] audit: type=1400 audit(1785978625.917:906): avc: denied { bpf } for pid=20578 comm="syz.6.3571" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1740.333310][T20596] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1740.408908][ T29] audit: type=1400 audit(1785978625.947:907): avc: denied { create } for pid=20585 comm="syz.4.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1740.747281][T12300] hid-generic 0003:046D:1234.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1740.916120][T20619] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1740.978877][T20616] fido_id[20616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1741.078908][T20629] overlay: Unknown parameter '/file0' [ 1741.572518][T20649] netlink: 'syz.8.3603': attribute type 4 has an invalid length. [ 1741.584434][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3601'. [ 1742.409586][T20681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 1742.534336][T20685] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1742.766112][T20705] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1742.938769][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3628'. [ 1742.961695][T20712] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1743.030077][T20716] Unsupported ieee802154 address type: 0 [ 1743.037693][T20716] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1743.056517][T12300] IPVS: starting estimator thread 0... [ 1743.151699][T20717] IPVS: using max 37 ests per chain, 88800 per kthread [ 1743.233453][T20724] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1744.257483][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 1744.257499][ T29] audit: type=1400 audit(1785978630.127:984): avc: denied { create } for pid=20745 comm="syz.2.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1744.421397][ T29] audit: type=1400 audit(1785978630.287:985): avc: denied { ioctl } for pid=20752 comm="syz.6.3647" path="socket:[86667]" dev="sockfs" ino=86667 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1744.605232][ T29] audit: type=1400 audit(1785978630.477:986): avc: denied { ioctl } for pid=20762 comm="syz.6.3650" path="socket:[86683]" dev="sockfs" ino=86683 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1744.635961][T20767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3649'. [ 1744.677900][ T29] audit: type=1400 audit(1785978630.507:987): avc: denied { module_request } for pid=20762 comm="syz.6.3650" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1744.718576][T20767] geneve2: entered promiscuous mode [ 1744.766977][ T29] audit: type=1400 audit(1785978630.627:988): avc: denied { sys_module } for pid=20762 comm="syz.6.3650" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1745.222463][T20788] veth0_macvtap: left promiscuous mode [ 1745.310726][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1745.323688][T20792] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1745.334943][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1745.345276][T20792] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3660'. [ 1745.862576][ T29] audit: type=1400 audit(1785978631.727:989): avc: denied { ioctl } for pid=20801 comm="syz.2.3666" path="socket:[87366]" dev="sockfs" ino=87366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1746.825246][ T29] audit: type=1400 audit(1785978632.537:990): avc: denied { read } for pid=20813 comm="syz.8.3668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1747.308842][ T29] audit: type=1400 audit(1785978633.177:991): avc: denied { create } for pid=20820 comm="syz.6.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1747.712073][T20825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20825 comm=syz.4.3671 [ 1748.322189][ T29] audit: type=1400 audit(1785978633.207:992): avc: denied { setopt } for pid=20820 comm="syz.6.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1749.209423][ T29] audit: type=1400 audit(1785978635.077:993): avc: denied { write } for pid=20827 comm="syz.8.3672" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1749.441942][T20833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1749.468501][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3674'. [ 1749.535203][T20833] geneve3: entered promiscuous mode [ 1749.566615][ T29] audit: type=1400 audit(1785978635.437:994): avc: denied { write } for pid=20834 comm="syz.4.3675" name="tcp6" dev="proc" ino=4026533185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1749.872849][ T29] audit: type=1400 audit(1785978635.717:995): avc: denied { mount } for pid=20849 comm="syz.6.3680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1749.972690][ T29] audit: type=1400 audit(1785978635.727:996): avc: denied { search } for pid=20849 comm="syz.6.3680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1750.087923][ T29] audit: type=1400 audit(1785978635.727:997): avc: denied { search } for pid=20849 comm="syz.6.3680" name="events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1750.204814][ T29] audit: type=1400 audit(1785978635.727:998): avc: denied { search } for pid=20849 comm="syz.6.3680" name="dwc3" dev="tracefs" ino=80911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1750.268992][ T29] audit: type=1400 audit(1785978635.727:999): avc: denied { search } for pid=20849 comm="syz.6.3680" name="dwc3_ctrl_req" dev="tracefs" ino=80913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1750.324009][ T29] audit: type=1400 audit(1785978635.727:1000): avc: denied { read write } for pid=20849 comm="syz.6.3680" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1750.517396][ T29] audit: type=1400 audit(1785978635.727:1001): avc: denied { open } for pid=20849 comm="syz.6.3680" path="/597/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1750.545029][ T29] audit: type=1400 audit(1785978635.737:1002): avc: denied { search } for pid=20849 comm="syz.6.3680" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1750.567925][ T29] audit: type=1400 audit(1785978636.127:1003): avc: denied { create } for pid=20855 comm="syz.2.3682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1751.729333][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1752.037596][T20886] syzkaller0: entered promiscuous mode [ 1752.044708][T20886] syzkaller0: entered allmulticast mode [ 1752.900125][T14082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1752.915679][T14082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1752.923408][T14082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1752.932258][T14082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1752.939715][T14082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1753.060833][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3702'. [ 1753.104390][T19185] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1753.124698][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3702'. [ 1753.164564][T20916] geneve2: entered promiscuous mode [ 1753.180976][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3702'. [ 1753.218236][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3702'. [ 1753.982998][T20905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1754.393524][T20941] syzkaller0: entered promiscuous mode [ 1754.436993][T20941] syzkaller0: entered allmulticast mode [ 1754.987764][T13906] Bluetooth: hci2: command tx timeout [ 1755.129584][T20955] syzkaller0: entered promiscuous mode [ 1755.136602][T20955] syzkaller0: entered allmulticast mode [ 1755.484152][T20970] openvswitch: netlink: Message has 264 unknown bytes. [ 1755.505987][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1755.506003][ T29] audit: type=1400 audit(1785978641.377:1014): avc: denied { mount } for pid=20971 comm="syz.7.3720" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1755.671744][ T29] audit: type=1400 audit(1785978641.387:1015): avc: denied { search } for pid=20971 comm="syz.7.3720" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.700128][ T29] audit: type=1400 audit(1785978641.387:1016): avc: denied { search } for pid=20971 comm="syz.7.3720" name="usb_gadget" dev="configfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.710260][T20979] overlayfs: missing 'lowerdir' [ 1755.730909][ T29] audit: type=1400 audit(1785978641.387:1017): avc: denied { search } for pid=20971 comm="syz.7.3720" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.754513][ T29] audit: type=1400 audit(1785978641.387:1018): avc: denied { search } for pid=20971 comm="syz.7.3720" name="usb_gadget" dev="configfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.778899][ T29] audit: type=1400 audit(1785978641.387:1019): avc: denied { search } for pid=20971 comm="syz.7.3720" name="g_uac2" dev="configfs" ino=69437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.804012][ T29] audit: type=1400 audit(1785978641.387:1020): avc: denied { search } for pid=20971 comm="syz.7.3720" name="functions" dev="configfs" ino=69438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.827559][ T29] audit: type=1400 audit(1785978641.387:1021): avc: denied { search } for pid=20971 comm="syz.7.3720" name="/" dev="configfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.849838][ T29] audit: type=1400 audit(1785978641.387:1022): avc: denied { search } for pid=20971 comm="syz.7.3720" name="usb_gadget" dev="configfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1755.875870][T20902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.883881][T20902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.891109][T20902] bridge_slave_0: entered allmulticast mode [ 1755.906228][T12300] hid_parser_main: 72 callbacks suppressed [ 1755.906246][T12300] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1755.936273][T12300] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1755.942214][T20902] bridge_slave_0: entered promiscuous mode [ 1755.956330][ T29] audit: type=1400 audit(1785978641.387:1023): avc: denied { search } for pid=20971 comm="syz.7.3720" name="g_uac2" dev="configfs" ino=69437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1756.018165][T20987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3726'. [ 1756.250053][T19187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.298279][T19187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.397777][T20902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.413581][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'. [ 1756.413607][T20902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.459027][T20902] bridge_slave_1: entered allmulticast mode [ 1756.487808][T20902] bridge_slave_1: entered promiscuous mode [ 