last executing test programs: 14.838911795s ago: executing program 1 (id=454): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket(0x2b, 0x1, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) lseek(r1, 0x7, 0x4) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 14.832980211s ago: executing program 4 (id=455): getpid() socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x41}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x24e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x20, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xa, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) 14.830606745s ago: executing program 1 (id=457): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x54593, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f0000000500)) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'ip6gre0\x00'}}, 0x1e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000480)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400), 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000004c0)={0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {}], r9, 0x0, '\x00', 0x1e}) 14.801709014s ago: executing program 0 (id=459): r0 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x6, 0x2}) r1 = socket(0xa, 0x4, 0xff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000b40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000b80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000bc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000c00)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000d00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000d80)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000dc0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000e00)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000ec0)={0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000f00)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000f40)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000f80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000fc0)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r0, 0xc0186443, &(0x7f0000001200)={0x0, 0x1, {0x30, 0x8, &(0x7f0000001080)=[{0xf0000000, 0x0, 0x5, 0x3ff, 0x9, {0x10, 0x6, &(0x7f0000000540)=[{0x0, 0x0, 0x8000}, {0x80000001, 0x0, 0x8}, {0x1}, {0x1, 0x0, 0x3}, {0x1, 0x0, 0x4}, {0x80000000, 0x0, 0x7}]}}, {0x4, 0x0, 0xfffffffffffffffa, 0xfffffffffffffff6, 0xfffffffffffffffa, {0x10, 0x4, &(0x7f00000006c0)=[{0x80000000, 0x0, 0x5}, {0x0, 0x0, 0x6}, {0xff, 0x0, 0x80000000}, {0x80000000, r9, 0x4}]}}, {0x0, 0x0, 0x0, 0x250e550, 0x2, {0x10, 0x8, &(0x7f0000000880)=[{0x1, 0x0, 0x6}, {0x80000000, 0x0, 0x5}, {0x0, r8, 0x6}, {0x0, 0x0, 0x60c}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x7}, {0x1, 0x0, 0x7fffffffffffffff}, {0xff, 0x0, 0x6}]}}, {0x0, 0x0, 0x3, 0x1, 0x108, {0x10, 0x1, &(0x7f0000000980)=[{0x80000000, 0x0, 0x4}]}}, {0xf0000000, 0x0, 0x7, 0x4, 0x6, {0x10, 0x4, &(0x7f0000000b00)=[{0xff, 0x0, 0x7fffffff}, {0x0, 0x0, 0x8001}, {0x0, 0x0, 0x100}, {0x80000000, 0x0, 0xfffffffffffff81b}]}}, {0x0, 0x0, 0xc, 0x7, 0x9, {0x10, 0x5, &(0x7f0000000c40)=[{0x0, r2, 0x8}, {0x80000000, r3, 0xef9f}, {0x1, r4, 0x6}, {0x1, 0x0, 0x2}, {0x1, r5, 0x7}]}}, {0x20000000, r6, 0x8, 0x3990000000000000, 0x4, {0x10, 0x6, &(0x7f0000000e40)=[{0x0, r7, 0x8000000000000001}, {0x1, r8, 0xefe}, {0xff, 0x0, 0xfffffffffffffffc}, {0x80000000, r9, 0x2873}, {0xff, r10, 0x1}, {0x0, r11, 0x7fffffff}]}}, {0x20000000, r12, 0x8, 0xc00000000000, 0x4, {0x10, 0x6, &(0x7f0000001000)=[{0x1, r13, 0xa}, {0x0, 0x0, 0x10004}, {0x80000000, r14, 0xade6}, {0x80000000, r15, 0xffffffff}, {0x0, r16, 0x7}, {0x0, 0x0, 0x9}]}}]}}) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r17, 0x9, 0x30}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/softlockup_count', 0x402, 0x17) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, {&(0x7f0000000240)}, &(0x7f0000000280), 0x35}, 0xa0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c0100000000000000000000000000000000ff020000000000000000000000000001ff"], 0x0) r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}}) setsockopt$inet_mreqn(r18, 0x0, 0x23, &(0x7f0000000040)={@local, @local, r19}, 0xc) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10020, 0x0) 14.801431734s ago: executing program 1 (id=460): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44240, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000180)={0x4000, r3}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe21, 0x8001, @local}, 0x1c) r6 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r6, 0x800a6f2f, &(0x7f00000001c0)) syz_emit_ethernet(0x50, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa348100000086dd60d21b3d719181614cd3caac16202a206b910100001611fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300"/96], 0x0) 14.800828946s ago: executing program 2 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x1000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x86c}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x6c}}, 0x0) 14.800477596s ago: executing program 3 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000180)={0x9, @sliced={0x6, [0x3, 0x7, 0x7, 0x9, 0xe, 0x3a, 0xc, 0x6ca9, 0xd929, 0xdd, 0x3, 0x7, 0xfffa, 0x9, 0x0, 0x7, 0x0, 0x9, 0x6, 0x1, 0xff, 0xd, 0x0, 0x6a, 0x2, 0xe, 0xe8f, 0xa31, 0x0, 0x0, 0x9, 0x7, 0x2, 0x74b1, 0x5, 0x9, 0x3, 0x9, 0x6, 0x35a, 0x9, 0x9, 0x6, 0x6000, 0xfff5, 0x38, 0x7, 0xb5], 0x5}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004004) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="050000000001ff0000004400000008000300", @ANYRES32=r4, @ANYBLOB="1400238005001d00"], 0xc8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000840) 14.738073382s ago: executing program 4 (id=463): pipe(&(0x7f0000000000)={0xffffffffffffffff}) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) getegid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) fcntl$lock(r1, 0x5, &(0x7f0000000100)={0x1, 0x1, 0xd, 0x9c7, 0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r1, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/8, 0x8, 0x700, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x24020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x8, 0x2000, 0x10000001, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x401f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13.369551936s ago: executing program 1 (id=464): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105511, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005500e50226d270000100000007000000", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000140) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f00000000c0)='=\x00', 0x2) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x1, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xff}}, @NFQA_MARK={0x8}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4810) 13.030844196s ago: executing program 2 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f0000000100)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x701001, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x3) writev(r0, &(0x7f0000000140), 0x0) 12.940745516s ago: executing program 0 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060108001f0000000000000700000114000780080011400000008b050015001a0000000500010006000000050005000200000005000400020000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 12.939824446s ago: executing program 3 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') lseek(r1, 0x1, 0x1) write$input_event(r1, &(0x7f0000000240)={{0x0, 0x2710}, 0x2, 0x7, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xd}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c081}, 0x20004000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 12.826625927s ago: executing program 4 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@perf_event={0x4b}}, 0x18) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x7}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @rand_addr=0x64010102}, 0xc) (async) r3 = inotify_init() symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) inotify_add_watch(r3, &(0x7f0000000240)='./file1\x00', 0xa0000031) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x84000160) (async) getsockopt$inet_opts(r2, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000140)) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xa0002, 0x0) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) (async) r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r8, 0x1) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000200)=0x767) (async) flock(r7, 0x5) (async, rerun: 64) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30011, r6, 0x100000) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 12.700392074s ago: executing program 0 (id=469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000500)={0x0, &(0x7f00000002c0)=[@nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7}, @wr_drn={0x68, 0x20, {0x0, 0xef}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0x1000e3}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x98}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffffffffffc, 0x100010003, 0x10000, 0x8, 0x4, 0x7, 0x10, 0x1, 0x8000000000000000, 0x7, 0x0, 0x6, 0x5, 0x6], 0x0, 0x110900}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.63364604s ago: executing program 3 (id=470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079000c000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x89f0, 0x0) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0x40045613, &(0x7f0000000040)={0x1, 0x2}) 12.560731163s ago: executing program 2 (id=471): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x2000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 12.560167657s ago: executing program 4 (id=472): socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x40440, 0x0) socket$rds(0x15, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x200007}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x407) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f000000d780), 0x0, 0x400c044) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000bdb000/0x4000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) (async) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) (async) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x15}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) 12.314181467s ago: executing program 2 (id=473): getpid() socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x41}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x24e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x20, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xa, 0x367, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) 12.229678054s ago: executing program 0 (id=474): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[], 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x0, &(0x7f0000000040), 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x801) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x1) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="070104024d030000880000000900000014030000000100000000000000000000b3c80fd83c6c4295340d1ad0766931c5865db60d27df00f46148ed849fef28505662e6023818003245d069c42b621942626ee117"], 0x20) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11.483224027s ago: executing program 4 (id=475): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80ae", 0x72}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e14575562668985", 0x15}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039", 0x17}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x234800) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x4010, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) lseek(r6, 0x0, 0x3) memfd_create(0x0, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.197343344s ago: executing program 2 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x1000000000000, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x86c}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x6c}}, 0x0) 10.613975071s ago: executing program 3 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x27}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/2, 0x2, 0x1, &(0x7f0000000180)=""/218, 0xda}, &(0x7f00000002c0)=0x40) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000300)=""/45, &(0x7f0000000340)=0x2d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000400)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000440)={0x8, 0x0, 0x4, 0x4, 0xd2, {0x77359400}, {0x0, 0xc, 0x1, 0x0, 0x8, 0x80, "aa477895"}, 0x8, 0x4, {}, 0x2, 0x0, r6}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x280201, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r8, 0x3ba0, &(0x7f00000005c0)={0x48, 0x4, 0x0, 0x0, 0xae, &(0x7f0000000500)="472666e08d05b2a2e842933853714e6f72eb83497a38c0d4e6e81f496b1e963e63747a8a021421e4f652556d3c3085e4e8bbdcefd192b97eb3eaedcd4481cb62f181dccf702235cc00a027ef8601911acdc3fddbe1a7d8bff4304664c33ac1f5c538a113f2d7b526caf11903ce6f886194de8b3353d8a15fc28d5ecaf7e15e0a95444c98cd6b425619daf5d5076a3cf13e14b92c81097a71691b8f4db5dbea7691356e223c8c8a4bae6964dba755", 0x40}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r8, 0x80286722, &(0x7f0000001640)={&(0x7f0000000640)=""/4096, 0x1000, 0x8, 0x4d}) fsetxattr$security_evm(r2, &(0x7f0000001680), &(0x7f00000016c0)=@ng={0x4, 0x14, "ab59b4c2bfdf2d357005688450e245"}, 0x11, 0x45d512dfdb101365) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001700), 0x30200) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000001780)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r10, 0x3b80, &(0x7f0000001800)={0x8, r11}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001940), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r12, 0x3ba0, &(0x7f0000001a40)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0xab, &(0x7f0000001980)="23a679573d5ce5158e58281d1ddf854673d1b4b99403ef5686a997690aadcabaff26951a9a144085e786dd66f41c6f7b7529e12c7d6b4c2dde40ed1ed1803d072ce61050d32ef24dd870f2e22aba2ad3c5822a6922e8306f2a86c26bd3d2961ae4460bc7299ba8f776c09c5834c5e45839290fb8798978a5962424a97f06cf107e24edca2acc1eaf5769548ddcd3f62a58f46c7a41b1a0bcf126fca3cd474f841f4a0fc4f17ae066e3f142", 0x5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000001ac0)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000001b00)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r13}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_ublk_setup_io_uring(0x13d6, &(0x7f0000001c40)={0x0, 0x22e5, 0x1000, 0x1, 0x1f6}, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)) 10.172529585s ago: executing program 1 (id=478): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0xe0ff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x53c9}}], 0x30}], 0x1, 0x0) 10.091406522s ago: executing program 3 (id=479): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001ac0)={0x20, 0x39, 0x825, 0x70bd25, 0x25dfdbfa, {0xf}, [@nested={0xc, 0x7, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15e}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) 10.025107246s ago: executing program 0 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') lseek(r1, 0x1, 0x1) write$input_event(r1, &(0x7f0000000240)={{0x0, 0x2710}, 0x2, 0x7, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40202, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xd}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c081}, 0x20004000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 9.964599197s ago: executing program 1 (id=481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500080002000000040000", @ANYRES32, @ANYBLOB="0108000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000080080000001000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000040)) fcntl$lock(r4, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) sendmmsg$unix(r3, &(0x7f0000000b80)=[{{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a00)="24738da539ecedebc596b1b07cd2b93fa268fda2f6e6223fbde3031b2167c16609c015d9be3c88841cd523aad47e1a13d96ca97c07f55df4fbd7d35d10d869dd41de67cf4350c4c646f29c62ff918a4e0324160cfa34d309a4d9bbb696a75eb9db314218f112eb37c934dc339c45e48eca13776d72c7a3ba8ef037e11a0a909d0c5a451acfeb8d0b2683027a79c40cb8cfe7d926a6466e1d90ef9a57685524686ee54a7d1e3b59d44a84430d51f683d15486", 0xb2}, {&(0x7f0000000bc0)="5df089423e230853806a54f81cd855e6ffa9fdc03994e9ee723267dc96f932db33998799aad6925e170882815d0c1d813d9f1213c7f75f128300f7d2e00450f44def2ce9b285340a6a352a40848509328d41bfecfd3ee89f9d3542526fa0abe5308386605f0b162e406c23155fd1b68b24c1499380102cd867cea3137944fc077702f1cf3b3e50ae05f1aca0f0809a8b889d79e1ec555250ad2b8175598330761d25474c848e6aebbcf4596ead8553986bb33d1b12c55b6aff57e1997327501893377dff8b6ac7e3334750e206dd7a", 0xcf}], 0x2, 0x0, 0x0, 0x8004}}], 0x1, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_usb_connect(0x0, 0x202, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100152018b401e0407036e5d000000012c1cb58b01044f67572a1f5dfc9869420f0000030904"], 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r7, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$tcp_congestion(r7, &(0x7f0000000000)='hybla\x00', 0x6) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="7f000200000056783e594fb8c62d953fc6070000007b3995dcbcb26b2ec93a28379aa25f15bec3e63eb5793a9d8658d22bd4c1834b7de5c732d834109eb2cf9d391f85c6b35abc75125b57acacb043"], 0x0, 0x0, 0x0, 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) 9.815688835s ago: executing program 0 (id=482): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000000008000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) 9.445411069s ago: executing program 2 (id=483): r0 = socket$netlink(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x3, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x9e6be24a32f5548) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@hyper, 0x3}, @my=0x0, 0x1, 0x80000001, 0xa897, 0xffffffffffffffff, 0x9, 0x2000000, 0xfffffffc}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000006c0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="91400100400000001400030076657468300000000000000000000000400034801400350070696d3672656730000000000000000014003500636169663000000000000000000000001400350076657468305f746f5f74656100000000ddbc2b8af50447850e285ee22b44376257ecac7cd1c97578e6083aa7"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x41, 0x1}, &(0x7f0000000300)) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, &(0x7f0000000180)=0x200000000003ff, 0xc, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0a0f000000040005000800080000000000140007000000000000000010ebf52f1ad747b0000400050014001600fe8000000000000000aa"], 0x4c}}, 0x8880) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={0xffffffffffffffff, 0x0, 0x1000, 0x90, &(0x7f0000001740)="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", &(0x7f0000002740)=""/144, 0xfc, 0x0, 0xe5, 0xc9, &(0x7f0000002800)="019038c45aa0eed1abbfb24113fb43a07cdf2913aa6b8636dd7fc56eca6b58fd1862346a349d8fe70fc59ff2e762c1c79902ffc66357cfbdbb3bb970b7c30d52066a7fc1037c93a5475387f22308ec14fbf8ebf871977171468c6d7ab88f20e19600fa33df533790b31fd2aabd5054dba6d611a7e9c47a5916ff149bad5e110d2e5d18d58c7ba6526e97cf4f249680fabfe64572df74578c37cbf6f2ff20bfdc190965199e90101699c6c73e1b10d7baaeb4424bd0bd7272682cad79869a4cdded7dc3cfc10821741c10e91c47beda6b106609be8953233c95fa8e971fcb940468197fee24", &(0x7f0000002900)="b7fa24499a8a53f531e4d98c0c2d24dfd3cd376491639eca25e984fdcea000c7da0d99caab70fd7c4894e03b135bf744e5927189b87b5330e213fa589f42b788f128a5b3de9d4ba71333772a3fd96623bc8607e0694a8da398aa5bb26f0fdb649ef42a0e8af907e0b8c99fecb94a6207311cc9c3a1331bde49a5221335404fa9ee637914ced9c01295a0d2847dd6fd2426edc3e9099909c77f8ef5c97d0d6c26185881e608d4beb24bf315b6ffe90e84907b53110b65ddd9f5c8cb4205bdac8638db2a9ee172aedb0e", 0x2, 0x0, 0x8}, 0x50) r10 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f86935849e6098ed00004fe035bbb09587", 0x42}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4040840) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_io_uring_setup(0x29ce, &(0x7f0000000400)={0x0, 0x5961, 0x400, 0x3, 0x4c}, &(0x7f0000000780)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r3, 0x0, &(0x7f0000000980)="7a480247dd1c35957f1d041e52214796d723c3ef4f121a23a4938548d6aa59b822c8c2fb581e4dbc68f6d936e9157a8050f0f76ec7b94a56a6abebfa1719c4e9f829c6e4931d3a53a44b4b0184cd80dc027f21c0bc", 0xffffffffffffff7f, 0x12000, 0x1}) 8.414953834s ago: executing program 4 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000500)={0x0, &(0x7f00000002c0)=[@nested_vmresume={0x130, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7}, @wr_drn={0x68, 0x20, {0x0, 0xef}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3, 0x1000e3}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x98}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffffffffffc, 0x100010003, 0x10000, 0x8, 0x4, 0x7, 0x10, 0x1, 0x8000000000000000, 0x7, 0x0, 0x6, 0x5, 0x6], 0x0, 0x110900}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 3 (id=485): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf25120000037054890f24508eca02006ab3e0a73e49910416355f33f30500000068b68efd7c402b9fb9643e2e1f6e4511cec651bc25000000000000000000", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20048054) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newtaction={0x94, 0x30, 0x53b, 0x4, 0x0, {}, [{0x80, 0x1, [@m_simple={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4b, 0x3, '$R\x9c\x8a\x10-\f^~\x82D\x16\xbe\x05<.\xd7L\x9e\x87n\x1c+\xc9\x8b6\xa3\xfb\x06\x00\x00Uw\xb0\xe72\x1e^\xd6.\x8e\xd4\x83Y\x15s\x86to\a\xc2P\x0f\xaak\vM\x11\x9c\x89 \f\xea\xe9A\x92s\xdf\xdd\x8b\n'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x94}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0xfffffffc}}, 0x8}, 0x90) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x85}], 0x1c) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000740)={'erspan0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x1, 0x10, 0x3ff, 0x7, {{0x33, 0x4, 0x0, 0x3e, 0xcc, 0x67, 0x0, 0xf, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x0, 0x9, "74728efe0a108b"}, @lsrr={0x83, 0x13, 0x81, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local]}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x5, [{@broadcast, 0x7fff}, {@broadcast, 0x38}, {@loopback, 0x7}]}, @timestamp={0x44, 0x10, 0x4e, 0x0, 0x5, [0x7, 0x8, 0xfffff000]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0x16, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0x7, "f8a96fd58b"}, {0x7, 0x4, "a8f3"}, {0x2, 0x5, "802a0e"}]}, @noop, @timestamp={0x44, 0x28, 0xeb, 0x0, 0x0, [0x1, 0x9, 0x0, 0x100, 0xc6, 0x7, 0x6, 0x1, 0xfffffff9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xf8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040840}, 0x24008001) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r5, @ANYBLOB="01020000000008e001", @ANYRES32=r7], 0x1c}}, 0x4008054) r15 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r15, 0x6, 0x2c, &(0x7f0000000000), 0x4) write$nci(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="71050204030580057f0901408f6425"], 0x10f) close(r0) kernel console output (not intermixed with test programs): _slave_1 [ 71.898710][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.901536][ T5617] Bluetooth: hci3: command tx timeout [ 71.925310][ T5615] Bluetooth: hci0: command tx timeout [ 71.930733][ T5620] Bluetooth: hci2: command tx timeout [ 71.936267][ T5615] Bluetooth: hci4: command tx timeout [ 71.941848][ T5608] Bluetooth: hci1: command tx timeout [ 71.947933][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.970876][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.977838][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.003851][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.015897][ T5610] team0: Port device team_slave_0 added [ 72.022150][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.029118][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.055196][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.077280][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.084282][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.110521][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.122999][ T5610] team0: Port device team_slave_1 added [ 72.135845][ T5607] team0: Port device team_slave_0 added [ 72.159905][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.166940][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.192825][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.205031][ T5607] team0: Port device team_slave_1 added [ 72.235949][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.242970][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.268907][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.284928][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.291886][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.317800][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.355608][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.362593][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.388716][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.403075][ T5606] hsr_slave_0: entered promiscuous mode [ 72.409219][ T5606] hsr_slave_1: entered promiscuous mode [ 72.419370][ T5611] hsr_slave_0: entered promiscuous mode [ 72.425542][ T5611] hsr_slave_1: entered promiscuous mode [ 72.432111][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 72.437875][ T5611] Cannot create hsr debugfs directory [ 72.456092][ T5613] hsr_slave_0: entered promiscuous mode [ 72.462121][ T5613] hsr_slave_1: entered promiscuous mode [ 72.468023][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 72.474185][ T5613] Cannot create hsr debugfs directory [ 72.526436][ T5610] hsr_slave_0: entered promiscuous mode [ 72.532583][ T5610] hsr_slave_1: entered promiscuous mode [ 72.538663][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.544672][ T5610] Cannot create hsr debugfs directory [ 72.581313][ T5607] hsr_slave_0: entered promiscuous mode [ 72.587371][ T5607] hsr_slave_1: entered promiscuous mode [ 72.593408][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 72.599597][ T5607] Cannot create hsr debugfs directory [ 72.917307][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.927658][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.936040][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.946051][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.954485][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.964968][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.978376][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.987456][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.032734][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.042793][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.055221][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.064439][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.073956][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.083900][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.092282][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.103305][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.164882][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.175130][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.183606][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.192377][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.207707][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.216883][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.224993][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.233364][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.321299][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.329673][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.337747][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.347657][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.359462][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.368145][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.377114][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.386271][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.394930][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.472424][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.485800][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.495605][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.504224][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.512644][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.524580][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.532238][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.544335][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.553549][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.562188][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.572414][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.586786][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.598667][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.605794][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.617264][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.668030][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.682238][ T787] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.689305][ T787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.706191][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.724009][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.731088][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.753433][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.760530][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.770086][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.777175][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.882688][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.938435][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.959213][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.983030][ T5620] Bluetooth: hci3: command tx timeout [ 73.984798][ T5608] Bluetooth: hci2: command tx timeout [ 73.988637][ T5622] Bluetooth: hci4: command tx timeout [ 73.994620][ T5608] Bluetooth: hci0: command tx timeout [ 74.005956][ T5617] Bluetooth: hci1: command tx timeout [ 74.019622][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.026796][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.077672][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.086925][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.094228][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.126624][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.133774][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.160563][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.167717][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.254268][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.599536][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.739332][ T5606] veth0_vlan: entered promiscuous mode [ 74.784261][ T5606] veth1_vlan: entered promiscuous mode [ 74.831133][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.853616][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.897515][ T5606] veth0_macvtap: entered promiscuous mode [ 74.929300][ T5606] veth1_macvtap: entered promiscuous mode [ 75.026788][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.045151][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.056665][ T5611] veth0_vlan: entered promiscuous mode [ 75.064520][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.088412][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.110225][ T5613] veth0_vlan: entered promiscuous mode [ 75.124981][ T787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143502][ T787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.157931][ T787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.168029][ T787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.197857][ T5611] veth1_vlan: entered promiscuous mode [ 75.214345][ T5613] veth1_vlan: entered promiscuous mode [ 75.308786][ T5610] veth0_vlan: entered promiscuous mode [ 75.322732][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.337710][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.366529][ T5610] veth1_vlan: entered promiscuous mode [ 75.386033][ T5611] veth0_macvtap: entered promiscuous mode [ 75.395758][ T5613] veth0_macvtap: entered promiscuous mode [ 75.409569][ T5611] veth1_macvtap: entered promiscuous mode [ 75.418886][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.428904][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.443785][ T5613] veth1_macvtap: entered promiscuous mode [ 75.459352][ T29] audit: type=1400 audit(1783778024.083:152): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.fdt2rZ/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.473125][ T5610] veth0_macvtap: entered promiscuous mode [ 75.491033][ T29] audit: type=1400 audit(1783778024.083:153): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.517654][ T29] audit: type=1400 audit(1783778024.093:154): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.fdt2rZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.549628][ T29] audit: type=1400 audit(1783778024.093:155): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.553217][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.585322][ T29] audit: type=1400 audit(1783778024.093:156): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.fdt2rZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.597336][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.614977][ T29] audit: type=1400 audit(1783778024.093:157): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/root/syzkaller.fdt2rZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.647509][ T29] audit: type=1400 audit(1783778024.093:158): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.649741][ T5606] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.669752][ T29] audit: type=1400 audit(1783778024.123:159): avc: denied { mounton } for pid=5606 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.707283][ T29] audit: type=1400 audit(1783778024.123:160): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="gadgetfs" ino=7042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.735390][ T29] audit: type=1400 audit(1783778024.123:161): avc: denied { mount } for pid=5606 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.737911][ T5610] veth1_macvtap: entered promiscuous mode [ 75.765209][ T5607] veth0_vlan: entered promiscuous mode [ 75.773987][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.788563][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.815580][ T787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.825681][ T787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854459][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.861908][ T787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880186][ T5607] veth1_vlan: entered promiscuous mode [ 75.884993][ T787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885122][ T787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885152][ T787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885179][ T787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.885208][ T787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.905371][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.978766][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.978825][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.978865][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.978894][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.055446][ T5607] veth0_macvtap: entered promiscuous mode [ 76.070469][ T5608] Bluetooth: hci0: command tx timeout [ 76.070498][ T5608] Bluetooth: hci1: command tx timeout [ 76.070712][ T5608] Bluetooth: hci4: command tx timeout [ 76.070733][ T5608] Bluetooth: hci3: command tx timeout [ 76.070750][ T5608] Bluetooth: hci2: command tx timeout [ 76.074568][ T5607] veth1_macvtap: entered promiscuous mode [ 76.092814][ T787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.092844][ T787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.122069][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.157340][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.161547][ T787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.161566][ T787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.175753][ T787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.176666][ T787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.176712][ T787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.176743][ T787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.310153][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.320379][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.346571][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.358539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.456634][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.468363][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.593153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.601112][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.613712][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.635194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.677727][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.695070][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.744297][ T5811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.745021][ T5810] xfrm1: entered allmulticast mode [ 76.785025][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.823922][ T5811] IPv6: sit1: Disabled Multicast RS [ 76.845309][ T5811] sit1: entered allmulticast mode [ 76.893521][ T5813] fuse: Bad value for 'user_id' [ 76.928146][ T5813] fuse: Bad value for 'user_id' [ 77.252392][ T5820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=5820 comm=syz.0.1 [ 78.206111][ T5617] Bluetooth: hci2: command tx timeout [ 78.219196][ T5617] Bluetooth: hci3: command tx timeout [ 78.226833][ T5617] Bluetooth: hci4: command tx timeout [ 78.227306][ T5608] Bluetooth: hci1: command tx timeout [ 78.232579][ T5617] Bluetooth: hci0: command tx timeout [ 78.335463][ T5824] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 78.892111][ T5834] fuse: Bad value for 'user_id' [ 78.913152][ T5834] fuse: Bad value for 'user_id' [ 79.623570][ T5342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.944604][ T5342] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.986285][ T5342] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.018015][ T5342] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.064091][ T5342] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 80.100149][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 80.158303][ T5342] usb 1-1: Product: syz [ 80.172817][ T5342] usb 1-1: Manufacturer: syz [ 80.212655][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 80.241139][ T5342] usb 1-1: SerialNumber: syz [ 80.619488][ T5342] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 80.640616][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.676439][ T5342] usb 1-1: USB disconnect, device number 2 [ 80.689848][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 80.689860][ T29] audit: type=1400 audit(1783778029.313:222): avc: denied { watch watch_reads } for pid=5852 comm="syz.3.13" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 80.727602][ T5853] fuse: Unknown parameter 'group_id00000000000000000000¿pÁ0ˆ~ù”:' [ 80.746522][ T5342] usblp0: removed [ 80.841952][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.898240][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.036770][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.200571][ T5726] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 81.257119][ T29] audit: type=1400 audit(1783778029.353:223): avc: denied { mounton } for pid=5852 comm="syz.3.13" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.355386][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.468135][ T5726] usb 2-1: Product: syz [ 81.517076][ T5726] usb 2-1: Manufacturer: syz [ 81.559070][ T5726] usb 2-1: SerialNumber: syz [ 81.976691][ T5726] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 82.067876][ T29] audit: type=1400 audit(1783778030.693:224): avc: denied { read write } for pid=5858 comm="syz.4.14" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.137230][ T5861] fuse: Unknown parameter 'group_i00000000000000000000¿pÁ0ˆ~ù”:' [ 82.137884][ T29] audit: type=1400 audit(1783778030.723:225): avc: denied { open } for pid=5858 comm="syz.4.14" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.326823][ T29] audit: type=1400 audit(1783778030.753:226): avc: denied { unlink } for pid=5858 comm="syz.4.14" name="#1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.583810][ T29] audit: type=1400 audit(1783778030.763:227): avc: denied { mount } for pid=5858 comm="syz.4.14" name="/" dev="overlay" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.778241][ T29] audit: type=1400 audit(1783778030.833:228): avc: denied { watch } for pid=5858 comm="syz.4.14" path="/2/bus/file1" dev="overlay" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.206751][ T29] audit: type=1400 audit(1783778030.833:229): avc: denied { watch_sb watch_reads } for pid=5858 comm="syz.4.14" path="/2/bus/file1" dev="overlay" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.370974][ T29] audit: type=1400 audit(1783778030.843:230): avc: denied { setopt } for pid=5848 comm="syz.1.12" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.474995][ T5342] usb 2-1: USB disconnect, device number 2 [ 83.512125][ T29] audit: type=1400 audit(1783778031.003:231): avc: denied { create } for pid=5848 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.670219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 84.182259][ T5881] fuse: Bad value for 'fd' [ 85.224545][ T5712] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.412374][ T5890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=5890 comm=syz.3.23 [ 85.412370][ T5712] usb 1-1: Using ep0 maxpacket: 8 [ 85.555487][ T5892] netlink: 'syz.3.25': attribute type 26 has an invalid length. [ 85.588138][ T5892] netlink: 'syz.3.25': attribute type 3 has an invalid length. [ 85.790658][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 85.790712][ T29] audit: type=1326 audit(1783778034.413:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 85.917260][ T29] audit: type=1326 audit(1783778034.453:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 86.406688][ T29] audit: type=1326 audit(1783778034.493:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 86.604729][ T29] audit: type=1326 audit(1783778034.493:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 86.702847][ T187] cfg80211: failed to load regulatory.db [ 86.753285][ T29] audit: type=1326 audit(1783778034.493:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 86.943639][ T5906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.051394][ T29] audit: type=1326 audit(1783778034.573:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 87.402961][ T29] audit: type=1326 audit(1783778034.573:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 87.772521][ T29] audit: type=1326 audit(1783778034.573:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 87.996784][ T29] audit: type=1326 audit(1783778034.573:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5885 comm="syz.0.21" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 88.156001][ T5907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.780246][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 88.800185][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 88.879321][ T5712] usb 1-1: can't read configurations, error -71 [ 88.989258][ T5920] evm: overlay not supported [ 89.345621][ T5933] netlink: 798 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.758137][ T5932] overlay: ./file0 is not a directory [ 90.480847][ T5342] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.651581][ T5342] usb 4-1: Using ep0 maxpacket: 32 [ 90.877628][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 90.877643][ T29] audit: type=1400 audit(1783778039.503:342): avc: denied { create } for pid=5948 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.882831][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.915914][ T29] audit: type=1400 audit(1783778039.543:343): avc: denied { read } for pid=5948 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.988285][ T29] audit: type=1400 audit(1783778039.583:344): avc: denied { bind } for pid=5951 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.092531][ T29] audit: type=1400 audit(1783778039.593:345): avc: denied { write } for pid=5951 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.112706][ T29] audit: type=1400 audit(1783778039.593:346): avc: denied { mount } for pid=5948 comm="syz.4.41" name="/" dev="ramfs" ino=10403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 91.150591][ T5342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.175652][ T29] audit: type=1804 audit(1783778039.603:347): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.41" name="bus" dev="ramfs" ino=10404 res=1 errno=0 [ 92.148446][ T29] audit: type=1400 audit(1783778039.603:348): avc: denied { write } for pid=5948 comm="syz.4.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.167771][ T29] audit: type=1400 audit(1783778039.883:349): avc: denied { read } for pid=5951 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 92.202537][ T5342] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 92.212340][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.225065][ T5342] usb 4-1: Product: syz [ 92.232139][ T5342] usb 4-1: Manufacturer: syz [ 92.239579][ T5342] usb 4-1: SerialNumber: syz [ 92.256431][ T5342] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 92.455298][ T29] audit: type=1400 audit(1783778041.083:350): avc: denied { create } for pid=5941 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.512703][ T5342] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 92.544409][ T29] audit: type=1400 audit(1783778041.083:351): avc: denied { connect } for pid=5941 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.576226][ T5342] usb 4-1: USB disconnect, device number 2 [ 92.692374][ T5969] Zero length message leads to an empty skb [ 93.715800][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.871131][ T5712] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 93.900088][ T5983] vxfs: unable to read disk superblock at 1 [ 93.907060][ T5983] vxfs: unable to read disk superblock at 8 [ 93.913166][ T5983] vxfs: can't find superblock. [ 93.923593][ T5982] ip6gre1: entered allmulticast mode [ 94.071085][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.519020][ T5712] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 94.548544][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.579722][ T5712] usb 2-1: config 0 descriptor?? [ 95.170564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #150!!! [ 95.552103][ T5712] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 95.560369][ T5712] hackrf 2-1:0.0: Could not detect board [ 95.572227][ T5712] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 95.722433][ T5712] usb 2-1: USB disconnect, device number 3 [ 96.727298][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 96.727313][ T29] audit: type=1400 audit(1783778045.353:365): avc: denied { execute } for pid=5988 comm="syz.4.51" name="file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.755742][ T5990] process 'syz.4.51' launched './file0' with NULL argv: empty string added [ 96.818894][ T29] audit: type=1400 audit(1783778045.433:366): avc: denied { execute_no_trans } for pid=5988 comm="syz.4.51" path="/10/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.975877][ T6008] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 97.090634][ T5739] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.375546][ T29] audit: type=1400 audit(1783778045.983:367): avc: denied { watch_sb watch_reads } for pid=6009 comm="syz.0.60" path="/11/bus/file1" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.796297][ T5739] usb 4-1: config 0 has an invalid interface descriptor of length 8, skipping [ 97.816918][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.831101][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.917841][ T5739] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.959170][ T6019] fuse: Invalid rootmode [ 97.964430][ T5739] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 97.989904][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.123698][ T5739] usb 4-1: config 0 descriptor?? [ 98.474990][ T29] audit: type=1400 audit(1783778047.103:368): avc: denied { connect } for pid=6004 comm="syz.3.59" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.577779][ T29] audit: type=1400 audit(1783778047.153:369): avc: denied { write } for pid=6004 comm="syz.3.59" laddr=fe80::3497:7aff:feb5:83ed lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.622948][ T5342] usb 4-1: USB disconnect, device number 3 [ 99.098569][ T6028] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 99.150353][ T6028] netlink: 'syz.4.65': attribute type 10 has an invalid length. [ 99.190919][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.65'. [ 99.217724][ T29] audit: type=1400 audit(1783778047.843:370): avc: denied { create } for pid=6029 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 99.222835][ T6030] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 99.254620][ T6028] dummy0: entered promiscuous mode [ 99.363190][ T29] audit: type=1400 audit(1783778047.993:371): avc: denied { connect } for pid=6029 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.363246][ T29] audit: type=1400 audit(1783778047.993:372): avc: denied { write } for pid=6029 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.229684][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 100.260033][ T6040] bridge0: port 3(batadv1) entered blocking state [ 100.260121][ T6040] bridge0: port 3(batadv1) entered disabled state [ 100.260227][ T6040] batadv1: entered allmulticast mode [ 100.264720][ T6040] batadv1: entered promiscuous mode [ 100.463135][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.560609][ T5342] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.711365][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 100.808321][ T5342] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 101.031011][ T56] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 101.032597][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.040498][ T56] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 101.061067][ T29] audit: type=1400 audit(1783778049.553:373): avc: denied { create } for pid=6047 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.130067][ T5342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.146011][ T5342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.155143][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.163313][ T5342] usb 4-1: Product: syz [ 101.167503][ T5342] usb 4-1: Manufacturer: syz [ 101.172160][ T5342] usb 4-1: SerialNumber: syz [ 101.196255][ T6053] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 101.415932][ T5342] usb 4-1: 0:2 : does not exist [ 101.649770][ T29] audit: type=1400 audit(1783778049.563:374): avc: denied { setopt } for pid=6047 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.780158][ T5342] usb 4-1: USB disconnect, device number 4 [ 101.883625][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.120633][ T5705] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.168530][ T6071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 102.177538][ T6071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.185658][ T6071] IPv6: NLM_F_CREATE should be set when creating new route [ 102.201399][ T6071] syz.3.80 uses obsolete (PF_INET,SOCK_PACKET) [ 102.207936][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 102.207949][ T29] audit: type=1400 audit(1783778050.833:379): avc: denied { create } for pid=6070 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.234530][ T29] audit: type=1400 audit(1783778050.863:380): avc: denied { ioctl } for pid=6070 comm="syz.3.80" path="socket:[11540]" dev="sockfs" ino=11540 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.262484][ T29] audit: type=1400 audit(1783778050.893:381): avc: denied { write } for pid=6070 comm="syz.3.80" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 102.270624][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 102.290684][ T187] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.292257][ T5705] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.318600][ T5705] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.329826][ T5705] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.341386][ T5705] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.354629][ T5705] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.363782][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.500606][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 102.517828][ T187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.552591][ T187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.566215][ T187] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 102.584409][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.587716][ T5705] usb 1-1: GET_CAPABILITIES returned 0 [ 102.592832][ T187] usb 3-1: Product: syz [ 102.604423][ T187] usb 3-1: Manufacturer: syz [ 102.620082][ T5705] usbtmc 1-1:16.0: can't read capabilities [ 102.622912][ T187] usb 3-1: SerialNumber: syz [ 102.658454][ T6080] netlink: 'syz.3.82': attribute type 4 has an invalid length. [ 102.666893][ T187] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 102.905330][ T187] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 103.108183][ T187] usb 3-1: USB disconnect, device number 2 [ 103.784001][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.834554][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.880198][ T6093] sctp: [Deprecated]: syz.1.87 (pid 6093) Use of int in max_burst socket option deprecated. [ 103.880198][ T6093] Use struct sctp_assoc_value instead [ 103.915066][ T29] audit: type=1400 audit(1783778052.493:382): avc: denied { getopt } for pid=6090 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.940750][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.951442][ T6094] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.038967][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.074666][ T29] audit: type=1400 audit(1783778052.493:383): avc: denied { mount } for pid=6090 comm="syz.4.88" name="/" dev="autofs" ino=10736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.248685][ T29] audit: type=1400 audit(1783778052.493:384): avc: denied { ioctl } for pid=6090 comm="syz.4.88" path="socket:[10737]" dev="sockfs" ino=10737 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.415013][ T29] audit: type=1400 audit(1783778052.493:385): avc: denied { ioctl } for pid=6090 comm="syz.4.88" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 104.576541][ T6103] bridge1: entered promiscuous mode [ 104.612390][ T29] audit: type=1400 audit(1783778052.683:386): avc: denied { listen } for pid=6092 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.632788][ T6103] bridge1: entered allmulticast mode [ 104.764488][ T29] audit: type=1400 audit(1783778052.803:387): avc: denied { write } for pid=6061 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 105.500696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.679351][ T6116] fuse: Bad value for 'rootmode' [ 105.746848][ T29] audit: type=1400 audit(1783778053.433:388): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 106.564014][ T5726] usb 1-1: USB disconnect, device number 5 [ 106.830144][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.95'. [ 106.900600][ T5712] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.070612][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 107.082345][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.093697][ T6147] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 107.113057][ T5712] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.131602][ T5712] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 107.149109][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.160724][ T5726] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.172061][ T187] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.178418][ T5712] usb 5-1: Product: syz [ 107.184020][ T5712] usb 5-1: Manufacturer: syz [ 107.188715][ T5712] usb 5-1: SerialNumber: syz [ 107.203366][ T5712] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 107.258044][ T5712] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.305887][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.322868][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 107.335948][ T5726] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 107.348879][ T5726] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 107.359836][ T5726] usb 1-1: config 2 has no interface number 0 [ 107.363495][ T187] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 107.366262][ T5726] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 107.385402][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.388499][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.402392][ T5342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.410799][ T187] usb 2-1: Product: syz [ 107.416441][ T187] usb 2-1: Manufacturer: syz [ 107.424192][ T187] usb 2-1: SerialNumber: syz [ 107.451489][ T187] usb 2-1: config 0 descriptor?? [ 107.493255][ T5705] usb 5-1: USB disconnect, device number 2 [ 107.558057][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 107.558073][ T29] audit: type=1400 audit(1783778056.183:395): avc: denied { map } for pid=6157 comm="syz.2.104" path="socket:[11758]" dev="sockfs" ino=11758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 107.599680][ T5342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.614642][ T5342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.628312][ T5342] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 107.647367][ T5726] usb 1-1: string descriptor 0 read error: -71 [ 107.660792][ T5342] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.685727][ T5342] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 107.685745][ T5726] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.695263][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.713126][ T5342] usb 4-1: Product: syz [ 107.718106][ T5342] usb 4-1: Manufacturer: syz [ 107.724104][ T5342] usb 4-1: SerialNumber: syz [ 107.809951][ T5726] snd-usb-audio 1-1:2.194: probe with driver snd-usb-audio failed with error -2 [ 107.831835][ T5726] usb 1-1: USB disconnect, device number 6 [ 107.940745][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.950400][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.960894][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.974328][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.985447][ T6163] fuse: Bad value for 'fd' [ 107.990978][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.002328][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.016528][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.027448][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.049021][ T29] audit: type=1400 audit(1783778056.673:396): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.056199][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.103266][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.136809][ T29] audit: type=1400 audit(1783778056.673:397): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.168070][ T29] audit: type=1400 audit(1783778056.673:398): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.203532][ T6167] overlayfs: failed to clone upperpath [ 108.282801][ T6169] fuse: Bad value for 'fd' [ 108.384523][ T29] audit: type=1400 audit(1783778057.013:399): avc: denied { bind } for pid=6173 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.408800][ T29] audit: type=1400 audit(1783778057.013:400): avc: denied { name_bind } for pid=6173 comm="syz.2.110" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.723781][ T29] audit: type=1400 audit(1783778057.013:401): avc: denied { node_bind } for pid=6173 comm="syz.2.110" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 108.739084][ T6134] input: syz0 as /devices/virtual/input/input5 [ 108.754329][ T29] audit: type=1400 audit(1783778057.033:402): avc: denied { name_connect } for pid=6173 comm="syz.2.110" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.809437][ T187] usb 2-1: Firmware version (0.0) predates our first public release. [ 108.833288][ T187] usb 2-1: Please update to version 0.2 or newer [ 108.939677][ T187] usb 2-1: USB disconnect, device number 4 [ 108.945744][ T29] audit: type=1400 audit(1783778057.573:403): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.010034][ T29] audit: type=1400 audit(1783778057.573:404): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.331879][ T6197] netlink: 'syz.4.118': attribute type 4 has an invalid length. [ 110.420606][ T187] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.573856][ T5342] usb 4-1: USB disconnect, device number 5 [ 110.628024][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.580773][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 111.900974][ T187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.923353][ T6210] fuse: Unknown parameter 'use00000000000000000000' [ 111.955450][ T187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.116534][ T187] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 112.484748][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.493976][ T187] usb 1-1: Product: syz [ 112.497296][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.498171][ T187] usb 1-1: Manufacturer: syz [ 112.511889][ T187] usb 1-1: SerialNumber: syz [ 112.522783][ T187] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 112.667406][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 112.667421][ T29] audit: type=1400 audit(1783778061.293:412): avc: denied { write } for pid=6212 comm="syz.3.121" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.696942][ T187] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.728443][ T187] usb 1-1: USB disconnect, device number 7 [ 112.741656][ T6221] overlayfs: failed to clone upperpath [ 112.803910][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.500695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.822705][ T6232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.086426][ T29] audit: type=1400 audit(1783778062.713:413): avc: denied { read write } for pid=6235 comm="syz.0.127" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.150625][ T5705] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.154802][ T29] audit: type=1400 audit(1783778062.733:414): avc: denied { open } for pid=6235 comm="syz.0.127" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 114.230897][ T29] audit: type=1400 audit(1783778062.743:415): avc: denied { bind } for pid=6235 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.521478][ T6296] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 114.799720][ T6303] /dev/nullb0: Can't open blockdev [ 115.174977][ T29] audit: type=1400 audit(1783778063.803:416): avc: denied { bind } for pid=6314 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.221791][ T29] audit: type=1400 audit(1783778063.803:417): avc: denied { nlmsg_read } for