1756.624603][T19187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.652160][T19187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.682850][T21012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3735'. [ 1756.795914][T20902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.030296][T20902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1757.070320][T13906] Bluetooth: hci2: command tx timeout [ 1757.245652][T19187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.268732][T19187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.328562][T21022] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3739'. [ 1757.405341][T20902] team0: Port device team_slave_0 added [ 1757.483510][T19187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.493887][T19187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.589167][T20902] team0: Port device team_slave_1 added [ 1757.590018][T21036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3745'. [ 1757.699427][T20902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1757.732407][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.822779][T20902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.888615][T20902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1757.897788][T20902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1757.958983][T20902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.084535][T20902] hsr_slave_0: entered promiscuous mode [ 1758.095662][T20902] hsr_slave_1: entered promiscuous mode [ 1758.102452][T20902] debugfs: 'hsr0' already exists in 'hsr' [ 1758.120850][T20902] Cannot create hsr debugfs directory [ 1758.416278][T21060] syzkaller0: entered promiscuous mode [ 1758.442502][T21060] syzkaller0: entered allmulticast mode [ 1758.624939][T19187] bridge_slave_1: left allmulticast mode [ 1758.637544][T19187] bridge_slave_1: left promiscuous mode [ 1758.653349][T19187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.685520][T19187] bridge_slave_0: left allmulticast mode [ 1758.691215][T19187] bridge_slave_0: left promiscuous mode [ 1758.697470][T19187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.991030][T19187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1759.010264][T19187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1759.023877][T19187] bond0 (unregistering): Released all slaves [ 1759.142225][T13906] Bluetooth: hci2: command tx timeout [ 1759.168891][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1759.389041][T21113] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1759.587455][T21118] netlink: 'syz.2.3770': attribute type 4 has an invalid length. [ 1759.603531][T19187] hsr_slave_0: left promiscuous mode [ 1759.627962][T19187] hsr_slave_1: left promiscuous mode [ 1759.640588][T19187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.649447][T19187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.682363][T19187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.713323][T19187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.255229][T19187] veth1_macvtap: left promiscuous mode [ 1760.264724][T19187] veth0_macvtap: left promiscuous mode [ 1760.278432][T19187] veth1_vlan: left promiscuous mode [ 1760.290001][T19187] veth0_vlan: left promiscuous mode [ 1760.581526][T19187] team0 (unregistering): Port device team_slave_1 removed [ 1760.594356][T19187] team0 (unregistering): Port device team_slave_0 removed [ 1760.690341][T21130] : renamed from bond_slave_0 (while UP) [ 1760.790193][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1761.131017][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1761.213080][T13906] Bluetooth: hci2: command tx timeout [ 1761.362777][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1761.362794][ T29] audit: type=1400 audit(1785978647.237:1080): avc: denied { write } for pid=21172 comm="syz.8.3786" path="socket:[88687]" dev="sockfs" ino=88687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1761.837506][T20902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1761.849937][ T29] audit: type=1400 audit(1785978647.717:1081): avc: denied { connect } for pid=21193 comm="syz.8.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1761.873075][ T29] audit: type=1400 audit(1785978647.737:1082): avc: denied { write } for pid=21193 comm="syz.8.3790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1761.895582][T20902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1761.920120][T20902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1761.931077][ T29] audit: type=1400 audit(1785978647.787:1083): avc: denied { write } for pid=21168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.996148][T20902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.030803][T20902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1762.045273][T21201] usbcore.quirks: string doesn't fit in 127 chars. [ 1762.058411][T20902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.084339][T20902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1762.129239][T20902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.167165][ T29] audit: type=1400 audit(1785978648.037:1084): avc: denied { write } for pid=21203 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.447610][T20902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.543838][T20902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.577499][T19195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.584693][T19195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.646977][T19193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.654169][T19193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.696289][ T29] audit: type=1400 audit(1785978648.567:1085): avc: denied { map_read map_write } for pid=21234 comm="syz.8.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1762.876305][ T29] audit: type=1400 audit(1785978648.747:1086): avc: denied { write } for pid=21222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.902935][T21247] netlink: 'syz.2.3805': attribute type 4 has an invalid length. [ 1763.059528][ T29] audit: type=1400 audit(1785978648.927:1087): avc: denied { write } for pid=21255 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.262203][T21268] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1763.282519][T21268] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1763.531383][T20902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1763.742550][T21299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3819'. [ 1763.929926][T21307] geneve2: entered promiscuous mode [ 1763.963464][ T29] audit: type=1400 audit(1785978649.827:1088): avc: denied { write } for pid=21271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.033620][ T29] audit: type=1400 audit(1785978649.907:1089): avc: denied { create } for pid=21314 comm="syz.4.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1764.164000][T20902] veth0_vlan: entered promiscuous mode [ 1764.191259][T20902] veth1_vlan: entered promiscuous mode [ 1764.211495][T21323] netlink: zone id is out of range [ 1764.226048][T21323] netlink: zone id is out of range [ 1764.241431][T21323] netlink: del zone limit has 8 unknown bytes [ 1764.278079][T20902] veth0_macvtap: entered promiscuous mode [ 1764.304885][T20902] veth1_macvtap: entered promiscuous mode [ 1764.327695][T20902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1764.348939][T20902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1764.383016][T19195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.415114][T19195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.492637][T19193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.530034][T19193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.592115][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3832'. [ 1764.601568][T19187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.601588][T19187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.292970][T19187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.308466][T19187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.372319][T21380] netlink: 'syz.8.3847': attribute type 1 has an invalid length. [ 1766.398167][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3847'. [ 1766.605905][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1766.605922][ T29] audit: type=1400 audit(1785978652.477:1110): avc: denied { name_connect } for pid=21389 comm="syz.7.3853" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1766.679230][ T29] audit: type=1400 audit(1785978652.527:1111): avc: denied { read } for pid=21392 comm="syz.2.3854" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1766.708700][ T29] audit: type=1400 audit(1785978652.527:1112): avc: denied { open } for pid=21392 comm="syz.2.3854" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1767.280378][ T29] audit: type=1400 audit(1785978653.147:1113): avc: denied { bind } for pid=21405 comm="syz.4.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1768.686642][ T29] audit: type=1400 audit(1785978654.557:1114): avc: denied { relabelfrom } for pid=21441 comm="syz.4.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1768.732187][ T29] audit: type=1400 audit(1785978654.587:1115): avc: denied { relabelto } for pid=21441 comm="syz.4.3873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1770.785574][T21483] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1770.820099][T21483] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1771.163526][T21492] netlink: 'syz.8.3893': attribute type 4 has an invalid length. [ 1771.599758][ T29] audit: type=1400 audit(1785978657.467:1116): avc: denied { create } for pid=21500 comm="syz.6.