pid=6316 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.245299][ T29] audit: type=1400 audit(1783778063.803:418): avc: denied { connect } for pid=6314 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.265078][ T6319] syzkaller0: entered promiscuous mode [ 115.265098][ T6319] syzkaller0: entered allmulticast mode [ 115.279059][ T6319] tipc: Started in network mode [ 115.284498][ T6319] tipc: Node identity , cluster identity 4711 [ 115.298589][ T29] audit: type=1400 audit(1783778063.803:419): avc: denied { block_suspend } for pid=6316 comm="syz.2.130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.306112][ T6319] tipc: Failed to obtain node identity [ 115.322073][ T29] audit: type=1400 audit(1783778063.813:420): avc: denied { mounton } for pid=6314 comm="syz.4.131" path="/proc/83/cgroup" dev="proc" ino=11914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 115.352960][ T29] audit: type=1400 audit(1783778063.853:421): avc: denied { create } for pid=6318 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 115.359250][ T6319] tipc: Enabling of bearer rejected, failed to enable media [ 115.630627][ T5705] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.655616][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 115.735127][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 115.798226][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 115.807546][ T5704] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 115.815096][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 115.833760][ T5705] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 115.850685][ T5705] usb 5-1: config 0 has no interface number 0 [ 115.858230][ T5705] usb 5-1: config 0 interface 12 has no altsetting 0 [ 115.873121][ T5705] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 115.882688][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.890805][ T5705] usb 5-1: Product: syz [ 115.895142][ T5705] usb 5-1: Manufacturer: syz [ 115.899780][ T5705] usb 5-1: SerialNumber: syz [ 115.908120][ T5705] usb 5-1: config 0 descriptor?? [ 115.956417][ T6345] overlayfs: failed to resolve './file1': -2 [ 116.072623][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 116.086299][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.098209][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.110683][ T5704] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 116.120153][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.178658][ T5704] usb 1-1: Product: syz [ 116.186277][ T5704] usb 1-1: Manufacturer: syz [ 116.193938][ T5704] usb 1-1: SerialNumber: syz [ 116.216597][ T5704] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 116.281101][ T5704] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.326855][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.749851][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3350 sclass=netlink_route_socket pid=6358 comm=syz.3.144 [ 116.805856][ T5740] usb 1-1: USB disconnect, device number 8 [ 117.601289][ T6367] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5611] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[6367] [ 117.830370][ T5705] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 117.838744][ T5705] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 117.846083][ T5705] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 117.853732][ T5705] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 117.869729][ T6372] overlayfs: missing 'lowerdir' [ 117.884348][ T5705] usb 5-1: USB disconnect, device number 3 [ 117.929406][ T6372] netlink: 'syz.1.148': attribute type 8 has an invalid length. [ 117.950489][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 117.950505][ T29] audit: type=1400 audit(1783778066.573:425): avc: denied { create } for pid=6366 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 118.033375][ T29] audit: type=1400 audit(1783778066.603:426): avc: denied { mount } for pid=6366 comm="syz.2.149" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 118.108790][ T29] audit: type=1400 audit(1783778066.643:427): avc: denied { read write } for pid=6371 comm="syz.1.148" name="usbmon4" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.137163][ T29] audit: type=1400 audit(1783778066.643:428): avc: denied { ioctl open } for pid=6371 comm="syz.1.148" path="/dev/usbmon4" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.166821][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 118.278858][ T6387] input: syz0 as /devices/virtual/input/input6 [ 118.502917][ T29] audit: type=1400 audit(1783778067.133:429): avc: denied { read write } for pid=6393 comm="syz.4.154" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.940829][ T29] audit: type=1400 audit(1783778067.133:430): avc: denied { open } for pid=6393 comm="syz.4.154" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 118.940875][ T29] audit: type=1400 audit(1783778067.313:431): avc: denied { create } for pid=6393 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.940907][ T29] audit: type=1400 audit(1783778067.323:432): avc: denied { setopt } for pid=6393 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.928563][ T6410] netlink: 256 bytes leftover after parsing attributes in process `syz.4.158'. [ 119.970700][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 119.987897][ T6412] overlayfs: failed to resolve './file1': -2 [ 120.094305][ T6410] netlink: 256 bytes leftover after parsing attributes in process `syz.4.158'. [ 120.111351][ T6410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 120.710966][ T29] audit: type=1400 audit(1783778069.343:433): avc: denied { map } for pid=6422 comm="syz.2.162" path="socket:[11240]" dev="sockfs" ino=11240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.787267][ T29] audit: type=1400 audit(1783778069.363:434): avc: denied { accept } for pid=6422 comm="syz.2.162" path="socket:[11240]" dev="sockfs" ino=11240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 121.284236][ T6436] fuse: Unknown parameter 'use00000000000000000000' [ 121.500691][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.516791][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 122.324214][ T6442] Illegal XDP return value 4294967294 on prog (id 22) dev syz_tun, expect packet loss! [ 123.330886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.418339][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 123.418354][ T29] audit: type=1400 audit(1783778071.193:436): avc: denied { read } for pid=6445 comm="syz.0.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.006421][ T6468] overlayfs: failed to resolve './file1': -2 [ 124.282038][ T29] audit: type=1400 audit(1783778072.913:437): avc: denied { create } for pid=6471 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.365359][ T29] audit: type=1400 audit(1783778074.993:438): avc: denied { ioctl } for pid=6494 comm="syz.0.183" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.486824][ T6500] netlink: 25 bytes leftover after parsing attributes in process `syz.3.186'. [ 126.515742][ T29] audit: type=1400 audit(1783778074.993:439): avc: denied { set_context_mgr } for pid=6494 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 126.535826][ T29] audit: type=1400 audit(1783778075.053:440): avc: denied { append } for pid=6498 comm="syz.3.186" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.553991][ T6499] netlink: 'syz.3.186': attribute type 4 has an invalid length. [ 126.562447][ T29] audit: type=1400 audit(1783778075.153:441): avc: denied { open } for pid=6496 comm="syz.1.184" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 126.632977][ T6502] binder: BINDER_SET_CONTEXT_MGR already set [ 126.639524][ T6502] binder: 6494:6502 ioctl 4018620d 2000000002c0 returned -16 [ 126.656016][ T29] audit: type=1400 audit(1783778075.263:442): avc: denied { map } for pid=6494 comm="syz.0.183" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.875202][ T29] audit: type=1400 audit(1783778075.493:443): avc: denied { create } for pid=6510 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.918754][ T6512] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 127.044988][ T6502] binder: 6494:6502 ioctl c0306201 200000000300 returned -14 [ 127.104888][ T29] audit: type=1400 audit(1783778075.523:444): avc: denied { setopt } for pid=6510 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.757332][ T29] audit: type=1400 audit(1783778075.543:445): avc: denied { mounton } for pid=6510 comm="syz.1.187" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 127.889579][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 130.342378][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 130.351181][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 131.047030][ T6531] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 131.079151][ T6531] syzkaller0: entered promiscuous mode [ 131.093820][ T6531] syzkaller0: entered allmulticast mode [ 131.213620][ T6558] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 131.752268][ T787] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.812583][ T787] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.874239][ T787] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.909636][ T6560] netlink: 68 bytes leftover after parsing attributes in process `syz.2.200'. [ 131.946046][ T6295] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.451407][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.458639][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.256005][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 133.256018][ T29] audit: type=1400 audit(1783778081.883:454): avc: denied { read write } for pid=6581 comm="syz.3.205" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 133.382381][ T29] audit: type=1400 audit(1783778081.883:455): avc: denied { open } for pid=6581 comm="syz.3.205" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 133.480477][ T29] audit: type=1400 audit(1783778081.933:456): avc: denied { getopt } for pid=6581 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.543654][ T29] audit: type=1400 audit(1783778081.953:457): avc: denied { ioctl } for pid=6581 comm="syz.3.205" path="/dev/input/mouse0" dev="devtmpfs" ino=924 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 133.630985][ T29] audit: type=1400 audit(1783778082.063:458): avc: denied { write } for pid=6583 comm="syz.0.206" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 133.940613][ T5726] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 134.061895][ T6599] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.211'. [ 134.072736][ T6599] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.211'. [ 134.219497][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.252970][ T5726] usb 2-1: config 1 has an invalid interface number: 28 but max is 1 [ 135.278132][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.280564][ T6603] fuse: Unknown parameter 'user_id00000000000000000000' [ 135.299624][ T5726] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 135.340359][ T5726] usb 2-1: config 1 has no interface number 2 [ 135.356453][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.370676][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.383804][ T5726] usb 2-1: config 1 interface 28 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 135.399437][ T5726] usb 2-1: config 1 interface 28 has no altsetting 0 [ 135.521464][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 135.604320][ T6606] 9p: Bad value for 'wfdno' [ 136.131551][ T5726] usb 2-1: string descriptor 0 read error: -22 [ 136.140840][ T5726] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.150100][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.189030][ T5726] usb 2-1: selecting invalid altsetting 1 [ 136.839039][ T5726] cdc_ncm 2-1:1.0: bind() failure [ 136.859495][ T29] audit: type=1400 audit(1783778085.473:459): avc: denied { ioctl } for pid=6609 comm="syz.2.215" path="socket:[12824]" dev="sockfs" ino=12824 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.909841][ T5726] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 136.918026][ T5726] cdc_ncm 2-1:1.1: bind() failure [ 136.960363][ T5726] cdc_mbim 2-1:1.28: probe with driver cdc_mbim failed with error -71 [ 136.999864][ T5726] usb 2-1: USB disconnect, device number 5 [ 137.033189][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 137.330275][ T6631] netlink: 64 bytes leftover after parsing attributes in process `syz.2.218'. [ 138.111268][ T6647] syzkaller0: entered promiscuous mode [ 138.130711][ T6647] syzkaller0: entered allmulticast mode [ 139.159134][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 139.176090][ T6656] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 139.201317][ T29] audit: type=1400 audit(1783778087.823:460): avc: denied { ioctl } for pid=6655 comm="syz.4.226" path="net:[4026533004]" dev="nsfs" ino=4026533004 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 139.418300][ T6666] dummy0: entered allmulticast mode [ 139.873649][ T6666] dummy0: left allmulticast mode [ 140.020655][ T187] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.154918][ T6673] netlink: 'syz.2.232': attribute type 6 has an invalid length. [ 140.401809][ T6673] netlink: 'syz.2.232': attribute type 7 has an invalid length. [ 140.419294][ T6673] netlink: 'syz.2.232': attribute type 8 has an invalid length. [ 140.440461][ T6673] netlink: 'syz.2.232': attribute type 7 has an invalid length. [ 140.470919][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 140.483416][ T29] audit: type=1400 audit(1783778089.103:461): avc: denied { create } for pid=6677 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.486390][ T187] usb 1-1: config 0 has no interfaces? [ 140.572866][ T187] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 140.593882][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.628989][ T187] usb 1-1: config 0 descriptor?? [ 140.688707][ T29] audit: type=1400 audit(1783778089.313:462): avc: denied { create } for pid=6679 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 140.742869][ T29] audit: type=1400 audit(1783778089.313:463): avc: denied { ioctl } for pid=6679 comm="syz.4.234" path="socket:[12978]" dev="sockfs" ino=12978 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 141.302040][ T6661] netlink: 72 bytes leftover after parsing attributes in process `syz.0.228'. [ 141.353648][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.228'. [ 141.438867][ T6661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.228'. [ 141.611723][ T29] audit: type=1400 audit(1783778090.153:464): avc: denied { write } for pid=6660 comm="syz.0.228" path="socket:[13031]" dev="sockfs" ino=13031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.669554][ T5712] usb 1-1: USB disconnect, device number 9 [ 141.675739][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 141.812084][ T29] audit: type=1400 audit(1783778090.443:465): avc: denied { wake_alarm } for pid=6701 comm="syz.2.241" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 141.998565][ T29] audit: type=1400 audit(1783778090.623:466): avc: denied { execmod } for pid=6701 comm="syz.2.241" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 142.245304][ T29] audit: type=1400 audit(1783778090.623:467): avc: denied { execute } for pid=6701 comm="syz.2.241" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 144.303036][ T5704] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.656115][ T29] audit: type=1400 audit(1783778093.283:468): avc: denied { ioctl } for pid=6721 comm="syz.3.246" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.682389][ T6722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6722 comm=syz.3.246 [ 144.727861][ T6722] syzkaller0: entered promiscuous mode [ 144.737595][ T5704] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.748533][ T6722] syzkaller0: entered allmulticast mode [ 