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1771.670032][ T29] audit: type=1400 audit(1785978657.517:1117): avc: denied { sys_admin } for pid=21500 comm="syz.6.3898" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1771.743042][T21509] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3901'. [ 1772.175529][T21531] netlink: zone id is out of range [ 1772.191017][T21531] netlink: zone id is out of range [ 1772.206667][T21531] netlink: zone id is out of range [ 1772.231589][T21531] netlink: del zone limit has 8 unknown bytes [ 1772.366748][ T29] audit: type=1400 audit(1785978658.237:1118): avc: denied { append } for pid=21536 comm="syz.2.3912" name="sg0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1772.460402][ T29] audit: type=1400 audit(1785978658.267:1119): avc: denied { open } for pid=21536 comm="syz.2.3912" path="/dev/sg0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1772.980256][ T29] audit: type=1400 audit(1785978658.267:1120): avc: denied { ioctl } for pid=21536 comm="syz.2.3912" path="/dev/sg0" dev="devtmpfs" ino=730 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1773.009821][ T29] audit: type=1400 audit(1785978658.447:1121): avc: denied { read write } for pid=21533 comm="syz.8.3911" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1773.090315][ T29] audit: type=1400 audit(1785978658.457:1122): avc: denied { open } for pid=21533 comm="syz.8.3911" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1773.180786][ T29] audit: type=1400 audit(1785978658.467:1123): avc: denied { ioctl } for pid=21533 comm="syz.8.3911" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1773.318744][ T29] audit: type=1400 audit(1785978658.467:1124): avc: denied { ioctl } for pid=21533 comm="syz.8.3911" path="socket:[91473]" dev="sockfs" ino=91473 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1773.362606][ T29] audit: type=1326 audit(1785978658.557:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21545 comm="syz.7.3915" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c879e0d9 code=0x7ffc0000 [ 1773.419218][T21567] netlink: zone id is out of range [ 1773.428247][T21567] netlink: zone id is out of range [ 1773.438267][T21567] netlink: zone id is out of range [ 1773.443769][T21567] netlink: del zone limit has 8 unknown bytes [ 1773.471495][ T29] audit: type=1326 audit(1785978658.567:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21545 comm="syz.7.3915" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c879e0d9 code=0x7ffc0000 [ 1773.621834][T21578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3928'. [ 1774.448534][T21599] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 1774.527628][T21599] bond1: (slave veth0_to_bond): making interface the new active one [ 1774.557951][T21599] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1774.654606][T21599] macvlan2: entered promiscuous mode [ 1774.667498][T21599] macvlan2: entered allmulticast mode [ 1774.686719][T21599] bond1: entered promiscuous mode [ 1774.741532][T21599] veth0_to_bond: entered promiscuous mode [ 1774.779779][T21599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1774.807429][T21599] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1774.844127][T21599] bond1: left promiscuous mode [ 1774.858453][T21599] veth0_to_bond: left promiscuous mode [ 1776.096831][T21640] veth0_macvtap: entered promiscuous mode [ 1776.118134][T21640] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1776.152596][T21640] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1776.467918][T21644] fuse: Bad value for 'fd' [ 1776.688528][ T5752] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1776.772178][T19193] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1776.782632][T19193] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1776.803916][ T187] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1776.825144][ T5752] usb 9-1: device descriptor read/64, error -71 [ 1776.886714][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1776.886731][ T29] audit: type=1400 audit(1785978662.757:1148): avc: denied { create } for pid=21668 comm="syz.2.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1777.419327][T15854] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1777.431124][ T29] audit: type=1400 audit(1785978662.877:1149): avc: denied { mounton } for pid=21668 comm="syz.2.3964" path="/193/file0" dev="tmpfs" ino=1034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1777.532657][ T187] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1777.544957][ T29] audit: type=1400 audit(1785978663.397:1150): avc: denied { name_bind } for pid=21677 comm="syz.2.3967" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1777.566442][ T5752] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1777.605603][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3968'. [ 1777.644708][T21684] geneve1: entered promiscuous mode [ 1777.722334][ T5752] usb 9-1: device descriptor read/64, error -71 [ 1777.832242][ T5752] usb usb9-port1: attempt power cycle [ 1778.184504][ T5752] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1778.224372][ T5752] usb 9-1: device descriptor read/8, error -71 [ 1778.553377][ T5752] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1778.657968][ T5752] usb 9-1: device descriptor read/8, error -71 [ 1779.003910][T21726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21726 comm=syz.4.3988 [ 1779.020644][ T5752] usb usb9-port1: unable to enumerate USB device [ 1780.491916][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1780.738997][T21795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4012'. [ 1781.201956][ T29] audit: type=1400 audit(1785978667.077:1151): avc: denied { unmount } for pid=18198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1781.824517][ T29] audit: type=1400 audit(1785978667.687:1152): avc: denied { map } for pid=21847 comm="syz.6.4025" path="socket:[92017]" dev="sockfs" ino=92017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1781.909185][ T29] audit: type=1400 audit(1785978667.697:1153): avc: denied { read write } for pid=21847 comm="syz.6.4025" path="socket:[92017]" dev="sockfs" ino=92017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1782.664455][ T29] audit: type=1326 audit(1785978668.537:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21865 comm="syz.6.4030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3799e0d9 code=0x7ffc0000 [ 1782.797042][ T29] audit: type=1326 audit(1785978668.537:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21865 comm="syz.6.4030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3799e0d9 code=0x7ffc0000 [ 1783.228237][T13906] Bluetooth: hci1: command 0x0406 tx timeout [ 1783.406299][ T29] audit: type=1326 audit(1785978668.537:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21865 comm="syz.6.4030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e3799e0d9 code=0x7ffc0000 [ 1783.434008][ T29] audit: type=1326 audit(1785978668.537:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21865 comm="syz.6.4030" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0e3799e0d9 code=0x7ffc0000 [ 1785.821172][T21942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.828839][T21942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.050009][T21942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1786.064408][ T29] audit: type=1400 audit(1785978671.937:1158): avc: denied { ioctl } for pid=21948 comm="syz.2.4063" path="socket:[92253]" dev="sockfs" ino=92253 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1786.076896][T21942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1786.166461][ T29] audit: type=1400 audit(1785978671.937:1159): avc: denied { bind } for pid=21948 comm="syz.2.4063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1786.422097][T19204] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.457349][T19204] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.474942][ T29] audit: type=1400 audit(1785978672.347:1160): avc: denied { read write } for pid=21956 comm="syz.2.4067" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1786.505938][T19204] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.531828][ T29] audit: type=1400 audit(1785978672.377:1161): avc: denied { open } for pid=21956 comm="syz.2.4067" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1786.589285][T19204] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.631287][ T29] audit: type=1400 audit(1785978672.497:1162): avc: denied { write } for pid=21963 comm="syz.6.4069" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1786.766059][T21973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4074'. [ 1787.218113][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1787.218130][ T29] audit: type=1400 audit(1785978673.087:1166): avc: denied { getopt } for pid=21993 comm="syz.7.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1787.336207][ T29] audit: type=1400 audit(1785978673.197:1167): avc: denied { ioctl } for pid=21995 comm="syz.4.4083" path="cgroup:[4026532805]" dev="nsfs" ino=4026532805 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1787.757994][T22015] netlink: 'syz.7.4090': attribute type 4 has an invalid length. [ 1787.795258][T22015] netlink: 'syz.7.4090': attribute type 1 has an invalid length. [ 1787.885489][T22015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1788.171923][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1788.634267][T22042] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4102'. [ 1789.540561][ T29] audit: type=1400 audit(1785978675.407:1168): avc: denied { read write } for pid=22069 comm="syz.7.4113" name="sg0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1789.755857][ T29] audit: type=1400 audit(1785978675.627:1169): avc: denied { bind } for pid=22076 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1789.865511][ T29] audit: type=1400 audit(1785978675.627:1170): avc: denied { setopt } for pid=22076 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1789.957261][ T29] audit: type=1400 audit(1785978675.827:1171): avc: denied { read } for pid=22083 comm="syz.8.4120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1790.197961][ T29] audit: type=1326 audit(1785978676.067:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22095 comm="syz.6.4124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e3799e0d9 code=0x0 [ 1790.261104][ T29] audit: type=1400 audit(1785978676.127:1173): avc: denied { write } for pid=22104 comm="syz.4.4128" name="instances" dev="tracefs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1790.339318][ T29] audit: type=1400 audit(1785978676.167:1174): avc: denied { add_name } for pid=22104 comm="syz.4.4128" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1790.400113][ T29] audit: type=1400 audit(1785978676.167:1175): avc: denied { create } for pid=22104 comm="syz.4.4128" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1790.640390][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4132'. [ 1790.729727][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4135'. [ 1790.760207][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4135'. [ 1790.785426][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4135'. [ 1791.266435][T22157] tipc: Started in network mode [ 1791.274157][T22157] tipc: Node identity 26bad5e8aab2, cluster identity 4711 [ 1791.283036][T22157] tipc: Enabled bearer , priority 0 [ 1791.353379][T22157] syzkaller0: entered promiscuous mode [ 1791.365279][T22157] syzkaller0: entered allmulticast mode [ 