144.757325][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.779714][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.790301][ T5704] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.806528][ T5704] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.817989][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.826619][ T5704] usb 1-1: Product: syz [ 144.831137][ T5704] usb 1-1: Manufacturer: syz [ 144.876401][ T5704] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 145.062426][ T29] audit: type=1400 audit(1783778093.693:469): avc: denied { create } for pid=6734 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.103452][ T6736] capability: warning: `syz.3.250' uses 32-bit capabilities (legacy support in use) [ 145.117478][ T5704] usb 1-1: USB disconnect, device number 10 [ 145.251244][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 145.266831][ T29] audit: type=1400 audit(1783778093.893:470): avc: denied { write } for pid=6734 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.288130][ T29] audit: type=1400 audit(1783778093.893:471): avc: denied { read } for pid=6734 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.105907][ T6756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.255'. [ 147.242960][ T6761] fuse: Unknown parameter 'user_id00000000000000000000' [ 149.007797][ T29] audit: type=1400 audit(1783778097.603:472): avc: denied { lock } for pid=6772 comm="syz.4.261" path="socket:[13704]" dev="sockfs" ino=13704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 149.804556][ T5712] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.829029][ T29] audit: type=1400 audit(1783778097.733:473): avc: denied { ioctl } for pid=6772 comm="syz.4.261" path="socket:[13708]" dev="sockfs" ino=13708 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 150.020585][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 150.108080][ T29] audit: type=1326 audit(1783778098.733:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.144396][ T29] audit: type=1326 audit(1783778098.733:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.175786][ T29] audit: type=1326 audit(1783778098.733:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.219426][ T29] audit: type=1326 audit(1783778098.733:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.265287][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 150.322458][ T6790] capability: warning: `syz.4.263' uses deprecated v2 capabilities in a way that may be insecure [ 150.328743][ T29] audit: type=1326 audit(1783778098.733:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.368593][ T29] audit: type=1326 audit(1783778098.803:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 150.460256][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.265'. [ 150.462038][ T29] audit: type=1326 audit(1783778098.803:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 151.421983][ T29] audit: type=1326 audit(1783778098.803:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 151.490926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.504042][ T29] audit: type=1326 audit(1783778098.803:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.1.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 152.760961][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 152.841385][ T6812] netlink: 'syz.3.272': attribute type 12 has an invalid length. [ 152.901079][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 152.914585][ T5726] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 152.930232][ T5712] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 152.951667][ T5726] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 152.962821][ T5712] usb 2-1: can't read configurations, error -71 [ 153.014805][ T5726] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 153.218974][ T6821] macsec0: entered promiscuous mode [ 153.259525][ T6824] fido_id[6824]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.919327][ T6847] fuse: Bad value for 'fd' [ 154.141294][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.707654][ T6821] macsec0: left promiscuous mode [ 156.002064][ T5726] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.190608][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 156.992014][ T6861] comedi comedi1: reset error (fatal) [ 157.007778][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 157.007795][ T29] audit: type=1326 audit(1783778105.633:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.153482][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 157.208504][ T29] audit: type=1326 audit(1783778105.633:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.569718][ T29] audit: type=1326 audit(1783778105.633:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.650641][ T29] audit: type=1326 audit(1783778105.633:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.753088][ T29] audit: type=1326 audit(1783778105.683:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.852048][ T29] audit: type=1326 audit(1783778105.683:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.979148][ T6906] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 157.988901][ T29] audit: type=1326 audit(1783778105.683:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 157.991963][ T6906] overlayfs: missing 'lowerdir' [ 158.061639][ T29] audit: type=1326 audit(1783778105.683:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 158.121748][ T29] audit: type=1326 audit(1783778105.683:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 158.160959][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.189778][ T29] audit: type=1326 audit(1783778105.683:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.1.287" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1859de59 code=0x7ffc0000 [ 158.430886][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 158.537825][ T6916] netlink: 64 bytes leftover after parsing attributes in process `syz.4.297'. [ 159.029164][ T6929] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 159.526180][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.592705][ T5726] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 159.637352][ T5726] usb 2-1: can't read configurations, error -71 [ 159.980803][ T187] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.029493][ T6945] overlayfs: failed to clone upperpath [ 160.176913][ T187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.176959][ T187] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.176981][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.180398][ T187] usb 5-1: config 0 descriptor?? [ 160.193714][ T187] pwc: Askey VC010 type 2 USB webcam detected. [ 160.652170][ T5726] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 160.945247][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.972531][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.994873][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.008462][ T5726] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.019060][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.077217][ T5726] usb 2-1: config 0 descriptor?? [ 161.440040][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.465969][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.487073][ T24] usb 1-1: can't read configurations, error -71 [ 161.522880][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.550650][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.578699][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.606378][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.751473][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.758976][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.767080][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.774584][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.782329][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 161.789714][ T5726] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 162.774047][ T187] pwc: recv_control_msg error -71 req 02 val 2b00 [ 162.799237][ T187] pwc: recv_control_msg error -71 req 02 val 2700 [ 162.809544][ T187] pwc: recv_control_msg error -71 req 02 val 2c00 [ 162.822120][ T187] pwc: recv_control_msg error -71 req 04 val 1000 [ 163.117597][ T187] pwc: recv_control_msg error -71 req 04 val 1300 [ 163.125146][ T187] pwc: recv_control_msg error -71 req 04 val 1400 [ 163.139139][ T187] pwc: recv_control_msg error -71 req 02 val 2000 [ 163.146092][ T187] pwc: recv_control_msg error -71 req 02 val 2100 [ 163.153195][ T187] pwc: recv_control_msg error -71 req 04 val 1500 [ 163.160749][ T187] pwc: recv_control_msg error -71 req 02 val 2500 [ 163.169892][ T187] pwc: recv_control_msg error -71 req 02 val 2400 [ 163.180644][ T187] pwc: recv_control_msg error -71 req 02 val 2600 [ 163.182959][ T5726] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.201441][ T187] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.227081][ T187] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.256377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 163.311082][ T187] pwc: recv_control_msg error -71 req 04 val 1100 [ 163.317988][ T187] pwc: recv_control_msg error -71 req 04 val 1200 [ 163.341394][ T187] pwc: Registered as video103. [ 163.360586][ T187] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 163.461509][ T187] usb 5-1: USB disconnect, device number 4 [ 164.416114][ T29] kauditd_printk_skb: 849 callbacks suppressed [ 164.416129][ T29] audit: type=1400 audit(1783778113.043:1453): avc: denied { write } for pid=6975 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 164.468455][ T6983] syzkaller0: entered promiscuous mode [ 164.474097][ T6983] syzkaller0: entered allmulticast mode [ 164.700584][ T5726] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.156605][ T9] usb 2-1: USB disconnect, device number 9 [ 165.260694][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 165.488670][ T29] audit: type=1326 audit(1783778114.103:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 165.677878][ T29] audit: type=1326 audit(1783778114.103:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.043485][ T29] audit: type=1326 audit(1783778114.103:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.508635][ T29] audit: type=1326 audit(1783778114.103:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.612959][ T7005] bond2 (unregistering): Released all slaves [ 166.638563][ T29] audit: type=1326 audit(1783778114.103:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.670804][ T29] audit: type=1326 audit(1783778114.163:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.711527][ T29] audit: type=1326 audit(1783778114.163:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.759859][ T29] audit: type=1326 audit(1783778114.163:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 166.795487][ T29] audit: type=1326 audit(1783778114.163:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6984 comm="syz.4.314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 167.426923][ T7025] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 167.456549][ T7025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.342194][ T7036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.324'. [ 168.355774][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.364043][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.905330][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.999744][ T7049] gfs2: error -5 reading superblock [ 169.393036][ T5726] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 169.415968][ T5726] usb 5-1: can't read configurations, error -71 [ 169.900792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 170.407139][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.199874][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 171.344912][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.346887][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 171.400562][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.757277][ T24] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 171.774942][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.799311][ T24] usb 4-1: Product: syz [ 171.815932][ T24] usb 4-1: Manufacturer: syz [ 171.835518][ T24] usb 4-1: SerialNumber: syz [ 171.879870][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 172.014483][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 172.101733][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.217903][ T24] usb 4-1: USB disconnect, device number 7 [ 172.342047][ T7081] syzkaller0: entered promiscuous mode [ 172.357238][ T7081] syzkaller0: entered allmulticast mode [ 172.402993][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 172.403008][ T29] audit: type=1400 audit(1783778121.033:1674): avc: denied { bind } for pid=7080 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.474882][ T29] audit: type=1400 audit(1783778121.073:1675): avc: denied { listen } for pid=7080 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.526198][ T29] audit: type=1400 audit(1783778121.073:1676): avc: denied { connect } for pid=7080 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 172.608255][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 172.983383][ T7095] tipc: Started in network mode [ 173.019256][ T7095] tipc: Node identity 4, cluster identity 4711 [ 173.050453][ T7095] tipc: Node number set to 4 [ 173.171327][ T7084] mmap: syz.2.337 (7084) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.414147][ T29] audit: type=1400 audit(1783778122.043:1677): avc: denied { create } for pid=7083 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.440266][ T29] audit: type=1400 audit(1783778122.063:1678): avc: denied { write } for pid=7083 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.600645][ T5726] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.760618][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 173.890344][ T29] audit: type=1326 audit(1783778122.513:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 173.965459][ T29] audit: type=1326 audit(1783778122.553:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 174.033784][ T29] audit: type=1326 audit(1783778122.553:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 174.158814][ T29] audit: type=1326 audit(1783778122.553:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 174.760611][ T29] audit: type=1326 audit(1783778122.553:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423b99de59 code=0x7ffc0000 [ 177.129959][ T7140] FAULT_INJECTION: forcing a failure. [ 177.129959][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.161469][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.0.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.161498][ T7140] Tainted: [L]=SOFTLOCKUP [ 177.161505][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 177.161515][ T7140] Call Trace: [ 177.161521][ T7140] [ 177.161528][ T7140] dump_stack_lvl+0x100/0x190 [ 177.161554][ T7140] should_fail_ex.cold+0x5/0xa [ 177.161577][ T7140] _copy_from_user+0x2e/0xd0 [ 177.161598][ T7140] video_usercopy+0xe71/0x1730 [ 177.161619][ T7140] ? __pfx___video_do_ioctl+0x10/0x10 [ 177.161636][ T7140] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 177.161662][ T7140] ? __pfx_video_usercopy+0x10/0x10 [ 177.161694][ T7140] v4l2_ioctl+0x1bd/0x250 [ 177.161713][ T7140] ? __pfx_v4l2_ioctl+0x10/0x10 [ 177.161733][ T7140] __x64_sys_ioctl+0x18e/0x210 [ 177.161757][ T7140] do_syscall_64+0x115/0x870 [ 177.161781][ T7140] ? clear_bhb_loop+0x40/0x90 [ 177.161803][ T7140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.161819][ T7140] RIP: 0033:0x7f6b6ed9de59 [ 177.161836][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.161852][ T7140] RSP: 002b:00007f6b6fd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.161870][ T7140] RAX: ffffffffffffffda RBX: 00007f6b6f025fa0 RCX: 00007f6b6ed9de59 [ 177.161881][ T7140] RDX: 0000200000000140 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 177.161891][ T7140] RBP: 00007f6b6fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 177.161901][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.161917][ T7140] R13: 00007f6b6f026038 R14: 00007f6b6f025fa0 R15: 00007ffd118b9a28 [ 177.161941][ T7140] [ 177.565466][ T7149] tipc: Failed to remove unknown binding: 66,0,0/0:4188160906/4188160907 [ 177.630383][ T7150] fuse: Unknown parameter '0xffffffffffffffff' [ 177.645454][ T7149] tipc: Failed to remove unknown binding: 66,0,0/0:4188160906/4188160907 [ 177.679009][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 177.679023][ T29] audit: type=1326 audit(1783778126.303:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 177.838613][ T29] audit: type=1326 audit(1783778126.343:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 177.963658][ T29] audit: type=1326 audit(1783778126.343:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 177.994719][ T29] audit: type=1326 audit(1783778126.343:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 178.002821][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.206719][ T5726] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 178.214546][ T5726] usb 5-1: can't read configurations, error -71 [ 178.232599][ T29] audit: type=1326 audit(1783778126.343:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 178.337663][ T7163] gfs2: error -5 reading superblock [ 178.859827][ T29] audit: type=1326 audit(1783778126.353:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 179.013297][ T29] audit: type=1326 audit(1783778126.353:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.0.351" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b6ed9de59 code=0x7ffc0000 [ 179.095679][ T29] audit: type=1400 audit(1783778127.573:1823): avc: denied { create } for pid=7166 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.320577][ T29] audit: type=1400 audit(1783778127.573:1824): avc: denied { setopt } for pid=7166 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 180.610044][ T29] audit: type=1400 audit(1783778129.233:1825): avc: denied { setopt } for pid=7183 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 181.914393][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.093081][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 182.440625][ T5342] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.610607][ T5342] usb 4-1: Using ep0 maxpacket: 16 [ 182.633861][ T7216] Bluetooth: MGMT ver 1.23 [ 182.641497][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.679247][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.698928][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 182.698945][ T29] audit: type=1326 audit(1783778131.323:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 182.746305][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.768188][ T5342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.793519][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.809414][ T29] audit: type=1326 audit(1783778131.383:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 182.857584][ T5342] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.871117][ T5342] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.884639][ T5342] usb 4-1: Manufacturer: syz [ 182.890818][ T29] audit: type=1326 audit(1783778131.393:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 182.926476][ T5342] usb 4-1: config 0 descriptor?? [ 182.958223][ T29] audit: type=1326 audit(1783778131.393:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.014991][ T29] audit: type=1326 audit(1783778131.393:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.066570][ T29] audit: type=1326 audit(1783778131.403:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.121038][ T29] audit: type=1326 audit(1783778131.413:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.213330][ T29] audit: type=1326 audit(1783778131.413:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.292866][ T29] audit: type=1326 audit(1783778131.423:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.614230][ T29] audit: type=1326 audit(1783778131.443:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7188 comm="syz.0.366" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b6ed5e68e code=0x7ffc0000 [ 183.810597][ T5342] rc_core: IR keymap rc-hauppauge not found [ 183.817448][ T5342] Registered IR keymap rc-empty [ 183.836535][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 183.874990][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 183.930600][ T5342] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 183.993655][ T5342] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 184.049714][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.115773][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.133190][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 184.148979][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 184.160612][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.169199][ T9] usb 1-1: can't read configurations, error -71 [ 184.190660][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.212903][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.230632][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.555349][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.582978][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.610833][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.648317][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.703776][ T5342] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 184.785312][ T5342] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 184.823195][ T5342] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.875297][ T5342] usb 4-1: USB disconnect, device number 8 [ 185.521176][ T930] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 185.832355][ T930] usb 5-1: device descriptor read/64, error -71 [ 186.572845][ T930] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 188.211378][ T930] usb 5-1: device descriptor read/64, error -71 [ 188.352315][ T930] usb usb5-port1: attempt power cycle [ 188.561150][ T7295] fuse: fd is not a fuse device [ 188.661253][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 188.662490][ T29] audit: type=1400 audit(1783778137.293:2090): avc: denied { getopt } for pid=7297 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.881595][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.042846][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 189.148507][ T29] audit: type=1326 audit(1783778137.773:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 189.188216][ T29] audit: type=1326 audit(1783778137.803:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 189.215288][ T29] audit: type=1326 audit(1783778137.803:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 189.268725][ T7306] fuse: Unknown parameter '0x0000000000000004' [ 189.286273][ T29] audit: type=1326 audit(1783778137.803:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 189.354845][ T29] audit: type=1326 audit(1783778137.803:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 189.442125][ T29] audit: type=1326 audit(1783778137.873:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 190.025034][ T29] audit: type=1326 audit(1783778137.873:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 190.107340][ T29] audit: type=1326 audit(1783778137.873:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 190.180402][ T29] audit: type=1326 audit(1783778137.873:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.3.393" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42b99de59 code=0x7ffc0000 [ 190.486604][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.498447][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 190.513405][ T24] usb 4-1: can't read configurations, error -71 [ 192.115581][ T7284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.948023][ T7338] tipc: Started in network mode [ 192.952950][ T7338] tipc: Node identity 4, cluster identity 4711 [ 192.959129][ T7338] tipc: Node number set to 4 [ 193.916691][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.923064][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 193.923113][ T29] audit: type=1400 audit(1783778141.993:2248): avc: denied { map } for pid=7349 comm="syz.3.408" path="socket:[26735]" dev="sockfs" ino=26735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 193.924211][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.002131][ T29] audit: type=1400 audit(1783778141.993:2249): avc: denied { accept } for pid=7349 comm="syz.3.408" path="socket:[26735]" dev="sockfs" ino=26735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 194.362313][ T29] audit: type=1400 audit(1783778142.973:2250): avc: denied { accept } for pid=7367 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.051504][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 196.053238][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 196.057675][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 196.064884][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 196.681210][ T5342] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.707474][ T7401] xt_hashlimit: size too large, truncated to 1048576 [ 196.730057][ T7403] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 196.862726][ T5342] usb 1-1: Using ep0 maxpacket: 8 [ 196.896207][ T5342] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 196.910680][ T5342] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.935746][ T5342] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.973938][ T5342] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.997799][ T5342] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.023768][ T5342] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.042840][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.267141][ T5342] usb 1-1: GET_CAPABILITIES returned 0 [ 197.283032][ T5342] usbtmc 1-1:16.0: can't read capabilities [ 197.346222][ T29] audit: type=1400 audit(1783778145.973:2251): avc: denied { unmount } for pid=7414 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 197.472677][ T5342] usb 1-1: USB disconnect, device number 15 [ 197.481708][ T7393] usbtmc 1-1:16.0: stb usb_control_msg returned -19 [ 199.000531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 199.060531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 199.118027][ T7423] syz.3.428 (7423): drop_caches: 2 [ 199.240532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 201.273938][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7463 comm=syz.3.440 [ 203.116899][ T7478] netlink: 43 bytes leftover after parsing attributes in process `syz.3.445'. [ 203.185462][ T7481] fuse: Unknown parameter '000000000000377777777770x0000000000000004' [ 205.264239][ T29] audit: type=1400 audit(1783778153.893:2252): avc: denied { accept } for pid=7493 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.429933][ T7490] netlink: 'syz.3.449': attribute type 49 has an invalid length. [ 205.549258][ T7490] bond0: (slave bond_slave_0): Releasing backup interface [ 205.610684][ T5801] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 205.619364][ T7490] bond_slave_0: entered promiscuous mode [ 205.625246][ T7490] bond_slave_0: entered allmulticast mode [ 205.826516][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.872122][ T5801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.923465][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.996247][ T5801] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.045604][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.097680][ T5801] usb 1-1: config 0 descriptor?? [ 206.240388][ T29] audit: type=1400 audit(1783778154.853:2253): avc: denied { read } for pid=7508 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.456954][ T29] audit: type=1400 audit(1783778154.853:2254): avc: denied { read open } for pid=7508 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.496220][ T7519] netlink: 168 bytes leftover after parsing attributes in process `syz.1.454'. [ 206.539736][ T5801] hid_parser_main: 5 callbacks suppressed [ 206.539755][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.619282][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 206.646440][ T29] audit: type=1400 audit(1783778154.863:2255): avc: denied { getattr } for pid=7508 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.646483][ T29] audit: type=1400 audit(1783778154.993:2256): avc: denied { module_request } for pid=7510 comm="syz.1.454" kmod="net-pf-2-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 206.646517][ T29] audit: type=1400 audit(1783778155.053:2257): avc: denied { setopt } for pid=7510 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.659779][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.444820][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.460637][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.470550][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.481271][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.496815][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.511009][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.522801][ T5801] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 207.695285][ T5801] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 207.790101][ T5801] usb 1-1: USB disconnect, device number 16 [ 208.011417][ T29] audit: type=1400 audit(1783778156.643:2258): avc: denied { write } for pid=7507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.197890][ T29] audit: type=1400 audit(1783778156.643:2259): avc: denied { add_name } for pid=7507 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.309228][ T7548] netlink: 'syz.1.457': attribute type 4 has an invalid length. [ 208.538333][ T29] audit: type=1400 audit(1783778156.643:2260): avc: denied { create } for pid=7507 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.643905][ T29] audit: type=1400 audit(1783778156.643:2261): avc: denied { write } for pid=7507 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.link" dev="tmpfs" ino=3295 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 208.667909][ T7541] fido_id[7541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 218.309611][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 218.309628][ T29] audit: type=1400 audit(1783778166.933:2266): avc: denied { lock } for pid=7564 comm="syz.4.463" path="socket:[26145]" dev="sockfs" ino=26145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 218.348340][ T29] audit: type=1400 audit(1783778166.973:2267): avc: denied { write } for pid=7566 comm="syz.0.459" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.537540][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 218.695159][ T7575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.462'. [ 219.686460][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 220.264063][ T7583] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 220.267860][ T7587] fuse: Bad value for 'rootmode' [ 220.580751][ T5801] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.589380][ T29] audit: type=1400 audit(1783778169.203:2268): avc: denied { mmap_zero } for pid=7606 comm="syz.3.