1791.377420][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.385626][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.403831][T22160] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1791.826617][T22166] tipc: Resetting bearer [ 1791.862955][T22156] tipc: Resetting bearer [ 1791.904045][T22156] tipc: Disabling bearer [ 1792.989627][T22196] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1793.010917][T22196] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1794.234513][ T29] audit: type=1800 audit(1785978680.107:1176): pid=22235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4179" name="bus" dev="tmpfs" ino=1007 res=0 errno=0 [ 1794.305234][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1794.624482][ T29] audit: type=1400 audit(1785978680.467:1177): avc: denied { write } for pid=22242 comm="syz.4.4183" name="functions" dev="configfs" ino=17896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1794.933228][ T29] audit: type=1400 audit(1785978680.467:1178): avc: denied { add_name } for pid=22242 comm="syz.4.4183" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1794.997369][ T29] audit: type=1400 audit(1785978680.527:1179): avc: denied { create } for pid=22242 comm="syz.4.4183" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1795.242211][ T29] audit: type=1400 audit(1785978681.097:1180): avc: denied { write } for pid=22264 comm="syz.4.4191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1795.388523][ T29] audit: type=1400 audit(1785978681.257:1181): avc: denied { create } for pid=22275 comm="syz.4.4195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1795.441278][ T29] audit: type=1400 audit(1785978681.287:1182): avc: denied { ioctl } for pid=22275 comm="syz.4.4195" path="socket:[94291]" dev="sockfs" ino=94291 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1795.834357][T22288] syzkaller0: entered promiscuous mode [ 1795.856222][T22288] syzkaller0: entered allmulticast mode [ 1796.080028][T22299] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4206'. [ 1796.589139][T22313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 1797.069712][ T29] audit: type=1400 audit(1785978682.937:1183): avc: denied { mount } for pid=22322 comm="syz.2.4215" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1798.061804][ T29] audit: type=1400 audit(1785978683.917:1184): avc: denied { read } for pid=22358 comm="syz.4.4228" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1798.130128][ T29] audit: type=1400 audit(1785978683.917:1185): avc: denied { open } for pid=22358 comm="syz.4.4228" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1798.752712][T22372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4234'. [ 1798.797391][T22372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4234'. [ 1800.794846][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4265'. [ 1800.925262][T22454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4267'. [ 1801.809763][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1801.809781][ T29] audit: type=1400 audit(1785978687.677:1193): avc: denied { map } for pid=22480 comm="syz.2.4276" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1801.866082][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4278'. [ 1801.947541][T22487] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1802.083651][T22492] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4283'. [ 1802.251866][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1802.844602][ T29] audit: type=1400 audit(1785978688.717:1194): avc: denied { read } for pid=22519 comm="syz.4.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1803.061358][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1803.461143][ T29] audit: type=1400 audit(1785978689.327:1195): avc: denied { mount } for pid=22551 comm="syz.4.4310" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1803.524359][ T29] audit: type=1400 audit(1785978689.397:1196): avc: denied { unmount } for pid=18198 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1803.706081][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 1804.436049][ T29] audit: type=1400 audit(1785978690.307:1197): avc: denied { create } for pid=22571 comm="syz.2.4314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 1804.547948][T22574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1805.301020][T22587] syzkaller0: entered promiscuous mode [ 1805.314481][T22587] syzkaller0: entered allmulticast mode [ 1805.909655][T22606] geneve2: left promiscuous mode [ 1807.181207][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1807.209448][ T29] audit: type=1400 audit(1785978693.077:1198): avc: denied { write } for pid=22647 comm="syz.6.4346" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1807.212691][T22649] random: crng reseeded on system resumption [ 1807.233386][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1807.257132][ T29] audit: type=1400 audit(1785978693.077:1199): avc: denied { open } for pid=22647 comm="syz.6.4346" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1807.324088][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1807.334649][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1808.285559][T22658] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1808.435943][ T3106] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1808.594627][T22681] ipvlan1: entered promiscuous mode [ 1808.604350][T22680] ipvlan1: left promiscuous mode [ 1808.754171][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1808.763605][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1808.824884][T22692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1808.864309][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1809.452378][ T5730] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1810.073208][ T29] audit: type=1400 audit(1785978695.937:1200): avc: denied { append } for pid=22720 comm="syz.2.4371" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1810.082920][T22725] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1810.605794][T22748] syzkaller0: entered promiscuous mode [ 1810.616084][T22748] syzkaller0: entered allmulticast mode [ 1810.726933][ T29] audit: type=1400 audit(1785978696.577:1201): avc: denied { bind } for pid=22753 comm="syz.6.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1813.210254][T22809] syzkaller0: entered promiscuous mode [ 1813.238918][T22809] syzkaller0: entered allmulticast mode [ 1813.385117][T22816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4409'. [ 1813.939285][T22842] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4420'. [ 1814.067285][T22840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.074940][T22840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.360337][T22840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1814.411284][T22840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.051697][T19187] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.076752][T19193] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.101005][T22887] fuse: Unknown parameter 'group_i00000000000000000000' [ 1816.110422][T19193] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.149394][T19193] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1816.529436][T22901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.543771][T22901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.571505][T22901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1816.685836][T22901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1816.724243][T22901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.742165][ T29] audit: type=1400 audit(1785978702.617:1202): avc: denied { read write } for pid=22909 comm="syz.6.4441" name="control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1816.765070][T22916] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4444'. [ 1816.788846][T22901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1816.800474][ T29] audit: type=1400 audit(1785978702.637:1203): avc: denied { open } for pid=22909 comm="syz.6.4441" path="/123/dev/mapper/control" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1816.831031][T22901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1816.850743][T22901] veth1_vlan: left promiscuous mode [ 1816.863100][T22901] veth0_vlan: left promiscuous mode [ 1816.871800][ T29] audit: type=1400 audit(1785978702.657:1204): avc: denied { ioctl } for pid=22909 comm="syz.6.4441" path="/123/dev/mapper/control" dev="devtmpfs" ino=1268 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1816.924206][T22901] veth0_vlan: entered promiscuous mode [ 1816.963347][T22901] veth1_vlan: entered promiscuous mode [ 1817.011097][T22901] veth1_macvtap: left promiscuous mode [ 1817.022254][ T29] audit: type=1800 audit(1785978702.677:1205): pid=22892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4431" name="file0" dev="tmpfs" ino=1450 res=0 errno=0 [ 1817.054330][T22901] veth0_macvtap: left promiscuous mode [ 1817.068610][T22901] veth0_macvtap: entered promiscuous mode [ 1817.088640][T22901] veth1_macvtap: entered promiscuous mode [ 1817.115650][T22901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1817.136075][T22901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.156169][T22901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1817.172847][T22901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1817.238378][T19187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.245536][T19187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.271386][T19187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.278527][T19187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.436956][T22916] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4444'. [ 1817.436985][T22926] syzkaller0: entered promiscuous mode [ 1817.437006][T22926] syzkaller0: entered allmulticast mode [ 1817.589688][T19195] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.602035][T19195] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.611285][T19195] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.633801][T19195] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1817.798473][ T29] audit: type=1400 audit(1785978703.657:1206): avc: denied { bind } for pid=22951 comm="syz.2.4456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1817.851706][T15854] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1817.991709][T15854] usb 7-1: device descriptor read/64, error -71 [ 1818.275129][ T29] audit: type=1400 audit(1785978704.127:1207): avc: denied { connect } for pid=22967 comm="syz.2.4461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1818.322202][T15854] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1818.474444][T15854] usb 