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 220.750054][ T29] audit: type=1400 audit(1783778169.353:2269): avc: denied { create } for pid=7611 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.890609][ T5801] usb 2-1: Using ep0 maxpacket: 16 [ 220.905043][ T5801] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.933666][ T5801] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 220.958611][ T5801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.981937][ T5801] usb 2-1: config 1 interface 1 has no altsetting 0 [ 220.999602][ T5801] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 221.016037][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.041148][ T5801] usb 2-1: Product: syz [ 221.052616][ T5801] usb 2-1: Manufacturer: syz [ 221.066074][ T5801] usb 2-1: SerialNumber: syz [ 221.081540][ T29] audit: type=1400 audit(1783778169.713:2270): avc: denied { write } for pid=7581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.325193][ T7580] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 221.441790][ T29] audit: type=1400 audit(1783778170.063:2271): avc: denied { write } for pid=7629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.469823][ T7580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.507572][ T7587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.464'. [ 221.626387][ T7631] bond1: (slave geneve2): making interface the new active one [ 221.701145][ T7631] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 221.757582][ T5801] usb 2-1: selecting invalid altsetting 0 [ 221.905225][ T5801] usb 2-1: USB disconnect, device number 10 [ 222.085787][ T29] audit: type=1400 audit(1783778170.703:2272): avc: denied { write } for pid=7636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.177115][ T7654] udevd[7654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.554856][ T29] audit: type=1400 audit(1783778170.853:2273): avc: denied { write } for pid=7656 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.132329][ T7666] tipc: Started in network mode [ 223.152929][ T7666] tipc: Node identity 815e0004, cluster identity 4711 [ 223.174745][ T7666] tipc: Node number set to 2170421252 [ 223.500630][ T5801] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 224.540703][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.738162][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 224.754027][ T5801] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 224.769551][ T5801] usb 2-1: can't read configurations, error -61 [ 230.110505][ C1] sched: DL replenish lagged too much [ 252.582441][ T5608] Bluetooth: hci4: command 0x0406 tx timeout [ 255.962227][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.302954][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.325925][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.551814][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.153289][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.530451][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 376.537415][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5801/1:b..l [ 376.545777][ C1] rcu: (detected by 1, t=10507 jiffies, g=24841, q=701 ncpus=2) [ 376.553487][ C1] task:kworker/1:7 state:R running task stack:22456 pid:5801 tgid:5801 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 376.568015][ C1] Workqueue: usb_hub_wq hub_event [ 376.573062][ C1] Call Trace: [ 376.576332][ C1] [ 376.579257][ C1] __schedule+0x125c/0x6730 [ 376.583778][ C1] ? __pfx___schedule+0x10/0x10 [ 376.588631][ C1] ? mark_held_locks+0x40/0x70 [ 376.593393][ C1] preempt_schedule_irq+0x50/0x90 [ 376.598416][ C1] irqentry_exit+0x205/0xa00 [ 376.603009][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.608985][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 376.614177][ C1] Code: 05 3b ef 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 ce 3c 0f 0f 82 ac 02 00 00 8b 35 4e 02 3d 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd ee 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 376.633803][ C1] RSP: 0018:ffffc90004cbf018 EFLAGS: 00000206 [ 376.639886][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 376.647880][ C1] RDX: 0000000000000000 RSI: ffffffff8e17d446 RDI: ffffffff8c400c80 [ 376.655845][ C1] RBP: ffffffff8ebe6100 R08: 00000000e799c150 R09: 0000000000000007 [ 376.663808][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 376.671768][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.679742][ C1] ? unwind_next_frame+0x3be/0x2090 [ 376.684936][ C1] ? unwind_next_frame+0x3be/0x2090 [ 376.690136][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.696294][ C1] unwind_next_frame+0xd1/0x2090 [ 376.701230][ C1] ? unwind_next_frame+0xbd/0x2090 [ 376.706340][ C1] ? __kmalloc_noprof+0x2bf/0x820 [ 376.711358][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.717516][ C1] arch_stack_walk+0x94/0xf0 [ 376.722110][ C1] ? __kmalloc_noprof+0x2bf/0x820 [ 376.727134][ C1] stack_trace_save+0x8e/0xc0 [ 376.731809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 376.737183][ C1] ? __lock_acquire+0x49f/0x1a40 [ 376.742136][ C1] ? __lock_acquire+0x49f/0x1a40 [ 376.747066][ C1] save_stack+0x162/0x1e0 [ 376.751390][ C1] ? __pfx_save_stack+0x10/0x10 [ 376.756252][ C1] ? __free_frozen_pages+0x79f/0x1090 [ 376.761621][ C1] ? qlist_free_all+0x47/0xf0 [ 376.766286][ C1] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 376.771930][ C1] ? __kasan_slab_alloc+0x69/0x90 [ 376.776953][ C1] ? __kmalloc_noprof+0x2bf/0x820 [ 376.781974][ C1] ? page_ext_put+0x3e/0xd0 [ 376.786474][ C1] __reset_page_owner+0x84/0x190 [ 376.791405][ C1] __free_frozen_pages+0x79f/0x1090 [ 376.796604][ C1] ? __free_slab+0xd0/0x220 [ 376.801108][ C1] qlist_free_all+0x47/0xf0 [ 376.805603][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 376.811060][ C1] __kasan_slab_alloc+0x69/0x90 [ 376.815907][ C1] __kmalloc_noprof+0x2bf/0x820 [ 376.820756][ C1] ? usb_hcd_submit_urb+0x5e8/0x2150 [ 376.826041][ C1] usb_hcd_submit_urb+0x5e8/0x2150 [ 376.831156][ C1] usb_submit_urb+0x827/0x19b0 [ 376.835928][ C1] ? __init_swait_queue_head+0xca/0x150 [ 376.841471][ C1] usb_start_wait_urb+0x10e/0x580 [ 376.846495][ C1] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 376.852036][ C1] ? trace_kmalloc+0xeb/0x110 [ 376.856718][ C1] ? __asan_memset+0x23/0x50 [ 376.861310][ C1] usb_control_msg+0x328/0x4b0 [ 376.866073][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 376.871353][ C1] ? __pfx_down_read+0x10/0x10 [ 376.876113][ C1] hub_port_reset+0x297/0x1c60 [ 376.880884][ C1] ? __pfx_hub_port_reset+0x10/0x10 [ 376.886082][ C1] ? kasan_save_track+0x14/0x30 [ 376.890927][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 376.895685][ C1] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 376.901231][ C1] ? hub_port_init+0x175/0x37f0 [ 376.906086][ C1] hub_port_init+0x1f2/0x37f0 [ 376.910771][ C1] hub_event+0x2f27/0x4af0 [ 376.915199][ C1] ? __pfx_hub_event+0x10/0x10 [ 376.919958][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 376.925596][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.930362][ C1] process_one_work+0xa23/0x1940 [ 376.935301][ C1] ? __pfx_process_one_work+0x10/0x10 [ 376.940672][ C1] ? __pfx_hub_event+0x10/0x10 [ 376.945430][ C1] worker_thread+0x5ef/0xe50 [ 376.950018][ C1] ? __pfx_worker_thread+0x10/0x10 [ 376.955123][ C1] ? kthread+0x13a/0x450 [ 376.959360][ C1] ? __pfx_worker_thread+0x10/0x10 [ 376.964460][ C1] kthread+0x370/0x450 [ 376.968524][ C1] ? __pfx_kthread+0x10/0x10 [ 376.973114][ C1] ret_from_fork+0x72b/0xd50 [ 376.977700][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 376.982808][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.987566][ C1] ? __switch_to+0x800/0x10f0 [ 376.992246][ C1] ? __pfx_kthread+0x10/0x10 [ 376.996837][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.001609][ C1] [ 377.004619][ C1] rcu: rcu_preempt kthread starved for 285 jiffies! g24841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 377.015626][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.025584][ C1] rcu: RCU grace-period kthread stack dump: [ 377.031461][ C1] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 377.044944][ C1] Call Trace: [ 377.048214][ C1] [ 377.051138][ C1] __schedule+0x125c/0x6730 [ 377.055658][ C1] ? __pfx___schedule+0x10/0x10 [ 377.060501][ C1] ? find_held_lock+0x2b/0x80 [ 377.065178][ C1] ? schedule+0x225/0x2c0 [ 377.069506][ C1] schedule+0xdd/0x2c0 [ 377.073571][ C1] schedule_timeout+0x127/0x280 [ 377.078413][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 377.083777][ C1] ? __pfx_process_timeout+0x10/0x10 [ 377.089064][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 377.094866][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 377.100325][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 377.105086][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.110364][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 377.115730][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 377.120664][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 377.125859][ C1] rcu_gp_kthread+0x179/0x230 [ 377.130531][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.135720][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.141525][ C1] ? __kthread_parkme+0x18c/0x230 [ 377.146559][ C1] ? kthread+0x13a/0x450 [ 377.150818][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.156020][ C1] kthread+0x370/0x450 [ 377.160096][ C1] ? __pfx_kthread+0x10/0x10 [ 377.164685][ C1] ret_from_fork+0x72b/0xd50 [ 377.169272][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 377.174381][ C1] ? __switch_to+0x800/0x10f0 [ 377.179058][ C1] ? __pfx_kthread+0x10/0x10 [ 377.183650][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.188423][ C1] [ 377.191430][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 377.197738][ C1] Sending NMI from CPU 1 to CPUs 0: [ 377.202939][ C0] NMI backtrace for cpu 0 [ 377.202953][ C0] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.202973][ C0] Tainted: [L]=SOFTLOCKUP [ 377.202978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 377.202986][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 377.203007][ C0] RIP: 0010:lock_acquire+0x1e4/0x370 [ 377.203023][ C0] Code: c7 c7 46 d4 17 8e 48 83 c4 28 e8 e7 c8 d3 09 b8 ff ff ff ff 65 0f c1 05 3a 34 7e 12 83 f8 01 4c 8b 14 24 0f 85 52 01 00 00 9c <58> f6 c4 02 0f 85 35 01 00 00 4d 85 d2 0f 84 67 fe ff ff fb e9 61 [ 377.203035][ C0] RSP: 0018:ffffc90000006f08 EFLAGS: 00000046 [ 377.203046][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 41d74dc563097682 [ 377.203054][ C0] RDX: 0000000000000000 RSI: ffffffff8e17d446 RDI: ffffffff8c400c80 [ 377.203063][ C0] RBP: ffff8880b8428418 R08: 00000000ffffffff R09: 0000000000000075 [ 377.203072][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 377.203080][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 377.203088][ C0] FS: 0000000000000000(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 377.203102][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.203111][ C0] CR2: 0000555573cd94e8 CR3: 0000000059c9c000 CR4: 00000000003526f0 [ 377.203120][ C0] Call Trace: [ 377.203125][ C0] [ 377.203133][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 377.203151][ C0] ? hrtimer_interrupt+0x14f/0x940 [ 377.203169][ C0] hrtimer_interrupt+0x14f/0x940 [ 377.203188][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 377.203202][ C0] ? unwind_next_frame+0x3c8/0x2090 [ 377.203221][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 377.203241][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 377.203261][ C0] sysvec_apic_timer_interrupt+0x51/0xc0 [ 377.203279][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.203294][ C0] RIP: 0010:__local_bh_enable_ip+0xa6/0x120 [ 377.203311][ C0] Code: 65 01 1d 9d e8 9a 12 65 66 f7 05 94 e8 9a 12 ff ff 74 4d bf 01 00 00 00 e8 37 5f 0c 00 e8 12 b7 49 00 fb 65 8b 05 7a e8 9a 12 <85> c0 74 50 5b 5d c3 cc cc cc cc 65 8b 05 64 2a 9b 12 85 c0 75 a0 [ 377.203323][ C0] RSP: 0018:ffffc90000007138 EFLAGS: 00000202 [ 377.203333][ C0] RAX: 0000000080000101 RBX: 00000000fffffe01 RCX: 0000000000000004 [ 377.203341][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80 [ 377.203350][ C0] RBP: ffffffff8a49a90f R08: 0000000000000001 R09: 0000000000000000 [ 377.203358][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92000000e4b [ 377.203366][ C0] R13: 0000000000000001 R14: ffff8880781102a0 R15: dffffc0000000000 [ 377.203376][ C0] ? ipt_do_table+0xd4f/0x1b00 [ 377.203399][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 377.203414][ C0] ipt_do_table+0xd5c/0x1b00 [ 377.203444][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 377.203462][ C0] ? __lock_acquire+0x49f/0x1a40 [ 377.203479][ C0] iptable_mangle_hook+0x69/0x4b0 [ 377.203492][ C0] ? lock_acquire+0x1b9/0x370 [ 377.203507][ C0] nf_hook_slow+0xbf/0x220 [ 377.203525][ C0] ip_output+0x703/0xc10 [ 377.203544][ C0] ? __pfx_ip_output+0x10/0x10 [ 377.203560][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 377.203576][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 377.203596][ C0] ? __pfx_ip_output+0x10/0x10 [ 377.203613][ C0] ip_local_out+0x193/0x1f0 [ 377.203632][ C0] synproxy_send_tcp.isra.0+0x481/0x680 [ 377.203652][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 377.203672][ C0] ? find_held_lock+0x2b/0x80 [ 377.203690][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 377.203708][ C0] ? net_generic+0xea/0x2a0 [ 377.203728][ C0] nft_synproxy_do_eval+0xa1c/0xce0 [ 377.203748][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 377.203770][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 377.203789][ C0] nft_do_chain+0x2e5/0x19d0 [ 377.203810][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 377.203828][ C0] ? mark_held_locks+0x40/0x70 [ 377.203842][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 377.203859][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 377.203874][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 377.203897][ C0] nft_do_chain_inet+0xf3/0x400 [ 377.203915][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 377.203933][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 377.203953][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 377.203969][ C0] nf_hook_slow+0xbf/0x220 [ 377.203986][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 377.204001][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 377.204017][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 377.204031][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 377.204047][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 377.204063][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 377.204080][ C0] ip_local_deliver+0x163/0x1f0 [ 377.204095][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 377.204110][ C0] ip_rcv+0x33a/0x3c0 [ 377.204125][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 377.204139][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 377.204158][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 377.204177][ C0] ? lock_acquire+0x1b9/0x370 [ 377.204191][ C0] ? process_backlog+0x32a/0x1580 [ 377.204209][ C0] ? process_backlog+0x32a/0x1580 [ 377.204225][ C0] __netif_receive_skb+0x1f/0x120 [ 377.204242][ C0] process_backlog+0x37a/0x1580 [ 377.204262][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 377.204280][ C0] net_rx_action+0xa40/0xf20 [ 377.204298][ C0] ? find_held_lock+0x2b/0x80 [ 377.204317][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 377.204335][ C0] ? taprio_dequeue+0x166/0x5f0 [ 377.204352][ C0] ? net_tx_action+0x6c7/0xf50 [ 377.204366][ C0] handle_softirqs+0x1ea/0x9b0 [ 377.204382][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 377.204398][ C0] ? neigh_periodic_work+0x6da/0xc10 [ 377.204413][ C0] do_softirq+0xac/0xe0 [ 377.204432][ C0] [ 377.204436][ C0] [ 377.204440][ C0] __local_bh_enable_ip+0xf8/0x120 [ 377.204455][ C0] neigh_periodic_work+0x6da/0xc10 [ 377.204472][ C0] ? __pfx_neigh_periodic_work+0x10/0x10 [ 377.204491][ C0] process_one_work+0xa23/0x1940 [ 377.204507][ C0] ? __pfx_process_one_work+0x10/0x10 [ 377.204522][ C0] ? __pfx_neigh_periodic_work+0x10/0x10 [ 377.204538][ C0] worker_thread+0x5ef/0xe50 [ 377.204553][ C0] ? __pfx_worker_thread+0x10/0x10 [ 377.204565][ C0] ? kthread+0x13a/0x450 [ 377.204582][ C0] ? __pfx_worker_thread+0x10/0x10 [ 377.204594][ C0] kthread+0x370/0x450 [ 377.204611][ C0] ? __pfx_kthread+0x10/0x10 [ 377.204630][ C0] ret_from_fork+0x72b/0xd50 [ 377.204646][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 377.204662][ C0] ? __switch_to+0x800/0x10f0 [ 377.204681][ C0] ? __pfx_kthread+0x10/0x10 [ 377.204699][ C0] ret_from_fork_asm+0x1a/0x30 [ 377.204721][ C0]