7-1: device descriptor read/64, error -71 [ 1818.584568][T22980] syzkaller0: entered promiscuous mode [ 1818.590130][T22980] syzkaller0: entered allmulticast mode [ 1818.602272][T15854] usb usb7-port1: attempt power cycle [ 1819.920804][T15854] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1819.942756][T15854] usb 7-1: device descriptor read/8, error -71 [ 1820.041069][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4471'. [ 1820.752162][ T29] audit: type=1400 audit(1785978706.627:1208): avc: denied { watch watch_reads } for pid=23010 comm="syz.2.4481" path="/285" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1821.214119][ T5752] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1821.371737][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1821.586202][T23027] geneve2: left promiscuous mode [ 1821.618352][ T5752] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1821.778109][ T5752] usb 5-1: device descriptor read/64, error -71 [ 1821.902693][ T5752] usb usb5-port1: attempt power cycle [ 1822.741947][ T5752] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1822.804375][ T5752] usb 5-1: device descriptor read/8, error -71 [ 1823.121703][ T5752] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1823.195016][ T5752] usb 5-1: device descriptor read/8, error -71 [ 1823.331867][ T5752] usb usb5-port1: unable to enumerate USB device [ 1823.343301][T23100] tmpfs: Unknown parameter '00000000000000000000' [ 1823.674186][ T5752] lg-g15 0003:046D:C21C.0011: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1823.741717][ T5752] lg-g15 0003:046D:C21C.0011: Error getting backlight brightness: -5 [ 1823.811391][ T5752] lg-g15 0003:046D:C21C.0011: probe with driver lg-g15 failed with error -5 [ 1824.614166][T23128] netlink: 'syz.8.4514': attribute type 4 has an invalid length. [ 1825.681940][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1825.831702][ T24] usb 5-1: device descriptor read/64, error -71 [ 1826.101887][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1826.183185][ T3106] lg-g15 0003:046D:C21C.0012: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1826.185492][T23175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4532'. [ 1826.192236][ T3106] lg-g15 0003:046D:C21C.0012: Error getting backlight brightness: -5 [ 1826.282354][ T3106] lg-g15 0003:046D:C21C.0012: probe with driver lg-g15 failed with error -5 [ 1826.303400][ T24] usb 5-1: device descriptor read/64, error -71 [ 1826.433766][ T24] usb usb5-port1: attempt power cycle [ 1826.441504][T23176] fido_id[23176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1826.788188][ T29] audit: type=1400 audit(1785978712.657:1209): avc: denied { read append } for pid=23199 comm="syz.2.4539" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1826.791702][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1826.882255][ T24] usb 5-1: device descriptor read/8, error -71 [ 1826.891394][ T29] audit: type=1400 audit(1785978712.657:1210): avc: denied { open } for pid=23199 comm="syz.2.4539" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1827.121816][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1827.145645][T23212] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4544'. [ 1827.156142][ T5730] lg-g15 0003:046D:C21C.0013: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1827.173334][ T24] usb 5-1: device descriptor read/8, error -71 [ 1827.183057][ T5730] lg-g15 0003:046D:C21C.0013: Error getting backlight brightness: -5 [ 1827.193670][ T5730] lg-g15 0003:046D:C21C.0013: probe with driver lg-g15 failed with error -5 [ 1827.302766][ T24] usb usb5-port1: unable to enumerate USB device [ 1827.303602][T23213] fido_id[23213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1827.453092][T23227] fuse: Bad value for 'user_id' [ 1827.463199][T23227] fuse: Bad value for 'user_id' [ 1827.640512][T23235] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4552'. [ 1827.788632][ T29] audit: type=1800 audit(1785978713.657:1211): pid=23232 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4551" name="file0" dev="tmpfs" ino=779 res=0 errno=0 [ 1827.838737][T23244] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1827.856167][T23244] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1827.974840][T23248] netlink: 'syz.2.4557': attribute type 4 has an invalid length. [ 1828.543031][T23283] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4569'. [ 1828.580499][T23283] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4569'. [ 1829.120007][ T29] audit: type=1400 audit(1785978714.987:1212): avc: denied { bind } for pid=23319 comm="syz.6.4584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1829.288732][ T29] audit: type=1400 audit(1785978715.157:1213): avc: denied { create } for pid=23329 comm="syz.6.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1829.380915][ T29] audit: type=1400 audit(1785978715.157:1214): avc: denied { getopt } for pid=23329 comm="syz.6.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1829.771798][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1831.196327][ T29] audit: type=1400 audit(1785978717.067:1215): avc: denied { getopt } for pid=23387 comm="syz.4.4608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1831.488837][T23397] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4612'. [ 1832.322038][T23419] program syz.2.4621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1832.721383][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4625'. [ 1834.230605][T23461] netlink: 'syz.4.4637': attribute type 4 has an invalid length. [ 1834.306872][T23465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4639'. [ 1835.814098][T23512] netlink: 'syz.7.4654': attribute type 4 has an invalid length. [ 1836.135350][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1836.521207][ T29] audit: type=1400 audit(1785978722.387:1216): avc: denied { ioctl } for pid=23535 comm="syz.2.4668" path="socket:[97799]" dev="sockfs" ino=97799 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1836.521325][T23537] syzkaller0: entered promiscuous mode [ 1836.590216][T23537] syzkaller0: entered allmulticast mode [ 1837.327969][T23567] tmpfs: Unknown parameter 'nr_blo00000000000000000000' [ 1837.713365][ T29] audit: type=1400 audit(1785978723.577:1217): avc: denied { mount } for pid=23581 comm="syz.8.4686" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1837.874490][ T29] audit: type=1400 audit(1785978723.747:1218): avc: denied { write } for pid=23589 comm="syz.6.4689" path="socket:[97915]" dev="sockfs" ino=97915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1837.928110][T23590] netlink: 'syz.8.4690': attribute type 4 has an invalid length. [ 1838.663723][ T29] audit: type=1400 audit(1785978724.527:1219): avc: denied { create } for pid=23613 comm="syz.4.4702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rds_socket permissive=1 [ 1838.831987][T23622] netlink: 'syz.6.4703': attribute type 4 has an invalid length. [ 1839.341307][T23649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1839.358702][T23649] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1839.728571][T23666] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4723'. [ 1839.772046][T23667] netlink: 'syz.8.4722': attribute type 4 has an invalid length. [ 1839.784473][T23669] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4724'. [ 1839.835754][T23671] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4725'. [ 1839.999010][T23677] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4727'. [ 1840.050899][T23677] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4727'. [ 1840.193854][T23690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4733'. [ 1840.240877][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4735'. [ 1840.412615][T23699] netlink: 'syz.6.4738': attribute type 4 has an invalid length. [ 1840.493879][T23702] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4737'. [ 1841.285675][T23722] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1841.553236][T23735] netlink: 'syz.8.4751': attribute type 4 has an invalid length. [ 1842.277016][T13906] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1842.295691][T13906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1842.315189][T13906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1842.346774][T13906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1842.356094][T13906] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1842.424216][ T29] audit: type=1400 audit(1785978728.287:1220): avc: denied { bind } for pid=23760 comm="syz.4.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1842.601412][ T29] audit: type=1400 audit(1785978728.317:1221): avc: denied { listen } for pid=23760 comm="syz.4.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1842.886934][T23782] usb usb7: usbfs: process 23782 (syz.6.4766) did not claim interface 0 before use [ 1843.631208][T23805] syzkaller0: entered promiscuous mode [ 1843.707185][T23805] syzkaller0: entered allmulticast mode [ 1843.884055][ T29] audit: type=1400 audit(1785978729.757:1222): avc: denied { write } for pid=23775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.197341][ T29] audit: type=1400 audit(1785978730.067:1223): avc: denied { write } for pid=23822 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.515149][T13906] Bluetooth: hci5: command tx timeout [ 1845.337366][ T29] audit: type=1400 audit(1785978731.207:1224): avc: denied { write } for pid=23833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1845.372443][T23762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.380750][T23762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.398158][T23762] bridge_slave_0: entered allmulticast mode [ 1845.424494][T23762] bridge_slave_0: entered promiscuous mode [ 1845.833651][T23871] syzkaller0: entered promiscuous mode [ 1845.854350][T23871] syzkaller0: entered allmulticast mode [ 1845.890258][T23762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.926088][T23762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.954909][T23762] bridge_slave_1: entered allmulticast mode [ 1845.968289][ T29] audit: type=1400 audit(1785978731.837:1225): avc: denied { write } for pid=23875 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1846.008320][T23762] bridge_slave_1: entered promiscuous mode [ 1846.194790][T23762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.205129][T23885] PM: suspend entry (deep) [ 1846.218132][T23762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.297295][T23762] team0: Port device team_slave_0 added [ 1846.303605][T23888] syzkaller0: entered promiscuous mode [ 1846.313038][T23888] syzkaller0: entered allmulticast mode [ 1846.325991][T23762] team0: Port device team_slave_1 added [ 1846.384612][T23762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.392100][T23762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.419440][T23762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.433091][T23762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.440018][T23762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.466821][T23762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.581738][T13906] Bluetooth: hci5: command tx timeout [ 1846.656873][T23762] hsr_slave_0: entered promiscuous mode [ 1846.668395][T23762] hsr_slave_1: entered promiscuous mode [ 1846.674584][T23762] debugfs: 'hsr0' already exists in 'hsr' [ 1846.680301][T23762] Cannot create hsr debugfs directory [ 1846.773007][ T35] Filesystems sync: 0.534 seconds [ 1847.313869][T23885] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1847.334408][T23885] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1847.346438][T23905] fuse: Bad value for 'fd' [ 1847.552888][T23885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1847.574564][T23885] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1847.617663][T23885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1847.637102][T23885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1847.686046][T23885] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1847.696479][T23762] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.708771][T23762] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.721161][T23885] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1847.728453][T23885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1847.994193][T23885] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1848.166124][T23885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1848.259397][T23885] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1848.281205][ T29] audit: type=1800 audit(1785978734.147:1226): pid=23906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4799" name="file0" dev="tmpfs" ino=1094 res=0 errno=0 [ 1848.305351][T23885] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1848.314453][T23885] Freezing user space processes [ 1848.374915][T23762] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.385768][T23762] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.451231][T23762] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.461532][T23762] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.533276][T23762] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1848.544449][T23762] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.579199][T23885] Freezing user space processes completed (elapsed 0.258 seconds) [ 1848.587200][T23885] OOM killer disabled. [ 1848.591257][T23885] Freezing remaining freezable tasks [ 1848.602763][T23885] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 1848.611546][T23885] printk: Suspending console(s) (use no_console_suspend to debug) [ 1848.809746][T23885] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1848.809798][T23885] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1848.809841][T23885] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1848.809884][T23885] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1848.809926][T23885] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1848.809968][T23885] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1848.810010][T23885] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1848.810052][T23885] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1848.810095][T23885] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1848.810143][T23885] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1848.810184][T23885] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1848.810227][T23885] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1848.810269][T23885] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1848.810311][T23885] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1848.810353][T23885] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1848.868409][T23916] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1849.192827][T23885] ACPI: PM: Preparing to enter system sleep state S3 [ 1849.193236][T23885] ACPI: PM: Saving platform NVS memory [ 1849.194241][T23885] Disabling non-boot CPUs ... [ 1849.229992][T23885] smpboot: CPU 1 is now offline [ 1849.273591][T23885] ACPI: PM: Low-level resume complete [ 1849.273632][T23885] ACPI: PM: Restoring platform NVS memory [ 1849.292532][T23885] Enabling non-boot CPUs ... [ 1849.293483][T23885] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1849.307534][T23885] CPU1 is up [ 1849.308751][T23885] ACPI: PM: Waking up from system sleep state S3 [ 1849.390053][T13906] Bluetooth: hci4: command 0x0406 tx timeout [ 1849.412503][T19206] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1849.630429][T13906] Bluetooth: hci1: command 0x0406 tx timeout [ 1849.646257][T23885] usb251xb serial8250: hub is put in default configuration. [ 1849.710136][T13906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1849.715417][T23885] OOM killer enabled. [ 1849.715974][T23885] Restarting tasks: Starting [ 1849.741214][T23885] Restarting tasks: Done [ 1849.742124][T23885] random: crng reseeded on system resumption [ 1849.749916][T23885] PM: suspend exit [ 1849.798180][T13906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1850.122862][T23984] syzkaller0: entered promiscuous mode [ 1850.123684][T23984] syzkaller0: entered allmulticast mode [ 1850.235284][T23762] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1850.240518][T13906] Bluetooth: hci5: command 0x0419 tx timeout [ 1850.246759][T23762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1850.249311][T23762] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1850.276844][T23762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1850.283858][T23762] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1850.293168][T23762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1850.300383][T23762] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1850.313430][T23762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1850.794817][T24000] fuse: Bad value for 'fd' [ 1851.472246][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1851.473372][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1851.530067][T13906] Bluetooth: hci4: command 0x0406 tx timeout [ 1851.600603][T23762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.623560][T23762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1851.629890][T19195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.630986][T19195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1851.636742][ T29] audit: type=1800 audit(1785978737.508:1227): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4812" name="file0" dev="tmpfs" ino=1895 res=0 errno=0 [ 1851.644308][T23967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.645366][T23967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.710671][T13906] Bluetooth: hci1: command 0x0406 tx timeout [ 1851.803754][T13906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1851.870077][T13906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1852.270327][T13906] Bluetooth: hci5: command 0x0419 tx timeout [ 1853.226203][T24056] fuse: Bad value for 'fd' [ 1853.477892][T23762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.615516][T24071] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 1853.867763][ T29] audit: type=1800 audit(1785978739.718:1228): pid=24057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4829" name="file0" dev="tmpfs" ino=1703 res=0 errno=0 [ 1853.870869][T13906] Bluetooth: hci3: command 0x0c1a tx timeout [ 1853.960371][T13906] Bluetooth: hci2: command 0x0c1a tx timeout [ 1854.224012][T23762] veth0_vlan: entered promiscuous mode [ 1854.247346][T23762] veth1_vlan: entered promiscuous mode [ 1854.332809][T23762] veth0_macvtap: entered promiscuous mode [ 1854.350141][T13906] Bluetooth: hci5: command 0x0419 tx timeout [ 1854.350987][T23762] veth1_macvtap: entered promiscuous mode [ 1854.393367][T23762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.414009][T23762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.474022][T23965] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.617993][T24085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.620596][T24085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.626415][T24085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.668479][T24085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.672032][T24085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.678153][T24085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1854.679549][T24085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1854.685482][T24085] veth1_vlan: left promiscuous mode [ 1854.687207][T24085] veth0_vlan: left promiscuous mode [ 1854.689463][T24085] veth0_vlan: entered promiscuous mode [ 1854.692517][T24085] veth1_vlan: entered promiscuous mode [ 1854.697164][T24085] veth1_macvtap: left promiscuous mode [ 1854.699163][T24085] veth0_macvtap: left promiscuous mode [ 1854.700903][T24085] veth0_macvtap: entered promiscuous mode [ 1854.702676][T24085] veth1_macvtap: entered promiscuous mode [ 1854.709140][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1854.711262][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1854.713326][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1854.715373][T24085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1854.718820][T24085] geneve2: left promiscuous mode [ 1854.729846][T19190] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.763452][T23922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.764535][T23922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.787562][T23922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.788704][T23922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1854.895035][T24088] __nla_validate_parse: 6 callbacks suppressed [ 1854.895053][T24088] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4838'. [ 1855.225642][T23965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.229095][T19190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.273888][T23922] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.286144][T23922] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.326103][T23922] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.372178][T23965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.689381][T23967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.690744][T23967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.795167][T23967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.796271][T23967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.981374][T24109] fuse: Invalid rootmode [ 1856.430501][T15854] IPVS: starting estimator thread 0... [ 1856.460182][T13906] Bluetooth: hci5: command 0x0419 tx timeout [ 1856.520111][T24118] IPVS: using max 33 ests per chain, 79200 per kthread [ 1856.827494][ T29] audit: type=1800 audit(1785978742.698:1229): pid=24113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4846" name="file0" dev="tmpfs" ino=1735 res=0 errno=0 [ 1856.961795][T24125] tmpfs: Unknown parameter 'nr_blocks00000000000000000000' [ 1858.429846][T24153] fuse: Invalid rootmode [ 1859.108913][ T29] audit: type=1800 audit(1785978744.978:1230): pid=24156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4862" name="file0" dev="tmpfs" ino=1751 res=0 errno=0 [ 1859.281989][T24181] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4873'. [ 1860.175879][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.178124][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.183890][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.187241][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.201651][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.207340][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.213407][ T5752] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1860.239796][ T5752] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.10 Device [syz0] on syz1 [ 1860.385240][T24213] fido_id[24213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1860.563767][T24220] fuse: Invalid rootmode [ 1861.595463][ T29] audit: type=1800 audit(1785978747.468:1231): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4885" name="file0" dev="tmpfs" ino=1186 res=0 errno=0 [ 1862.552561][T19902] lg-g15 0003:046D:C21C.0015: item fetching failed at offset 26/27 [ 1862.559060][T19902] lg-g15 0003:046D:C21C.0015: probe with driver lg-g15 failed with error -22 [ 1863.482819][T24277] fuse: Bad value for 'rootmode' [ 1864.459447][ T29] audit: type=1800 audit(1785978750.328:1232): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4902" name="file0" dev="tmpfs" ino=86 res=0 errno=0 [ 1864.809606][ T5752] lg-g15 0003:046D:C21C.0016: unbalanced collection at end of report description [ 1864.830945][ T5752] lg-g15 0003:046D:C21C.0016: probe with driver lg-g15 failed with error -22 [ 1865.468368][T24313] netlink: 'syz.8.4915': attribute type 4 has an invalid length. [ 1866.666890][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4923'. [ 1867.689248][T24361] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4935'. [ 1868.303798][T23926] bridge_slave_1: left allmulticast mode [ 1868.334200][T23926] bridge_slave_1: left promiscuous mode [ 1868.366784][T23926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.391376][ T29] audit: type=1400 audit(1785978754.258:1233): avc: denied { ioctl } for pid=24369 comm="syz.6.4940" path="/dev/usbmon7" dev="devtmpfs" ino=743 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1868.479248][T23926] bridge_slave_0: left allmulticast mode [ 1868.530812][T23926] bridge_slave_0: left promiscuous mode [ 1868.567278][T23926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.625281][T23926] pim6reg: left allmulticast mode [ 1870.193664][T23926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1870.224028][T23926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1870.261352][T23926] bond0 (unregistering): Released all slaves [ 1871.556372][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4964'. [ 1871.867549][T24448] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4966'. [ 1872.084964][T23926] hsr_slave_0: left promiscuous mode [ 1872.609425][T23926] hsr_slave_1: left promiscuous mode [ 1872.637942][T23926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1872.672508][T23926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1872.687845][T23926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1872.706631][T23926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1872.743028][T23926] veth1_macvtap: left promiscuous mode [ 1872.761588][T23926] veth0_macvtap: left promiscuous mode [ 1872.767347][T23926] veth1_vlan: left promiscuous mode [ 1872.778113][T23926] veth0_vlan: left promiscuous mode [ 1873.429648][ T29] audit: type=1400 audit(1785978759.298:1234): avc: denied { recv } for pid=23762 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.121 dest=51272 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1873.503642][ T29] audit: type=1400 audit(1785978759.358:1235): avc: denied { create } for pid=24489 comm="syz.4.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1873.548952][ T29] audit: type=1400 audit(1785978759.368:1236): avc: denied { setopt } for pid=24489 comm="syz.4.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1873.656578][T24498] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4986'. [ 1873.892592][T23926] team0 (unregistering): Port device team_slave_1 removed [ 1873.925688][T23926] team0 (unregistering): Port device team_slave_0 removed [ 1875.019038][ T29] audit: type=1400 audit(1785978760.888:1237): avc: denied { recv } for pid=24533 comm="syz.6.4999" saddr=10.128.0.169 src=34198 daddr=10.128.1.121 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1875.159673][T24542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1875.176683][T24534] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4998'. [ 1875.694658][T23926] IPVS: stop unused estimator thread 0... [ 1875.881983][ T29] audit: type=1400 audit(1785978761.748:1238): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1875.908038][ T29] audit: type=1400 audit(1785978761.748:1239): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1877.485184][T24579] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5014'. [ 1877.533469][T24581] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5013'. [ 1877.745713][ T29] audit: type=1326 audit(1785978763.618:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24583 comm="syz.2.5015" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8e1f9e0d9 code=0x0 [ 1878.275673][T24596] netlink: 'syz.6.5021': attribute type 4 has an invalid length. [ 1878.633497][T24615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5027'. [ 1878.956033][T24632] program syz.6.5034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1879.688322][T24642] syzkaller0: entered promiscuous mode [ 1879.698410][T24642] syzkaller0: entered allmulticast mode [ 1879.725766][T24644] netlink: 'syz.4.5039': attribute type 7 has an invalid length. [ 1879.924541][T24650] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5041'. [ 1882.317858][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5047'. [ 1882.330257][T24674] tipc: Started in network mode [ 1882.335155][T24674] tipc: Node identity d282264ff5f3, cluster identity 4711 [ 1882.342577][T24674] tipc: Enabled bearer , priority 0 [ 1882.350538][T24675] syzkaller0: MTU too low for tipc bearer [ 1882.356414][T24675] tipc: Disabling bearer [ 1882.386140][T24685] syzkaller0: entered promiscuous mode [ 1882.400115][T24685] syzkaller0: entered allmulticast mode [ 1882.663122][T24704] netlink: 'syz.7.5057': attribute type 4 has an invalid length. [ 1883.792056][ T29] audit: type=1400 audit(1785978769.668:1241): avc: denied { nlmsg_read } for pid=24720 comm="syz.4.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1886.445264][T24772] netlink: 'syz.8.5072': attribute type 4 has an invalid length. [ 1888.671223][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1890.197430][T24824] netlink: 'syz.7.5091': attribute type 4 has an invalid length. [ 1890.525764][T24832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5095'. [ 1890.583235][ T29] audit: type=1400 audit(1785978776.458:1242): avc: denied { name_bind } for pid=24831 comm="syz.2.5095" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1893.093688][T24852] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1894.886963][T24886] netlink: 'syz.6.5111': attribute type 4 has an invalid length. [ 1895.374688][T24891] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5115'. [ 1895.456472][T24893] device-mapper: ioctl: name not supplied when creating device [ 1898.485066][T15854] lg-g15 0003:046D:C21C.0017: unbalanced collection at end of report description [ 1898.510668][T15854] lg-g15 0003:046D:C21C.0017: probe with driver lg-g15 failed with error -22 [ 1899.088487][T24946] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5132'. [ 1899.109300][T24949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5131'. [ 1899.329426][T24963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5136'. [ 1899.560132][T15854] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1899.745702][T15854] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.757455][T15854] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.781457][T15854] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1899.792960][T15854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.803971][T15854] usb 3-1: config 0 descriptor?? [ 1899.821773][T15854] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1900.023753][T15854] usb 3-1: USB disconnect, device number 70 [ 1900.472167][T15854] lg-g15 0003:046D:C21C.0018: unbalanced collection at end of report description [ 1900.472683][T19902] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1900.483990][T15854] lg-g15 0003:046D:C21C.0018: probe with driver lg-g15 failed with error -22 [ 1900.666483][T19902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.677695][T19902] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1900.693582][T19902] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1900.705044][T19902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.722829][T19902] usb 3-1: config 0 descriptor?? [ 1900.740435][T19902] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1900.751740][T19902] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1901.653591][T25001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.666593][T25001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.865195][T24984] syzkaller0: entered promiscuous mode [ 1901.871577][T24984] syzkaller0: entered allmulticast mode [ 1903.982999][T19902] usb 3-1: USB disconnect, device number 71 [ 1904.583694][T18349] udevd[18349]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 1904.637789][T15854] lg-g15 0003:046D:C21C.0019: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1904.664966][T15854] lg-g15 0003:046D:C21C.0019: Error getting backlight brightness: -5 [ 1904.689638][T15854] lg-g15 0003:046D:C21C.0019: probe with driver lg-g15 failed with error -5 [ 1904.799688][T25040] fido_id[25040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1905.440919][T15854] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1905.515645][T19902] lg-g15 0003:046D:C21C.001A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1905.526290][T19902] lg-g15 0003:046D:C21C.001A: Error getting backlight brightness: -5 [ 1905.544235][T19902] lg-g15 0003:046D:C21C.001A: probe with driver lg-g15 failed with error -5 [ 1905.592053][T15854] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1905.611248][T15854] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1905.634829][T15854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.647347][T25078] fido_id[25078]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1905.664483][T15854] usb 5-1: config 0 descriptor?? [ 1905.685046][T15854] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1905.893767][T15854] usb 5-1: USB disconnect, device number 61 [ 1906.380065][T15854] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1906.531718][T15854] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1906.554007][T15854] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1906.575649][T15854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.598557][T15854] usb 5-1: config 0 descriptor?? [ 1906.615216][T15854] aiptek 5-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1906.644283][T15854] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1907.539791][T25098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.556690][T25098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.920818][T16572] lg-g15 0003:046D:C21C.001B: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1907.940059][T16572] lg-g15 0003:046D:C21C.001B: Error getting backlight brightness: -5 [ 1907.964706][T16572] lg-g15 0003:046D:C21C.001B: probe with driver lg-g15 failed with error -5 [ 1908.007780][T25113] fido_id[25113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1908.096004][T25116] device-mapper: ioctl: name not supplied when creating device [ 1908.448397][T25131] syzkaller0: entered promiscuous mode [ 1908.461024][T25131] syzkaller0: entered allmulticast mode [ 1909.168511][ T5752] usb 5-1: USB disconnect, device number 62 [ 1909.416711][T16572] lg-g15 0003:046D:C21C.001C: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1909.455369][T16572] lg-g15 0003:046D:C21C.001C: Error getting backlight brightness: -5 [ 1909.481644][T16572] lg-g15 0003:046D:C21C.001C: probe with driver lg-g15 failed with error -5 [ 1909.598856][T25149] fido_id[25149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1909.785754][T25161] syzkaller0: entered promiscuous mode [ 1909.808961][T25161] syzkaller0: entered allmulticast mode [ 1909.920124][T25092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1910.197350][T25170] syzkaller0: entered promiscuous mode [ 1910.216189][T25170] syzkaller0: entered allmulticast mode [ 1910.362245][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5208'. [ 1910.487324][ T29] audit: type=1400 audit(1785978796.358:1243): avc: denied { shutdown } for pid=25180 comm="syz.8.5211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1912.193996][T25221] netlink: 360 bytes leftover after parsing attributes in process `syz.8.5220'. [ 1912.391539][T25225] syzkaller0: entered promiscuous mode [ 1912.408758][T25225] syzkaller0: entered allmulticast mode [ 1912.631103][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5225'. [ 1913.798202][T25261] ------------[ cut here ]------------ [ 1913.804301][T25261] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 1913.812127][T25261] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x52e/0x660, CPU#1: syz.2.5232/25261 [ 1913.824002][T25261] Modules linked in: [ 1913.828125][T25261] CPU: 1 UID: 0 PID: 25261 Comm: syz.2.5232 Tainted: G L syzkaller #0 PREEMPT(full) [ 1913.839431][T25261] Tainted: [L]=SOFTLOCKUP [ 1913.844027][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1913.854426][T25261] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 1913.861067][T25261] Code: 89 c5 89 c6 e8 f7 ef 68 f8 45 85 ed 0f 85 be fb ff ff e8 79 f5 68 f8 48 8d 3d 22 04 90 07 ba 48 00 00 00 48 c7 c6 e0 88 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 f5 68 f8 48 8d bd 00 08 00 00 [ 1913.880955][T25261] RSP: 0018:ffffc900067efa80 EFLAGS: 00010283 [ 1913.887356][T25261] RAX: 00000000000002a2 RBX: ffff88802876a000 RCX: ffffc900055e9000 [ 1913.895976][T25261] RDX: 0000000000000048 RSI: ffffffff8d1888e0 RDI: ffffffff91317390 [ 1913.904685][T25261] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1913.914104][T25261] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1913.922458][T25261] R13: 0000000000000000 R14: ffff88802d6fe568 R15: ffffc900067efbe0 [ 1913.930829][T25261] FS: 00007fa8e01f66c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 1913.939768][T25261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1913.946725][T25261] CR2: 0000200000002020 CR3: 00000000598fe000 CR4: 00000000003526f0 [ 1913.955014][T25261] Call Trace: [ 1913.958297][T25261] [ 1913.961505][T25261] io_register_zcrx+0xe94/0x1d30 [ 1913.966478][T25261] ? __pfx_io_register_zcrx+0x10/0x10 [ 1913.972172][T25261] ? __pfx___futex_wait+0x10/0x10 [ 1913.977222][T25261] ? lock_acquire+0x1b9/0x370 [ 1913.982213][T25261] ? rcu_is_watching+0x12/0xc0 [ 1913.987024][T25261] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 1913.993519][T25261] ? __fget_files+0x215/0x3d0 [ 1913.998444][T25261] ? __fget_files+0x215/0x3d0 [ 1914.005087][T25261] __do_sys_io_uring_register+0x1193/0x1bc0 [ 1914.011044][T25261] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1914.017300][T25261] ? __x64_sys_futex+0x34f/0x4d0 [ 1914.022299][T25261] ? __x64_sys_futex+0x358/0x4d0 [ 1914.027267][T25261] ? xfd_validate_state+0x129/0x190 [ 1914.032568][T25261] do_syscall_64+0x115/0x870 [ 1914.037187][T25261] ? clear_bhb_loop+0x40/0x90 [ 1914.041934][T25261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.047856][T25261] RIP: 0033:0x7fa8e1f9e0d9 [ 1914.052300][T25261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.071989][T25261] RSP: 002b:00007fa8e01f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1914.080465][T25261] RAX: ffffffffffffffda RBX: 00007fa8e2225fa0 RCX: 00007fa8e1f9e0d9 [ 1914.088464][T25261] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 1914.096748][T25261] RBP: 00007fa8e2035024 R08: 0000000000000000 R09: 0000000000000000 [ 1914.104977][T25261] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1914.112989][T25261] R13: 00007fa8e2226038 R14: 00007fa8e2225fa0 R15: 00007fffff4f7548 [ 1914.121021][T25261] [ 1914.124073][T25261] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1914.131360][T25261] CPU: 1 UID: 0 PID: 25261 Comm: syz.2.5232 Tainted: G L syzkaller #0 PREEMPT(full) [ 1914.142296][T25261] Tainted: [L]=SOFTLOCKUP [ 1914.146605][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1914.156644][T25261] Call Trace: [ 1914.159914][T25261] [ 1914.162830][T25261] dump_stack_lvl+0x100/0x190 [ 1914.167512][T25261] vpanic+0x552/0x970 [ 1914.171489][T25261] ? __pfx_vpanic+0x10/0x10 [ 1914.175996][T25261] panic+0xd1/0xe0 [ 1914.179711][T25261] ? __pfx_panic+0x10/0x10 [ 1914.184127][T25261] check_panic_on_warn.cold+0x19/0x34 [ 1914.189488][T25261] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 1914.195197][T25261] __warn.cold+0x191/0x318 [ 1914.199606][T25261] __report_bug+0x30f/0x440 [ 1914.204098][T25261] ? netdev_queue_get_dma_dev+0x52e/0x660 [ 1914.209809][T25261] ? __pfx___report_bug+0x10/0x10 [ 1914.214833][T25261] ? find_held_lock+0x2b/0x80 [ 1914.219497][T25261] ? mark_held_locks+0x40/0x70 [ 1914.224258][T25261] report_bug_entry+0xe1/0x290 [ 1914.229028][T25261] ? netdev_queue_get_dma_dev+0x53a/0x660 [ 1914.234735][T25261] handle_bug+0x1cd/0x2a0 [ 1914.239064][T25261] exc_invalid_op+0x17/0x50 [ 1914.243560][T25261] asm_exc_invalid_op+0x1a/0x20 [ 1914.248398][T25261] RIP: 0010:netdev_queue_get_dma_dev+0x53a/0x660 [ 1914.254714][T25261] Code: 89 c5 89 c6 e8 f7 ef 68 f8 45 85 ed 0f 85 be fb ff ff e8 79 f5 68 f8 48 8d 3d 22 04 90 07 ba 48 00 00 00 48 c7 c6 e0 88 18 8d <67> 48 0f b9 3a e9 9c fb ff ff e8 57 f5 68 f8 48 8d bd 00 08 00 00 [ 1914.274344][T25261] RSP: 0018:ffffc900067efa80 EFLAGS: 00010283 [ 1914.280401][T25261] RAX: 00000000000002a2 RBX: ffff88802876a000 RCX: ffffc900055e9000 [ 1914.288360][T25261] RDX: 0000000000000048 RSI: ffffffff8d1888e0 RDI: ffffffff91317390 [ 1914.296325][T25261] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1914.304280][T25261] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1914.312236][T25261] R13: 0000000000000000 R14: ffff88802d6fe568 R15: ffffc900067efbe0 [ 1914.320217][T25261] io_register_zcrx+0xe94/0x1d30 [ 1914.325168][T25261] ? __pfx_io_register_zcrx+0x10/0x10 [ 1914.330531][T25261] ? __pfx___futex_wait+0x10/0x10 [ 1914.335558][T25261] ? lock_acquire+0x1b9/0x370 [ 1914.340233][T25261] ? rcu_is_watching+0x12/0xc0 [ 1914.344999][T25261] ? __do_sys_io_uring_register+0x135/0x1bc0 [ 1914.350997][T25261] ? __fget_files+0x215/0x3d0 [ 1914.355668][T25261] ? __fget_files+0x215/0x3d0 [ 1914.360349][T25261] __do_sys_io_uring_register+0x1193/0x1bc0 [ 1914.366243][T25261] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 1914.372484][T25261] ? __x64_sys_futex+0x34f/0x4d0 [ 1914.377418][T25261] ? __x64_sys_futex+0x358/0x4d0 [ 1914.382353][T25261] ? xfd_validate_state+0x129/0x190 [ 1914.387556][T25261] do_syscall_64+0x115/0x870 [ 1914.392138][T25261] ? clear_bhb_loop+0x40/0x90 [ 1914.396806][T25261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.402724][T25261] RIP: 0033:0x7fa8e1f9e0d9 [ 1914.407123][T25261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.426718][T25261] RSP: 002b:00007fa8e01f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1914.435121][T25261] RAX: ffffffffffffffda RBX: 00007fa8e2225fa0 RCX: 00007fa8e1f9e0d9 [ 1914.443078][T25261] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003 [ 1914.451034][T25261] RBP: 00007fa8e2035024 R08: 0000000000000000 R09: 0000000000000000 [ 1914.458996][T25261] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1914.466973][T25261] R13: 00007fa8e2226038 R14: 00007fa8e2225fa0 R15: 00007fffff4f7548 [ 1914.474946][T25261] [ 1914.478171][T25261] Kernel Offset: disabled [ 1914.482475][T25261] Rebooting in 86400 seconds..